last executing test programs: 21m6.481476249s ago: executing program 32 (id=47): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 17m16.557716986s ago: executing program 33 (id=690): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0101, 0x0) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000180), 0x32700, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x400) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c) 15m28.570413814s ago: executing program 34 (id=1050): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) eventfd(0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 14m56.590633266s ago: executing program 35 (id=1206): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 11m33.618092477s ago: executing program 1 (id=2618): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rpm_return_int\x00', r1, 0x0, 0x800000000000000}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 11m33.140319535s ago: executing program 1 (id=2622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000004}, 0x18) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbff, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x0, 0x1, 0x8}}}}, @NHA_OIF={0x8, 0x5, r4}]}, 0x3c}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000003c0)={0x0, 0x0, @auto=[0x29, 0x23, 0x25]}, 0xb, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r8, &(0x7f0000004200)='t', 0x1) fallocate(r7, 0x0, 0x0, 0x1001f0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)={@id={0x2, 0x0, @c}, 0x1, r5, '\x00', @auto=[0x17]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) 11m32.718924523s ago: executing program 8 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 11m32.645985793s ago: executing program 0 (id=2627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m32.315058327s ago: executing program 8 (id=2629): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)={[{@utf8}, {@hide, 0x0}, {@utf8}, {@overriderock}, {@map_off}, {@map_normal, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {@overriderock}, {@map_off}, {@map_normal}, {}]}, 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC") 11m32.273787185s ago: executing program 1 (id=2630): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 11m32.190432761s ago: executing program 0 (id=2631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000001605000300010000002000018007000100637400001400028008000240000000110800"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11m31.646132331s ago: executing program 8 (id=2635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 11m31.162249955s ago: executing program 8 (id=2637): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32, @ANYBLOB="14000600"], 0x54}}, 0x0) 11m30.763337941s ago: executing program 1 (id=2640): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r0, 0x0, 0x478) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x2) 11m30.629938832s ago: executing program 8 (id=2641): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x58, 0x0, &(0x7f0000000440)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/47, 0x2f, 0x2, 0x2c}, @flat=@binder={0x73622a85, 0x110a}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x40}], 0xcd, 0x0, &(0x7f00000004c0)="3ac253d9af4782e5c2057f945eb145e261d36ef0bed694e901ca16cc3d7d7b21c1b4d5d7eee3e3d21d4cd4fc77aa3050d4f2eaa5304c2972ff2e9b9ec62a00ba0a7a1186f4552a638ecfc2e915fe97d964a6e77d625efb2f20a5fee21af7be756ece483e8b29b03eeb6669601a4555eea3c2125396bcded119116cb3d15c41e85ca2d67f44f3fe28385a153eb5568b063ccf554a01a7439934067932c2b47167ba9498cecf79379bf1a9b7f5c9e8b7d410e94c1c02b11853d23067b331f102c9b03f9827f41fdabdd6eef03274"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x29, 0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000080) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000101}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x3b}, 0x28) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x23, &(0x7f0000000400)=""/102, &(0x7f0000000140)=0x66) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0xadb}}, {@bsdgroups}, {@nobarrier}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@nojournal_checksum}]}, 0x2, 0x46a, &(0x7f0000000d00)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0600000000000000ffffff7f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m29.910452539s ago: executing program 6 (id=2645): prctl$PR_GET_DUMPABLE(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpgrp(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) 11m29.830218921s ago: executing program 7 (id=2646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 11m29.543454035s ago: executing program 1 (id=2647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 11m29.435649885s ago: executing program 6 (id=2648): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="660a000000000000611169000000000085000000020000009500000000000000f3fb6004cbff15f40b0d5d52586a5c9c61054ec59b7548c64b9eeea5ecebb8a6214cc14a68c4085544f69a632d3e2a50c91c17ec0281875d19f68c73d877da2bb83d31c8ba658728be54f62b83c9c07d82ac5e66d6bd6ea274f00522b9f6ef5bb0ba7b794ec2b19fddd7195593b5123bc187763c4a9707a4597bb8fcb2c55ad44943eb1d94f1af91"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/170, 0xaa}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) io_setup(0x1, &(0x7f00000012c0)=0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x300000000000000, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(r6, 0x40, 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)={r8, r9+10000000}) 11m29.382363822s ago: executing program 7 (id=2649): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{}], 0x1}, 0x20000880) 11m29.332986482s ago: executing program 8 (id=2650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 11m28.986144296s ago: executing program 1 (id=2651): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 11m28.969210858s ago: executing program 7 (id=2652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79"}}}}}}}, 0x0) 11m28.852372548s ago: executing program 6 (id=2653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 11m28.819772197s ago: executing program 0 (id=2654): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 11m28.562950266s ago: executing program 7 (id=2655): creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11m28.367653586s ago: executing program 0 (id=2656): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 11m27.909473067s ago: executing program 7 (id=2657): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r0, 0x0, 0x478) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x2) 11m27.814481789s ago: executing program 0 (id=2658): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 11m27.643929086s ago: executing program 6 (id=2659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 11m27.282978692s ago: executing program 6 (id=2660): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x58, 0x0, &(0x7f0000000440)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/47, 0x2f, 0x2, 0x2c}, @flat=@binder={0x73622a85, 0x110a}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x40}], 0xcd, 0x0, &(0x7f00000004c0)="3ac253d9af4782e5c2057f945eb145e261d36ef0bed694e901ca16cc3d7d7b21c1b4d5d7eee3e3d21d4cd4fc77aa3050d4f2eaa5304c2972ff2e9b9ec62a00ba0a7a1186f4552a638ecfc2e915fe97d964a6e77d625efb2f20a5fee21af7be756ece483e8b29b03eeb6669601a4555eea3c2125396bcded119116cb3d15c41e85ca2d67f44f3fe28385a153eb5568b063ccf554a01a7439934067932c2b47167ba9498cecf79379bf1a9b7f5c9e8b7d410e94c1c02b11853d23067b331f102c9b03f9827f41fdabdd6eef03274"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x29, 0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000080) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000101}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x3b}, 0x28) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x23, &(0x7f0000000400)=""/102, &(0x7f0000000140)=0x66) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0xadb}}, {@bsdgroups}, {@nobarrier}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@nojournal_checksum}]}, 0x2, 0x46a, &(0x7f0000000d00)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0600000000000000ffffff7f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m26.933747233s ago: executing program 7 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) pread64(r2, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 11m26.228451568s ago: executing program 0 (id=2662): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{}], 0x1}, 0x20000880) 11m25.917644357s ago: executing program 6 (id=2663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) 11m13.320574922s ago: executing program 36 (id=2651): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 11m13.085197744s ago: executing program 37 (id=2650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 11m10.949193423s ago: executing program 38 (id=2662): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{}], 0x1}, 0x20000880) 11m9.689597186s ago: executing program 39 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) pread64(r2, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 11m9.211537223s ago: executing program 40 (id=2663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) 39.098913373s ago: executing program 9 (id=5687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 37.829732033s ago: executing program 9 (id=5690): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 37.134669258s ago: executing program 9 (id=5693): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9e19098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}}) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/87, 0x57}, {0x0}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000180)=""/88, 0x58}], 0x4, 0x3, 0x7ff, 0xd) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 36.415952371s ago: executing program 9 (id=5697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d28616573f225000000000000000000000000000000100000000000000014000300e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 35.718725979s ago: executing program 9 (id=5701): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x58, 0x0, &(0x7f0000000440)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/47, 0x2f, 0x2, 0x2c}, @flat=@binder={0x73622a85, 0x110a}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x40}], 0xcd, 0x0, &(0x7f00000004c0)="3ac253d9af4782e5c2057f945eb145e261d36ef0bed694e901ca16cc3d7d7b21c1b4d5d7eee3e3d21d4cd4fc77aa3050d4f2eaa5304c2972ff2e9b9ec62a00ba0a7a1186f4552a638ecfc2e915fe97d964a6e77d625efb2f20a5fee21af7be756ece483e8b29b03eeb6669601a4555eea3c2125396bcded119116cb3d15c41e85ca2d67f44f3fe28385a153eb5568b063ccf554a01a7439934067932c2b47167ba9498cecf79379bf1a9b7f5c9e8b7d410e94c1c02b11853d23067b331f102c9b03f9827f41fdabdd6eef03274"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x29, 0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000080) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000101}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x3b}, 0x28) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x23, &(0x7f0000000400)=""/102, &(0x7f0000000140)=0x66) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0xadb}}, {@bsdgroups}, {@nobarrier}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@nojournal_checksum}]}, 0x2, 0x46a, &(0x7f0000000d00)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0600000000000000ffffff7f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.736117455s ago: executing program 9 (id=5709): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000086030000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) 28.88578851s ago: executing program 2 (id=5728): r0 = socket(0x1e, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 28.088980831s ago: executing program 2 (id=5732): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbff, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x0, 0x1, 0x8}}}}, @NHA_OIF={0x8}]}, 0x3c}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x400000, 0x96) r4 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000003c0)={0x0, 0x0, @auto=[0x29, 0x23, 0x25]}, 0xb, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r7, &(0x7f0000004200)='t', 0x1) fallocate(r6, 0x0, 0x0, 0x1001f0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000500)={@id={0x2, 0x0, @c}, 0x1, r4, '\x00', @auto=[0x17]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) 26.70689335s ago: executing program 2 (id=5737): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3ff) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 25.304626851s ago: executing program 2 (id=5741): getpgrp(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f00000010c0)=ANY=[], 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4010}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x6, 0x5}, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r6, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) sendto$inet(r6, &(0x7f0000000480)="69c581692bc0d447de1046be5305b8ee530dca3eaa6923039211eb540ac6a95f12c0e2a9a9", 0x25, 0x40, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0xfffffffc, @mcast2, 0xc}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000440)={r9, 0x59b}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r12, 0x917, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000200)={r10, 0x0, 0x100, 0x1ff, 0x1, 0x9}, &(0x7f00000002c0)=0x14) 13.010127179s ago: executing program 2 (id=5766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@commit={'commit', 0x3d, 0x4}}, {@heartbeat_none}, {@localflocks}, {@intr}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@noacl}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0xf9}}]}, 0x9, 0x442b, &(0x7f0000004480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xfffe82) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 10.450541503s ago: executing program 5 (id=5770): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='svcrdma_decode_rseg\x00', r0}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000240)) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8.860928602s ago: executing program 5 (id=5773): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce24", 0x44) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7f) 8.139723523s ago: executing program 5 (id=5774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x1802402, &(0x7f0000000500)={[{@nolazytime}, {@pqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@qnoenforce}, {}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@dont_hash}]}, 0x1, 0x96e2, &(0x7f0000032680)="$eJzs3Am4pnPhuPH3DGOXMVRSaiqiRdYsUWYGMxSSJdrtUpaSilYtUtoo0Z59y1aWULZWkr2FEkIlS6TFNsz/OjNnGOMm/fv9Lr/c931d57zv+7zP85zv+/08yzmaq80nbTxxMJhrML1xg1k7+6rJU8ZcscGth2+14FHLnXTnfg9dcfHxI48TRh4nDgaDUSNvD01fNnZw8imjBrNPW/5g8849z9D8g8HyIy9H9jNYefrD/JfOWG/qLM060KEHv+0z/WtaCwz/iOEnh+y316GDwWDMTNsPDQZDez7sg0rbfMLkSQ9aPeA2bDV65PnMX3NM/5r/gsFg/tMGfHzMvO7Q4/CRhn/mni84a/QGj8PP/q9r8wmT153Ff/hcnG1k2crD5/is56CxWY/zm5fYYtWRKZx2vA0Gw5e4h5wr/xVtPmHSeoNHvs4PDl/tvH2mTr9uzjmYfqOYezAYzDNyfZ3v8Xap/6wJE1eYds+e8XqEfcaxvCcdF8e+6YT7h2/Sg8FgocFg7Doz7gVVVVX139GEiSusCff/uR7t/n/iiYue1v2/qqrqv7d1J0xcYfheP8v9f75Hu//vuuj5H5n+3/7Hrzx9q/sf3w9RVVVV/1aT1sX7/5hHu/+vvObF63X/r6qq+u9to/Wn3f/nm+X+v/Cj3f9ff8Jqi42sN+P3hvtm2uXQTP97wr0zLZ9tpuX3zLR89Ez7mXn9OWZaftdMy+ccfg/WHzcYjJ3x7wWnPLh47Ljh90aW3z3T8vEP/judxdeaafmEmZZPmmn5xJGxDi+fPNPyyTOtv86jTHVVVdX/mTZaYdKag5n+nf3I4kVmvE/3/3NPv3rpx2u8VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV9d/Z/beecdZgMBgaDAajBoMpg5HnMz8Opk6dOnX49YnnXHLJ4zbQ/xsNnX3V5Cljrtjg1sO3WvCo5U66c78HZ+m/tv/+T1D/ScP+cx0zbjDYedPHeyj1ONT57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLuv/WMs0aOgVGDwZTByPM9Zzyevu/r3jCy6qqbnXT7AQ9uufj4HUaenX3V5Ck7PA5jfxwaGv6sY67Y4NbDt1rwqOVOunO/J8DZ89//Ceo/aZr/DkODwcj5PWb4XN5gwkabLDUYDA64/aTNVho88N4qw++tNna2wWzTNl1q2ve1F+cd77nO9Mfxw98WfmAfJ07b/7pTD55taJZBzNTLzr7u8LdsfueKsz4u+cifY9SMJ4dec+odU6dOnfqQhSPN9Qgbz9j/jM8y63k+Mvalhse+zG47vX2Zd+7x3qV32GnL7bfdftudl1thlRVXWn65lVZ9yTLb7bDjtstO//4IczZu2vc1H8uczTfrnN06YeY5m/WzPdKcjXv0OZu2xynvHdpkxpzN/m/O2ZqPPmfjdhj5QYuPHz3YYtrUDA0Gi681erD78Ivl5hwMFl97ZN1FhtddfeyowWDfBz/o8LM5HzgGh/YcXmfzSRtPfHBkD/+ED7tOP2TFxcePPE4YeZw4fYjjBg8eimMHJ58yanguHjLN8849z9D8g8HyIy9H9jNYdeTdg2asN3WWZh3o0IPf9pn+Na0Fhncy/OSty55x5fC5OMv2/xv9f13/H+a1ytADEzU08jWyznSvCZPXffBnTZuG4bmbbWTZysMms87Z/2QPG++42QdjHmW8k9aduMLw4lnmf8YmeHzdtsR575t+bI1fefpW9/9/o9B453uU8a47Acc736ON95j3X3TK9F39j413lmvdetO+j38s17rBo1/rZqMdbHvhYrNe6175yEN8yHk8Y47mnGWlR7rW7X7g8nsO73/8o1/r1hse++iHXOtGDQaLrznjWjd84Zs0erDv8Ivlh19MHj04avjFCtNezD04Z/jFi7feZcdthhesM2NOlh3e7/ixQ9Pcz1v5piWnfmHq1LVGxjJ+7EPHOnJ8jJv5fj5h7PTJnLHtjP0Orzpjvzc+dfp7k0b2O+Hf2O+MbWm8ty8w/b3JI/udOMt+Rz/Kfmds+7DzYamhBy5cj3C9mTTL9Wbkb5wZP+4hX3NM/5r/gsFg/tPId5Z1/+U1k87fuR5lvBMmrrDm8PhmOX8fOBzp/L1o8hXD94r5B4PBQoPB2HVmjP3fbOiRxjv7o493Iox39kcb72VH77T+/8B4BzON9yHH2eYbTT9W1hk5zib/G8fvjG1nvY6Nnvbu9Mv+Oo/lOjbuYdexD882apbJnqlH+p1tG1h/+vNFHvw996rjj5wx96Nn2e+/+p1tps8yBNexMbP8PT9qnWsHQzTnex6z+sVD+z/6nI8ePPRvixlzPmPbR5vzyY9lzp/x6HP+WH9PXuq5098fPcv4Z57zDT/99E/NmPM5Ztnvv5rzyY9+73j4nI8fjKY5X/ae6fP2aNfTR5rzGdvOmPPhj7ja2NkHaw/fs0bmfNJjmfNF/meO83lg/enPt31g0ZmHn/SaGXM+6xz/qzmf9O/O+bgHjvPFp733nFGDOeYY7L7lbrvtutz07zNeLj/9O1+L7rpq+jw/2r30kYxmbPto58Vaj8VozGMyGvpXRovO/khGD55ah+2y61P+f69Fa/27RgO+Fl1x5PR5e7Tfix5pzmdsS/fBhWfafta/Qzdaf9rv3fPNch+csQneB888fb29Z+xyZLP7ZhnmjPvqvTMtn22m5ffMtHz0TPuZef05Zlp+10zLhz/CHDOtP4N13PDfvCPLpzy4+tjhX57GjSy/e6bl4x/cdvG1Zlo+Yablk2ZaPvHBQ2PxyTMtnzzT+usM/s1m/DfpHWa9yNdjrf/+6y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9z9t55x1sgxMGowmDKY/nxo5HGw59CGt6wx/DgYDEavfNzUDR/v8T7ODZ191eQpY67Y4NbDt1rwqOVOunO/J8DZ89//Ceo/aZr/DkODwcj5PWaHwWCwwYSNNllqMBhsOPW4lUcNHnhvkeH3Vh87ajDYd+ghO5jzgXWG9hxeZ/NJG08cDOYaWWPcw37ow86jh6y4+PiRxwkjjxOnX5/GDR48XscOTj5l1GD2acsfbN655xmafzBYfuTlyH4GK09/mP/SGetNnaVZBzr04Ld9pn9Na4HhHzH8ZPftJz9zeK5m2f7/TDOu1TuM+perdv67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83f17/h0tT7QSdZe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f/vv/c/yvjqMenzn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7+W884a+QYGDUYTBlMfz6058jjYOiEk58/coiM3uPyIw5+vMf7ODd09lWTp4y5YoNbD99qwaOWO+nO/Z4AZ89//yeo/6Rp/jsMDQYj5/eYHQaDwQYTNtpkqcFgcPARl+8xavDAe4sMv7f62FGDwb5DD9nBnA+sM7Tn8DqbT9p44mAw18ga4x72Qx92Hj1kxcXHjzxOGHmcOP36NG7w4PE6dnDyKaMGs09b/mDzzj3P0PyDwfIjL0f2M1h5+sP8l85Yb+oszTrQoQe/7TP9a1oLDP+I4Sd7zXfVCcNzNcv2/2eaca3eYdS/XLXz313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MXdf+sZZ40cA6MGgymD6c9HjTwO7XnD9R/cZPhx+PWC6+x91eM93se5obOvmjxlzBUb3Hr4VgsetdxJd+73BDh7/vs/Qf0nDfvPdcy4wWDnTR/vodTjUOe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i7v/1jPOGnk66sGlo/bsuMCGzr5q8pQxV2xw6+FbLXjUcifdud/jPaD/tEfw/3D+mMX/I/ljFv+P5o9Z/D+WP2bx3yt/zOL/8fwxi//e+WMW/0/kj1n8P5k/ZvHfJ3/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/775Yxb//fLHLP6fzx+z+H8hf8ziv3/+mMX/i/ljFv8D8scs/gfmj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/rfwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bx/3b+mMX/O/ljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9u/pjF/7T8MYv/6fljFv8z8scs/t/LH7P4fz9/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/vPwxi//5+WMW/5/lj1n8L8gfs/j/PH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8if8zif2X+mMX/N/ljFv/f5o9Z/K/KH7P4/y5/zOJ/df6Yxf+a/DGL/7X5Yxb/3+ePWfyvyx+z+F+fP2bxvyF/zOL/h/wxi/8f88cs/n/KH7P435g/ZvH/c/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/P+SP2bxvy1/zOJ/e/6Yxf+v+WMW/zvyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6YxX9K/pjF/778MYv//fljFv+p+WMS/9kG+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/KH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/5Pzxyz+T8kfs/g/NX/M4r9I/pjF/2n5Yxb/RfPHLP5Pzx+z+D8jf8ziv1j+mMX/mfljFv9n5Y9Z/Mflj1n8n50/ZvF/Tv4Pa/aRR4P/c/PHLOf/4vljFv8l8scs/s/LH7P4L5k/ZvFfKn/M4v/8/DGL/wvyxyz+L8wfs/i/KH/M4r90/pjF/8X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/yX5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/af6YxX+1/DGL/+r5Yxb/l+WPWfxfnj9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/ySr/2R7zmhb/dVT+jz2L/7r5Yxb/V+SPWfxfmT9m8V8vf8ziv37+mMV/g/wxi/+r8scs/hvmj1n8X50/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/X5I9Z/DfLH7P4b54/ZvF/bf6Yxf91+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfzfkj9m8d8hf8zi/9b8MYv/2/LHLP475o9Z/HfKH7P475w/ZvHfJX/M4v/2/DGL/zvyxyz+u+aPWfzfmT9m8d8tf8zi/678MYv/u/PHLP7vyR+z+O+eP2bx3yN/zOL/3vwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/nvmj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n898ofs/h/PH/M4r93/pjF/xP5Yxb/T+aPWfz3yR+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8ziv2/+mMV/v/wxi//n88cs/l/IH7P4758/ZvH/Yv6Yxf+A/DGL/4H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/h/K3/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8v50/ZvH/Tv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/L+bP2bxPy1/zOJ/ev6Yxf+M/DGL//fyxyz+388fs/ifmT9m8T8r/2ntP9tDX1v8z84fs/ifkz9m8T83f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/T/PHLP7n5Y9Z/M/PH7P4/yx/zOJ/Qf6Yxf/n+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/y/yxyz+v8wfs/j/Kn/M4v/r/DGL/xX5Yxb/K/PHLP6/yR+z+P82f8zif1X+mMX/d/ljFv+r88cs/tfkj1n8r80fs/j/Pn/M4n9d/pjF//r8MYv/DfljFv8/5I9Z/P+YP2bx/1P+mMX/xvwxi/+f88cs/jflj1n8b84fs/jfkj9m8b81f8zi/5f8MYv/bfljFv/b88cs/n/NH7P435E/ZvH/W/6Yxf/v+WMW/3/kj1n8/5k/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/lPyxyz+9+WPWfzvzx+z+E/NH5P4zz7IH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxf1L+mMV/gfwxi/+Y/DGL/4L5Yxb/sfljFv+F8scs/gvnj1n8n5w/ZvF/Sv6Yxf+p+WMW/0Xyxyz+T8sfs/gvmj9m8X96/pjF/xn5Yxb/xfLHLP7PzB+z+D8rf8ziPy5/zOL/7Pwxi/9z8scs/s/NH7P4L54/ZvFfIn/M4v+8/DGL/5L5Yxb/pfLHLP7Pzx+z+L8gf8zi/8L8MYv/i/LHLP5L549Z/F+cP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/F+SP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/l+aPWfxXyx+z+K+eP2bxf1n+mMX/5fljFv818scs/uPzxyz+E/LHLP4T88cs/mvmj1n818ofs/ivnT9m8Z+UP2bxn5w/ZvFfJ3/M4r9u/pjF/xX5Yxb/V+aPWfzXE/qv8RjWsfivL/R/LFn8N8gfs/i/Kn/M4r9h/pjF/9WDS/KHLP4bdf5jFv+N88cs/pvkj1n8N80fs/i/Jn/M4r9Z/pjFf/P8MYv/a/PHLP6vyx+z+L8+f8zi/4b8MYv/G/PHLP5vyh+z+L85f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/lvwxi/8O+WMW/7fmj1n835Y/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv+3549Z/N+RP2bx3zV/zOL/zvwxi/9u+WMW/3flj1n8350/ZvF/T/6YxX/3/DGL/x75Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8d8zf8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziv1f+mMX/4/ljFv+988cs/p/IH7P4fzJ/zOK/T/6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/33zxyz+++WPWfw/nz9m8f9C/pjFf//8MYv/F/PHLP4H5I9Z/A/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/t/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/W/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zi/+38MYv/d/LHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv/efljFv/z88cs/j/LH7P4X5A/ZvH/ef6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+L/DGL/y/zxyz+v8ofs/j/On/M4n9F/pjF/8r8MYv/b/LHLP6/zR+z+F+VP2bx/13+mMX/6vwxi/81+WMW/2vzxyz+v88fs/hflz9m8b8+f8zif0P+mMX/D/ljFv8/5o9Z/P+UP2bxvzF/zOL/5/wxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+P8lf8zif1v+mMX/9vwxi/9f88cs/nfkj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/+U/DGL/335Yxb/+/PHLP5T88ck/qMH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/KH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/5Pzxyz+T8kfs/g/NX/M4r9I/pjF/2n5Yxb/RfPHLP5Pzx+z+D8jf8ziv1j+mMX/mfljFv9n5Y9Z/Mflj1n8n50/ZvF/Tv6Yxf+5+WMW/8Xzxyz+S+SPWfyflz9m8V8yf8ziv1T+mMX/+fljFv8X5I9Z/F+YP2bxf1H+mMV/6fwxi/+L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi/9L8MYv/avljFv/V88cs/i/LH7P4vzx/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8if8zi/8r8MYv/evljFv/188cs/hvkj1n8X5U/ZvHfMH/M4v/q/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vyZ/zOK/Wf6YxX/z/DGL/2vzxyz+r8sfs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/5b8MYv/DvljFv+35o9Z/N+WP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/t+ePWfzfkT9m8d81f8zi/878MYv/bvljFv935Y9Z/N+dP2bxf0/+mMV/9/wxi/8e+WMW//fmj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvHfM3/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4r9X/pjF/+P5Yxb/vfPHLP6fyB+z+H8yf8ziv0/+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv9988cs/vvlj1n8P58/ZvH/Qv6YxX///DGL/xfzxyz+B+SPPdR/1OM9nP+8R/A/MH/Mcv5/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+38wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf9b+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOL/7fwxi/938scs/iflj1n8T84fs/ifkj9m8T81f8zi/938MYv/afljFv/T88cs/mfkj1n8v5c/ZvH/fv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOL/0/wxi/95+WMW//Pzxyz+P8sfs/hfkD9m8f95/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi/4v8MYv/L/PHLP6/yh+z+P86f8zif0X+mMX/yvwxi/9v8scs/r/NH7P4X5U/ZvH/Xf6Yxf/q/DGL/zX5Yxb/a/PHLP6/zx+z+F+XP2bxvz5/zOJ/Q/6Yxf8P+WMW/z/mj1n8/5Q/ZvG/MX/M4v/n/DGL/035Yxb/m/PHLP635I9Z/G/NH7P4/yV/zOJ/W/6Yxf/2/DGL/1/zxyz+d+SPWfz/lj9m8f97/pjF/x/5Yxb/f+aPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/5T8MYv/ffljFv/788cs/lPzxyT+cwzyxyz+Q/ljFv9R+WMW/9nyxyz+s+ePWfxH549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8n5Q/ZvFfIH/M4j8mf8ziv2D+mMV/bP6YxX+h/DGL/8L5Yxb/J+ePWfyfkj9m8X9q/pjFf5H8MYv/0/LHLP6L5o9Z/J+eP2bxf0b+mMV/sfwxi/8z88cs/s/KH7P4j8sfs/g/O3/M4v+c/DGL/3Pzxyz+i+ePWfyXyB+z+D8vf8ziv2T+mMV/qfwxi//z88cs/i/IH7P4vzB/zOL/ovwxi//S+WMW/xfnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5fkj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/pfljFv/V8scs/qvnj1n8X5Y/ZvF/ef6YxX+N/DGL//j8MYv/hPwxi//E/DGL/5r5Yxb/tfLHLP5r549Z/Cflj1n8J+ePWfzXyR+z+K+bP2bxf0X+mMX/lfljFv/18scs/uvnj1n8N8gfs/i/Kn/M4r9h/pjF/9X5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvF/Tf6YxX+z/DGL/+b5Yxb/1+aPWfxflz9m8X99/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/LfljFv8d8scs/m/NH7P4vy1/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP5vzx+z+L8jf8ziv2v+mMX/nfljFv/d8scs/u/KH7P4vzt/zOL/nvwxi//u+WMW/z3yxyz+780fs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4r9n/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjFf6/8MYv/x/PHLP57549Z/D+RP2bx/2T+mMV/n/wxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/vvmj1n898sfs/h/Pn/M4v+F/DGL//75Yxb/L+aPWfwPyB+z+B+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/L+ZP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/t/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/9v5Yxb/7+SPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+7+WMW/9Pyxyz+p+ePWfzPyB+z+H8vf8zi//38sSeo/9aDWfzPzB97gvpPa2b/s/LHLP5n549Z/M/JH7P4n5s/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf+n+WMW//Pyxyz+5+ePWfx/lj9m8b8gf8zi//P8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/F/ljFv9f5o9Z/H+VP2bx/3X+mMX/ivwxi/+V+WMW/9/kj1n8f5s/ZvG/Kn/M4v+7/DGL/9X5Yxb/a/LHLP7X5o9Z/H+fP2bxvy5/zOJ/ff6Yxf+G/DGL/x/yxyz+f8wfs/j/KX/M4n9j/pjF/8/5Yxb/m/LHLP43549Z/G/JH7P435o/ZvH/S/6Yxf+2/DGL/+1W/7kf/W2L/1+t/v8ii/8d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOI/JX/M4n9f/pjF//78MYv/1Pwxif+cg/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8n5Y9Z/BfIH7P4j8kfs/gvmD9m8R+bP2bxXyh/zOK/cP6Yxf/J+WMW/6fkj1n8n5o/ZvFfJH/M4v+0/DGL/6L5Yxb/p+ePWfyfkT9m8V8sf8zi/8z8MYv/s/LHLP7j8scs/s/OH7P4Pyd/zOL/3Pwxi//i+WMW/yXyxyz+z8sfm9V/zsd7QP9pj+C/ZP6Y5fxfKn/M4v/8/DGL/wvyxyz+L8wfs/i/KH/M4r90/pjF/8X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/yX5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/af6YxX+1/DGL/+r5Yxb/l+WPWfxfnj9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv+a/8p/rf3lc/0ez+K/V+Y9Z/NfOH7P4T8ofs/hPzh+z+K+TP2bxXzd/zOL/ivwxi/8r88cs/uvlj1n8188fs/hvkD9m8X9V/pjFf8P8MYv/q/PHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v+a/DGL/2b5Yxb/zfPHLP6vzR+z+L8uf8zi//r8MYv/G/LHLP5vzB+z+L8pf8zi/+b8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/9b8scs/jvkj1n835o/ZvF/W/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/N+eP2bxf0f+mMV/1/wxi/8788cs/rvlj1n835U/ZvF/d/6Yxf89+WMW/93zxyz+e+SPWfzfmz9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjFf8/8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/XvljFv+P549Z/PfOH7P4fyJ/zOL/yfwxi/8++WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8980fs/jvlz9m8f98/pjF/wv5Yxb//fPHLP5fzB+z+B+QP2bxPzB/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4fzN/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9v5Y9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/t/PHLP7fyR+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/3fzxyz+p+WPWfxPzx+z+J+RP2bx/17+mMX/+/ljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/T/PHLP7n5Y9Z/M/PH7P4/yx/zOJ/Qf6Yxf/n+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/y/yxyz+v8wfs/j/Kn/M4v/r/DGL/xX5Yxb/K/PHLP6/yR+z+P82f8zif1X+mMX/d/ljFv+r88cs/tfkj1n8r80fs/j/Pn/M4n9d/pjF//r8MYv/DfljFv8/5I9Z/P+YP2bx/1P+mMX/xvwxi/+f88cs/jflj1n8b84fs/jfkj9m8b81f8zi/5f8MYv/bfljFv/b88cs/n/NH7P435E/ZvH/W/6Yxf/v+WMW/3/kj1n8/5k/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/lPyxyz+9+WPWfzvzx+z+E/NH5P4zzXIH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxf1L+mMV/gfwxi/+Y/DGL/4L5Yxb/sfljFv+F8scs/gvnj1n8n5w/ZvF/Sv6Yxf+p+WMW/0Xyxyz+T8sfs/gvmj9m8X96/pjF/xn5Yxb/xfLHLP7PzB+z+D8rf8ziPy5/zOL/7Pwxi/9z8scs/s/NH7P4L54/ZvFfIn/M4v+8/DGL/5L5Yxb/pfLHLP7Pzx+z+L8gf8zi/8L8MYv/i/LHLP5L549Z/F+cP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/F+SP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/l+aPWfxXyx+z+K+eP2bxf1n+mMX/5fljFv818scs/uPzxyz+E/LHLP4T88cs/mvmj1n818ofs/ivnT9m8Z+UP2bxn5w/ZvFfJ3/M4r9u/pjF/xX5Yxb/V+aPWfzXyx+z+K+fP2bx30DnP/UxrWXxf5XO/7Fl8d8wf8zi/+r8MYv/RvljFv+N88cs/pvkj1n8N80fs/i/Jn/M4r9Z/pjFf/P8MYv/a/PHLP6vyx+z+L8+f8zi/4b8MYv/G/PHLP5vyh+z+L85f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/lvwxi/8O+WMW/7fmj1n835Y/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv+3549Z/N+RP2bx3zV/zOL/zvwxi/9u+WMW/3flj1n8350/ZvF/T/6YxX/3/DGL/x75Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8d8zf8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziv1f+mMX/4/ljFv+988cs/p/IH7P4fzJ/zOK/T/6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/33zxyz+++WPWfw/nz9m8f9C/pjFf//8MYv/F/PHLP4H5I9Z/A/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/t/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/W/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zi/+38MYv/d/LHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv/efljFv/z88cs/j/LH7P4X5A/ZvH/ef6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+L/DGL/y/zxyz+v8ofs/j/On/M4n9F/pjF/8r8MYv/b/LHLP6/zR+z+F+VP2bx/13+mMX/6vwxi/81+WMW/2vzxyz+v88fs/hflz9m8b8+f8zif0P+mMX/D/ljFv8/5o9Z/P+UP2bxvzF/zOL/5/wxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+P8lf8zif1v+mMX/9vwxi/9f88cs/nfkj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/+U/DGL/335Yxb/+/PHLP5T88ck/nMP8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+UP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/yfnj1n8n5I/ZvF/av4zmmPmFxb/RfLHLP5Pyx+z+C+aP2bxf3r+mMX/GfljFv/F8scs/s/MH7P4Pyt/zOI/Ln/M4v/s/DGL/3Pyxyz+z80fs/gvnj9m8V8if8zi/7z8MYv/kvljFv+l8scs/s/PH7P4vyB/zOL/wvwxi/+L8scs/kvnj1n8X5w/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5I/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X5o9Z/FfLH7P4r54/ZvF/Wf6Yxf/l+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/FfljT3z/0Q+8lf/De+L7T2vu9fLHLP7r549Z/DfIH7P4vyp/zOK/Yf6Yxf/V+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf03+mMV/s/wxi//m+WMW/9fmj1n8X5c/ZvF/ff6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/y35Yxb/HfLHLP5vzR+z+L8tf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+b88fs/i/I3/M4r9r/pjF/535Yxb/3fLHLP7vyh+z+L87f8zi/578MYv/7vljFv898scs/u/NH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOK/Z/6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6YxX+v/DGL/8fzxyz+e+ePWfw/kT9m8f9k/pjFf5/8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP775o9Z/PfLH7P4fz5/zOL/hfwxi//++WMW/y/mj1n8D8gfs/gfmD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfy/mT9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7fyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf/b+WMW/+/kj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/u/ljFv/T8scs/qfnj1n8z8gfs/h/L3/M4v/9/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf+n+WMW//Pyxyz+5+ePWfx/lj9m8b8gf8zi//P8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/F/ljFv9f5o9Z/H+VP2bx/3X+mMX/ivwxi/+V+WMW/9/kj1n8f5s/ZvG/Kn/M4v+7/LGH+o9+vIfzn/cI/lfnj1nO/2vyxyz+1+aPWfx/nz9m8b8uf8zif33+mMX/hvwxi/8f8scs/n/MH7P4/yl/zOJ/Y/6Yxf/P+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bx/0v+mMX/tvwxi//t+WMW/7/mj1n878gfs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW/yn5Yxb/+/LHLP73549Z/Kfmj0n85xnkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Y098/7keeCv/h/fE95/WPPPlj1n8588fs/g/KX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5Pzh+z+D8lf8zi/9T8MYv/IvljFv+n5Y9Z/BfNH7P4Pz1/zOL/jPwxi/9i+WMW/2fmj1n8n5U/ZvEflz9m8X92/pjF/zn5Yxb/5+aPWfwXzx+z+C+RP2bxf17+mMV/yfwxi/9S+WMW/+fnj1n8X5A/ZvF/Yf6Yxf9F+WMW/6Xzxyz+L84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8kfs/ivpPSf+qF/tYbFf2Wl/7/O4r9K/pjFf9X8MYv/S/PHLP6r5Y9Z/FfPH7P4vyx/zOL/8vwxi/8a+WMW//H5Yxb/CfljFv+J+WMW/zXzxyz+a+WPWfzXzh+z+E/KH7P4T84fs/ivkz9m8V83f8zi/4r8MYv/K/PHLP7r5Y9Z/NfPH7P4b5A/ZvF/Vf6YxX/D/DGL/6vzxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/mvwxi/9m+WMW/83zxyz+r80fs/i/Ln/M4v/6/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/W/LHLP475I9Z/N+aP2bxf1v+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfzfnj9m8X9H/pjFf9f8MYv/O/PHLP675Y9Z/N+VP2bxf3f+mMX/PfljFv/d88cs/nvkj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/P/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/175Yxb/j+ePWfz3zh+z+H8if8zi/8n8MYv/PvljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/PfNH7P475c/ZvH/fP6Yxf8L+WMW//3zxyz+X8wfs/gfkD9m8T8wf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+H8zf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/b+WPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/7fzxyz+38kfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9388cs/qflj1n8T88fs/ifkT9m8f9e/pjF//v5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+5+WPWfzPzx+z+P8sf8zif0H+mMX/5/ljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8v8scs/r/MH7P4/yp/zOL/6/wxi/8V+WMW/yvzxyz+v5nZf6iDYUYW/99Gjln8r8ofs/j/Ln/M4n91/pjF/5r8MYv/tfljFv/f549Z/K/LH7P4X58/ZvG/IX/M4v+H/DGL/x/zxyz+f8ofs/jfmD9m8f9z/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8/5I/ZvG/LX/M4n97/pjF/6/5Yxb/O/LHLP5/yx+z+P89f8zi/4/8MYv/P/PHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjFf0r+mMX/vvwxi//9+WMW/6n5YxL/eQf5Yxb//i/fOIv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/KH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/5Pzxyz+T8kfs/g/NX/M4r9I/pjF/2n5Yxb/RfPHLP5Pzx+z+D8jf8ziv1j+mMX/mfljFv9n5Y9Z/Mflj1n8n50/ZvF/Tv6Yxf+5+WMW/8Xzxyz+S+SPWfyflz9m8V8yf8ziv1T+mMX/+fljFv8X5I9Z/F+YP2bxf1H+mMV/6fwxi/+L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi/9L8MYv/avljFv/V88cs/i/LH7P4vzx/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8if8zi/8r8MYv/evljFv/188cs/hvkj1n8X5U/ZvHfMH/M4v/q/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH3si+0/90ANL531N/tgT2X/m83+z/DGL/+b5Yxb/1+aPWfxflz9m8X99/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/LfljFv8d8scs/m/NH7P4vy1/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP5vzx+z+L8jf8ziv2v+mMX/nfljFv/d8scs/u/KH7P4vzt/zOL/nvwxi//u+WMW/z3yxyz+780fs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4r9n/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjFf6/8MYv/x/PHLP57549Z/D+RP2bx/2T+mMV/n/wxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/vvmj1n898sfs/h/Pn/M4v+F/DGL//75Yxb/L+aPWfwPyB+z+B+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/L+ZP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/t/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/9v5Yxb/7+SPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+7+WMW/9Pyxyz+p+ePWfzPyB+z+H8vf8zi//38MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb/8/LHLP7n549Z/H+WP2bxvyB/zOL/8/wxi/+F+WMW/4vyxyz+F+ePWfwv8fnP/VhWsvhf6vN/TFn8L8sfs/hfnj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8if8zif2X+mMX/N/ljFv/f5o9Z/K/KH7P4/y5/zOJ/df6Yxf+a/DGL/7X5Yxb/3+ePWfyvyx+z+F+fP2bxvyF/zOL/h/wxi/8f88cs/n/KH7P435g/ZvH/c/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/P+SP2bxvy1/zOJ/e/6Yxf+v+WMW/zvyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6YxX9K/pjF/778MYv//fljFv+p+WMS//kG+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/KH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/5Pzxyz+T8kfs/g/NX/M4r9I/pjF/2n5Yxb/RfPHLP5Pzx+z+D8jf8ziv1j+mMX/mfljFv9n5Y9Z/Mflj1n8n50/Nqv/1KlTpz7eY/qPegT/5+SPWc7/5+aPWfwXzx+z+C+RP2bxf17+mMV/yfwxi/9S+WMW/+fnj1n8X5A/ZvF/Yf6Yxf9F+WMW/6Xzxyz+L84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8kfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9L88cs/qvlj1n8V88fs/i/LH/M4v9yuf8r7uflFv815P6PlMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/In/M4v/K/DGL/3r5Yxb/9fPHLP4b5I9Z/F+VP2bx3zB/zOL/6vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8mf8ziv1n+mMV/8/wxi/9r88cs/q/LH7P4vz5/zOL/hvwxi/8b88cs/m/KH7P4vzl/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+W/DGL/w75Yxb/t+aPWfzflj9m8d8xf8ziv1P+mMV/5/wxi/8u+WMP+G93whPa/+35Y5bz/x35Yxb/XfPHLP7vzB+z+O+WP2bxf1f+mMX/3fljFv/35I9Z/HfPH7P475E/ZvF/b/6Yxf99+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/z3zxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+e+WPWfw/nj9m8d87f8zi/4n8MYv/J/PHLP775I9Z/D+VP2bx/3T+mMX/M/ljFv/P5o9Z/D+XP2bx3zd/zOK/X/6Yxf/z+WMW/y/kj1n8988fs/h/MX/M4n9A/pjF/8D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfy/lT9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+384fs/h/J3/M4n9S/pjF/+T8MYv/KfljFv9T88cs/t/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3v5Yxb/7+ePWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/iflz9m8T8/f8zi/7P8MYv/BfljFv+f549Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lfkj1n8r8wfs/j/Jn/M4v/b/DGL/1X5Yxb/3+WPWfyvzh+z+F+TP2bxvzZ/zOL/+/wxi/91+WMW/+vzxyz+N+SPWfz/kD9m8f9j/pjF/0/5Yxb/G/PHLP5/zh+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/1/yxyz+t+WPWfxvzx+z+P81f8zif0f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+E/JH7P435c/ZvG/P3/M4j81f0ziP/8gf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/0n5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf3L+mMX/KfljFv+n5o9Z/BfJH7P4Py1/zOK/aP6Yxf/p+WMW/2fkj1n8F8sfs/g/M3/M4v+s/DGL/7j8MYv/s/PHLP7PyR+z+D83f8ziv3j+mMV/ifwxi//z8scs/kvmj1n8l8ofs/g/P3/M4v+C/DGL/wvzxyz+L8ofs/gvnT9m8X9x/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9J/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X5o/ZvFfLX/M4r96/pjF/2X5Yxb/l+ePWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1fkj1n8X5k/ZvFfL3/M4r9+/pjFf4P8MYv/q/LHLP4b5o9Z/F+dP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+SPWfw3yx+z+G+eP2bxf23+mMX/dfljFv/X549Z/N+QP2bxf2P+mMX/TfljFv83549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n835I/ZvHfIX/M4v/W/DGL/9vyxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOL/9vwxi/878scs/rvmj1n835k/ZvHfLX/M4v+u/DGL/7vzxyz+78kfs/jvnj9m8d8jf8zi/978MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP575o9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/PfKH7P4fzx/zOK/d/6Yxf8T+WMW/0/mj1n898kfs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4r9v/pjFf7/8MYv/5/PHLP5fyB+z+O+fP2bx/2L+mMX/gPwxi/+B+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvH/Rv6Yxf+b+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4fyt/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/L+dP2bx/07+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfy/mz9m8T8tf8zif3r+mMX/jPwxi//38scs/t/PH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv8f5I9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/H+aP2bxPy9/zOJ/fv6Yxf9n+WMW/wvyxyz+P88fs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfx/kT9m8f9l/pjF/1f5Yxb/X+ePWfyvyB+z+F+ZP2bx/03+mMX/t/ljFv+r8scs/r/LH7P4X50/ZvG/Jn/M4n9t/pjF//f5Yxb/6/LHLP7X549Z/G/IH7P4/yF/zOL/x/wxi/+f8scs/jfmj1n8/5w/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv+/5I9Z/G/LH7P4354/ZvH/a/6Yxf+O/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvGfkj9m8b8vf8zif3/+mMV/av6YxP9Jg/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8n5Y9Z/BfIH7P4j8kfs/gvmD9m8R+bP2bxXyh/zOK/cP6Yxf/J+WMW/6fkj1n8n5o/ZvFfJH/M4v+0/DGL/6L5Yxb/p+ePWfyfkT9m8V8sf8zi/8z8MYv/s/LHLP7j8scs/s/OH7P4Pyd/zOL/3Pwxi//i+WMW/yXyxyz+z8sfs/gvmT9m8V8qf8zi//z8MYv/C/LHLP4vzB+z+L8of8ziv3T+mMX/xfljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/JfljFv+V8scs/ivnj1n8V8kfs/ivmj9m8X9p/pjFf7X8MYv/6vljFv+X5Y9Z/F+eP2bxXyN/zOI/Pn/M4j8hf8ziPzF/zOK/Zv6YxX8tkf9c/8a6Fv+1Rf7/Thb/SfljFv/J+WMW/3Xyxyz+6+aPWfxfkT9m8X9l/pjFf738MYv/+vljFv8N8scs/q/KH7P4b5g/ZvF/df6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+TP2bx3yx/zOK/ef6Yxf+1+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8X9L/pjFf4f8MYv/W/PHLP5vyx+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/9vzxyz+78gfs/jvmj9m8X9n/pjFf7f8MYv/u/LHLP7vzh+z+L8nf8ziv3v+mMV/j/wxi/9788cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P475k/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvHfK3/M4v/x/DGL/975Yxb/T+SPWfw/mT9m8d8nf8zi/6n8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/vvljFv/98scs/p/PH7P4fyF/zOK/f/6Yxf+L+WMW/wPyxyz+B+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/b+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4v+t/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvH/dv6Yxf87+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bx/27+mMX/tPwxi//p+WMW/zPyxyz+38sfs/h/P3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvH/af6Yxf+8/DGL//n5Yxb/n+WPWfwvyB+z+P88f8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bx/0X+mMX/l/ljFv9f5Y9Z/H+dP2bxvyJ/zOJ/Zf6Yxf83+WMW/9/mj1n8r8ofs/j/Ln/M4n91/pjF/5r8MYv/tfljFv/f549Z/K/LH7P4X58/ZvG/IX/M4v+H/DGL/x/zxyz+f8ofs/jfmD9m8f9z/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8/5I/ZvG/LX/M4n97/pjF/6/5Yxb/O/LHLP5/yx+z+P89f8zi/4/8MYv/P/PHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjFf0r+mMX/vvwxi//9+WMW/6n5YxL/BQb5Yxb/ofwxi/+o/DGL/2z5Yxb/2fN/SLONPFr8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+UP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/yfnj1n8n5I/ZvF/av6YxX+R/DGL/9Pyxyz+i+aPWfyfnj9m8X9G/pjFf7H8MYv/M/PHLP7Pyh+z+I/LH7P4Pzt/zOL/nPwxi/9z88cs/ovnj1n8l8gfs/g/L3/M4r9k/pjFf6n8MYv/8/PHLP4vyB+z+L8wf8zi/6L8MYv/0vljFv8X549Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5I9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/6X5Yxb/1fLHLP6r549Z/F+WP2bxf3n+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9F/pjF/5X5Yxb/9fLHLP7r549Z/DfIH7P4vyp/zOK/Yf6Yxf/V+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf03+mMV/s/wxi//m+WMW/9fmj1n8X5c/ZvF/ff6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/y35Yxb/HfLHLP5vzR+z+L8tf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+b88fs/i/I3/M4r9r/pjF/535Yxb/3fLHLP7vyh+z+L87f8zi/57/xx49NAFiIEAY3d1Zc9Z2bNu2bdscT2zbtm3btm3bk0NOqeqaH5B+79bVx0//qKX/IP2jlv6D9Y9a+g/RP2rpP1T/qKX/MP2jlv7D9Y9a+o/QP2rpP1L/qKX/NvpHLf231T9q6b+d/lFL/+31j1r676B/1NJ/R/2jlv476R+19N9Z/6il/y76Ry39d9U/aum/m/5RS//d9Y9a+u+hf9TSf0/9o5b+e+kftfTfW/+opf8++kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v9A/aOW/gfpH7X0P1j/qKX/IfpHLf0P1T9q6X+Y/lFL/8P1j1r6H6F/1NL/SP2jlv5H6R+19D9a/6il/zH6Ry39j9U/aul/nP5RS//j9Y9a+p+gf9TS/0T9o5b+J+kftfQ/Wf+opf8p+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0P1v/qKX/OfpHLf3P1T9q6X+e/lFL//P1j1r6X6B/1NL/Qv2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aul/mf5RS//L9Y9a+l+hf9TS/0r9o5b+V+kftfS/Wv+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHLf2f1T9q6f+c/lFL/+f1j1r6v6B/1NL/Rf2jlv4v6R+19H9Z/6il/yv6Ry39X9U/aun/mv5RS//X9Y9a+r+hf9TS/039o5b+b+kftfR/W/+opf87+kct/d/VP2rp/57+UUv/9/WPWvp/oH/U0v9D/aOW/h/pH7X0/1j/qKX/J739B4zubOn/aW//0Wrp/5n+UUv/z/WPWvp/oX/U0v9L/aOW/l/pH7X0H6V/VNJ/4Pf0j1r6f1//qKX/D/SPWvoP0D9q6f9D/aOW/j/SP2rp/2P9o5b+P9E/aun/U/2jlv4/0z9q6f9z/aOW/r/QP2rp/0v9o5b+v9I/aun/a/2jlv6/0T9q6T9Q/6il/2/1j1r6/07/qKX/7/WPWvr/Qf+opf8f9Y9a+v9J/6il/5/1j1r6/0X/qKX/X/WPWvr/Tf+opf/f9Y9a+v9D/6il/z/1j1r6/0v/qKX/v/WPWvr/R/+opf9/9Y9a+v9P/6il///1j1r6j6F/1NJ/TP2jlv5j6R+19B9b/6il/zj6Ry39x9U/auk/nv5RS//x9Y9a+k+gf9TSf0L9o5b+E+kftfSfWP+opf8k+kct/SfVP2rpP5n+UUv/yfWPWvpPoX/U0n9K/aOW/lPpH7X0n1r/qKX/NPpHLf2n1T9q6T+d/lFL/+n1j1r6z6B/1NJ/Rv2jlv4z6R+19J9Z/6il/yz6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfSfW/+opf88+kct/efVP2rpP5/+UUv/+fWPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/IvpHLf0X1T9q6b+Y/lFL/8X1j1r6L6F/1NJ/Sf2jlv5L6R+19F9a/6il/zL6Ry39l9U/aum/nP5RS//l9Y9a+q+gf9TSf0X9o5b+K+kftfRfWf+opf8q+kct/VfVP2rpv5r+UUv/1fWPWvqvoX/U0n9N/aOW/mvpH7X0X1v/qKX/OvpHLf3X1T9q6b+e/lFL//X1j1r6b6B/1NJ/Q/2/Merbs6X/RvpHLf031j9q6b+J/lFL/031j1r6b6Z/1NJ/c/2jlv5b6B+19N9S/6il/1b6Ry39t9Y/auk/SP+opf9g/aOW/kP0j1r6D9U/auk/TP+opf9w/aOW/iP0j1r6j9Q/+s71BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADga/btP8bruoDj+OeAAyTbcDFjWBvk29ItpTt+DP9wQiJwoQf+RtQQuAPBO6DjsOPU+PEHuXT+yI0cW7kShuWkzVuu6ezSzJrFqq1mP9QsXVmLTGfBFuva9+57592349b3fb7frHw8/rjv9/P58voAtz35fJgCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/uxoaFxwZWzPk1NjBBx8+3Nz7OvvoipsO/L77gv7X8sdLh7nkmMEHPT09PbOfnbWjfDihKIrSz7azfDyxcly6/s76L3X0HYX53S8uPj75l41HDqw57eG6rqP31faerS1uXLehpfkTY4oiXFRbdJQO6mqKIiyqLe4tHdSXDhbXFg+XDmb1HpxSfLd0cN7azS1NpRNLor9n8P+ioXFnMXZIscWQPw0G97+z/jt39L+OcMn+q40ryv1f3vnDNys+63eC/vuvHxZU9l/1bxA4oer6f35+/+sIl/yP+/+kJ1e+PNxnJ+6///rhk/qHdIZ5/h/SaOVzf8Xz//RhLjmwv7Km83ip/0tufWZG+dS4/+b5/53rh4sq+x8z5Pm/9By/sP/5f0JRhItH+e2A95SGxl1HRrr/j9z/uGkVm5rB/Z/etnl/qf/HFv/g8fKp2ir7XzjC/X/MkopfK1Cdhsav9lTc/6vov/jYMJcc6P+tx3/7UKn/R/94/xmDPqum/4sr+5/Z3rpl5tbtneduaF29vnl986a6WfNmz62vm3v+nJm9jwR9X0f5XYH3htHd/4tJFZuaomge2F/ddeCpUv9zHnhgdvnUxCr7XzTi/X+6+z8M6yNjivHji47V7e1tdX1f+w/r+772/bBh+q/i7/9nnl3+YbXl15qimDqwv/OMu5aX+n/70DO7y6fGV9n/4hH7nz/w8wIRRnn/b6rYDOn/4KEXe5//l95z8PTyqWr//r9kxP5fcf+H0WhorPgfft5lpf53FZdGdhoa/Pc/SCdH/4++fX133Dp8Sv+QTo7+//CFo+fErcNS/UM6Ofoft/H+5+LW4RL9Qzo5+l82Zd7yuHW4VP+QTo7+175yzl/j1qFR/5BOjv7P/srujrh1WKZ/SCdH/w+2zd4Wtw7L9Q/p5Oj/56c++GrcOlymf0gnR//Hjt19Q9w6XK5/SCdH/117zvpR3DpcoX9IJ0f/l61bEOLW4Ur9Qzo5+p829c+Pxa3DVfqHdHL0P/cv/zw1bh2u1j+kk6P/27+4fF/cOlyjf0gnR/9jr3v5hbh1WKF/SCdH/0vO2rYgbh2u1T+kk6P/pp819cStw8py/xMK/cO7Lkf/M7/5kw1x63Cd+z+kk6P/w8se2RO3DtfrH9LJ0f+eumJy3DrcoH9IJ0f/3/j+aYfi1uHT+od0cvT/uyefmBe3Dqv0D+nk6P/ZD932rbh1uFH/kE6O/u9Z88KZceuwWv+QTo7+H9r73Jfj1mGN/iGdHP2//nrr++LWYa3+IZ0c/U+aeMprcevQpH9IJ0f/C275WlvcOjTrH9LJ0X/r7q4fx63DOv1DOjn6/+jxqSvj1mG9/iGdHP2vmLP3g3HrcJP+IZ0c/X9g6QW74tZhg/4hnRz9X9j98Qvj1mGj/iGdHP23P/35r8etw836h3Ry9L93xquL4tahRf+QTo7+X1q15Kdx69Cqf0gnR/9vPnLtprh12KR/SCdH/0/84q1jceuwWf+QTo7+33/+wr/HrcMW/UM6OfpftPiNtXHr8Bn9Qzo5+t/Y9a+X4tahTf+QTo7+Zxy+amncOmzVP6STo//vnVu3P24d2vUP6eTo/44r9tXHrcM2/UM6Ofrff/DOu+LW4Rb9Qzo5+n/jV9Onxa3DZ/UP6eTo/77Jh66JW4cO/UM6Ofr/9abap+PWYbv+IZ0c/f9j35QdcevQqX9IJ0f/T73W/ae4dbhV/5BOjv5XjfvN+Lh1uE3/kE6O/qd0brk3bh1u1z+kk6P/eXevPi9uHT6nf0gnR/9b//b8t+PWYYf+IZ2t2ztvXt3S0tzmjTfeeDPw5mT/yQSk9k70J/tXAgAAAAAAAAAAAAAAnEiOf050sn+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZgcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOojeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArwAAAP//JK7mvQ==") syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x10801, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x1, 0x58f6, &(0x7f0000009680)="$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") 8.005480385s ago: executing program 2 (id=5775): getpgrp(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f00000010c0)=ANY=[], 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4010}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x6, 0x5}, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r6, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) sendto$inet(r6, &(0x7f0000000480)="69c581692bc0d447de1046be5305b8ee530dca3eaa6923039211eb540ac6a95f12c0e2a9a9", 0x25, 0x40, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0xfffffffc, @mcast2, 0xc}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000440)={r9, 0x59b}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r12, 0x917, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000200)={r10, 0x0, 0x100, 0x1ff, 0x1, 0x9}, &(0x7f00000002c0)=0x14) 7.930476619s ago: executing program 3 (id=5777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0xa}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x72}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.958908737s ago: executing program 3 (id=5778): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40d", 0xba}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4.765250391s ago: executing program 4 (id=5779): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.252459965s ago: executing program 3 (id=5780): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a0000000000000008000100010000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.028740707s ago: executing program 5 (id=5781): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x10, 0x48000}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$inet(r0, 0x0, 0x0) 3.430791059s ago: executing program 3 (id=5782): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='svcrdma_decode_rseg\x00', r0}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000240)) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.737120809s ago: executing program 4 (id=5783): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce24", 0x44) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7f) 2.031450607s ago: executing program 4 (id=5784): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000480)={0x10001, 0x2, "c432c773b2b8aca5521939572112a560b5d2a1f38b19c5ba39a733d2232a156e", 0xa, 0xffffffff, 0x2, 0x5, 0x6}) 1.891112352s ago: executing program 3 (id=5785): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e1e, @local}, 0x10) 1.653145614s ago: executing program 5 (id=5786): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbff, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x0, 0x1, 0x8}}}}, @NHA_OIF={0x8}]}, 0x3c}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x400000, 0x96) r4 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000003c0)={0x0, 0x0, @auto=[0x29, 0x23, 0x25]}, 0xb, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r7, &(0x7f0000004200)='t', 0x1) fallocate(r6, 0x0, 0x0, 0x1001f0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000500)={@id={0x2, 0x0, @c}, 0x1, r4, '\x00', @auto=[0x17]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) 1.5188843s ago: executing program 4 (id=5787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0xa}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x72}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 586.605251ms ago: executing program 3 (id=5788): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="7961000000a00bfef5007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x12, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000020000001800000000000000000000000000000095000000000000001801000020206125000000000020f8ff00000000bfa100000000ffffb702000008000000b50a0000000000008500000006000d0095000000000000008b3b17b0e76a1fe436d3590809914d04bc2463f67e511b4e051c166ad36f29f22f82113a5a78a364ae73d84000a87a8016481bd6cabdaa2d07"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 510.662219ms ago: executing program 4 (id=5789): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40d", 0xba}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 418.008647ms ago: executing program 5 (id=5790): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000000400)=ANY=[], 0xfb, 0x29b, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffffff, 0x0, 0x101302, 0x40) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x5c040, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @value=r0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffa) sendfile(r1, r1, 0x0, 0x800000009) 0s ago: executing program 4 (id=5791): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 003736][T19717] EXT4-fs (loop3): 1 orphan inode deleted [ 1233.025332][T19717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.392616][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.813171][T19753] : renamed from bond0 (while UP) [ 1236.379926][T19764] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4847'. [ 1239.190781][T19788] loop3: detected capacity change from 0 to 4096 [ 1239.252948][T19788] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1239.371048][T19788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.802592][T19808] loop9: detected capacity change from 0 to 512 [ 1239.867350][T19808] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.4861: Parent and EA inode have the same ino 15 [ 1240.071669][T19808] EXT4-fs (loop9): Remounting filesystem read-only [ 1240.083626][T19808] EXT4-fs (loop9): 1 orphan inode deleted [ 1240.091416][T19808] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.428974][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.450030][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1240.450164][ T30] audit: type=1326 audit(1753314509.676:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19817 comm="syz.5.4864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40e678e9a9 code=0x0 [ 1241.379158][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.985522][ T5864] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1242.236186][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 1242.287069][ T5864] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 1242.295801][ T5864] usb 3-1: config 162 has no interface number 0 [ 1242.302640][ T5864] usb 3-1: config 162 interface 97 has no altsetting 0 [ 1242.408877][ T5864] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1242.418826][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.427288][ T5864] usb 3-1: Product: syz [ 1242.435792][ T5864] usb 3-1: Manufacturer: syz [ 1242.440616][ T5864] usb 3-1: SerialNumber: syz [ 1242.581088][T19837] tipc: Enabled bearer , priority 0 [ 1242.664689][T19837] syzkaller0: entered promiscuous mode [ 1242.671601][T19837] syzkaller0: entered allmulticast mode [ 1242.770081][T19842] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1242.770081][T19842] program syz.3.4873 not setting count and/or reply_len properly [ 1242.892441][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4869'. [ 1242.904664][T19835] tipc: Resetting bearer [ 1242.989745][T19835] tipc: Disabling bearer [ 1243.306901][ T5864] metro_usb 3-1:162.97: required endpoints missing [ 1243.364705][ T5864] usb 3-1: USB disconnect, device number 37 [ 1243.389320][T19847] netlink: 'syz.5.4874': attribute type 1 has an invalid length. [ 1243.564949][T19847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1244.222680][T19851] loop9: detected capacity change from 0 to 4096 [ 1244.287095][T19851] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1244.410619][T19863] loop3: detected capacity change from 0 to 512 [ 1244.433213][ T30] audit: type=1326 audit(1753314513.626:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19862 comm="syz.4.4880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c2eb8e9a9 code=0x0 [ 1244.578524][T19851] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.625844][T19863] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4878: Parent and EA inode have the same ino 15 [ 1244.973975][T19863] EXT4-fs (loop3): Remounting filesystem read-only [ 1244.982415][T19863] EXT4-fs (loop3): 1 orphan inode deleted [ 1245.003991][T19863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.098663][T19882] loop4: detected capacity change from 0 to 1024 [ 1246.195404][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.238729][T19882] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1246.341718][T19882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.393691][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.489014][T19882] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.4884: missing EA_INODE flag [ 1246.588114][T19882] EXT4-fs (loop4): Remounting filesystem read-only [ 1246.987963][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.004900][T19894] tipc: Enabled bearer , priority 0 [ 1247.036902][T19894] syzkaller0: entered promiscuous mode [ 1247.047795][T19894] syzkaller0: entered allmulticast mode [ 1247.224630][T19891] tipc: Resetting bearer [ 1247.258328][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1247.355697][T19891] tipc: Disabling bearer [ 1248.126650][ T30] audit: type=1326 audit(1753314517.346:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effff78e9a9 code=0x0 [ 1248.505376][ T30] audit: type=1107 audit(1753314517.736:1828): pid=19914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='M' [ 1248.547405][T19910] loop3: detected capacity change from 0 to 4096 [ 1248.617966][T19915] loop4: detected capacity change from 0 to 128 [ 1248.633785][T19910] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1248.765042][T19910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.795269][T19915] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1248.839924][T19915] ext4 filesystem being mounted at /421/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.018725][T19915] EXT4-fs (loop4): shut down requested (0) [ 1249.401190][T13727] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1249.826748][T19934] loop4: detected capacity change from 0 to 512 [ 1249.855349][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.903457][T19934] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.4901: casefold flag without casefold feature [ 1249.961655][T19934] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4901: couldn't read orphan inode 15 (err -117) [ 1250.016598][T19934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.834173][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.208561][T19952] loop9: detected capacity change from 0 to 128 [ 1251.282785][ T30] audit: type=1326 audit(1753314520.496:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.4909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40e678e9a9 code=0x0 [ 1251.361593][T19952] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1251.490015][T19952] ext4 filesystem being mounted at /441/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.561046][T19945] loop3: detected capacity change from 0 to 8192 [ 1251.679552][T19945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1252.119188][T19962] lo speed is unknown, defaulting to 1000 [ 1252.125882][T19962] lo speed is unknown, defaulting to 1000 [ 1252.135958][T19962] lo speed is unknown, defaulting to 1000 [ 1252.188550][T19962] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1252.272713][T13709] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1252.290723][T19962] lo speed is unknown, defaulting to 1000 [ 1252.299536][T19962] lo speed is unknown, defaulting to 1000 [ 1252.309022][T19962] lo speed is unknown, defaulting to 1000 [ 1252.317351][T19962] lo speed is unknown, defaulting to 1000 [ 1252.325839][T19962] lo speed is unknown, defaulting to 1000 [ 1252.414650][T19962] loop4: detected capacity change from 0 to 512 [ 1252.528011][T19962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1252.635658][T19962] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1252.644148][T19962] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1252.743534][T19962] System zones: 0-1, 15-15, 18-18, 34-34 [ 1252.754875][T19962] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1252.762949][T19962] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1252.784178][T19962] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1252.802484][T19962] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1252.842529][T19962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4911: bg 0: block 40: padding at end of block bitmap is not set [ 1252.881558][T19962] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1252.961082][T19962] EXT4-fs (loop4): 1 truncate cleaned up [ 1252.969354][T19962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1253.068386][T19968] loop5: detected capacity change from 0 to 4096 [ 1253.126534][T19962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1253.129572][T19968] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1253.152809][T19962] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1253.160960][T19962] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1253.219439][T19968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1253.795499][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.317021][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.333229][ T5864] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1254.534089][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 1254.588495][ T5864] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 1254.597185][ T5864] usb 3-1: config 162 has no interface number 0 [ 1254.604056][ T5864] usb 3-1: config 162 interface 97 has no altsetting 0 [ 1254.669779][ T5864] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1254.679417][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.687990][ T5864] usb 3-1: Product: syz [ 1254.692453][ T5864] usb 3-1: Manufacturer: syz [ 1254.697261][ T5864] usb 3-1: SerialNumber: syz [ 1255.013176][ T30] audit: type=1326 audit(1753314524.226:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19996 comm="syz.4.4923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c2eb8e9a9 code=0x0 [ 1255.150343][T19999] loop3: detected capacity change from 0 to 1024 [ 1255.253892][T19999] ext4: Unknown parameter 'defcontext' [ 1256.600466][ T5864] metro_usb 3-1:162.97: required endpoints missing [ 1256.641606][ T5864] usb 3-1: USB disconnect, device number 38 [ 1257.992181][T20034] loop4: detected capacity change from 0 to 4096 [ 1258.035505][T20034] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1258.088035][T20034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.337724][ T30] audit: type=1326 audit(1753314527.566:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20043 comm="syz.5.4936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40e678e9a9 code=0x0 [ 1258.410243][T20051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.418494][T20051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.428247][T20051] bridge0: entered allmulticast mode [ 1258.643549][T20034] bridge_slave_1: left allmulticast mode [ 1258.649731][T20034] bridge_slave_1: left promiscuous mode [ 1258.656484][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.738323][T20034] bridge_slave_0: left allmulticast mode [ 1258.745262][T20034] bridge_slave_0: left promiscuous mode [ 1258.751908][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.366419][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.993508][T13783] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1260.173682][T13783] usb 4-1: Using ep0 maxpacket: 8 [ 1260.235469][T13783] usb 4-1: config 162 has an invalid interface number: 97 but max is 0 [ 1260.246776][T13783] usb 4-1: config 162 has no interface number 0 [ 1260.264131][T13783] usb 4-1: config 162 interface 97 has no altsetting 0 [ 1260.397732][T13783] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1260.409098][T13783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.419039][T13783] usb 4-1: Product: syz [ 1260.424808][T13783] usb 4-1: Manufacturer: syz [ 1260.430768][T13783] usb 4-1: SerialNumber: syz [ 1260.835454][T13783] metro_usb 4-1:162.97: required endpoints missing [ 1260.858913][T13783] usb 4-1: USB disconnect, device number 2 [ 1261.182828][ T30] audit: type=1326 audit(1753314530.406:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20086 comm="syz.5.4950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40e678e9a9 code=0x0 [ 1261.293057][T20084] loop9: detected capacity change from 0 to 4096 [ 1261.394409][T20084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1261.549606][T20084] EXT4-fs error (device loop9): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.9.4949: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1261.631528][T20084] EXT4-fs (loop9): Remounting filesystem read-only [ 1261.815221][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.382495][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1263.598234][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1263.611974][ T5864] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1263.621290][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.683262][ T5864] usb 4-1: config 0 descriptor?? [ 1263.742711][ T5864] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1263.846584][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1263.906469][T20113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.916666][T20113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.273274][T13783] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1264.472506][T13783] usb 3-1: Using ep0 maxpacket: 8 [ 1264.503832][T13783] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 1264.514596][T13783] usb 3-1: config 162 has no interface number 0 [ 1264.522451][T13783] usb 3-1: config 162 interface 97 has no altsetting 0 [ 1264.587146][T13783] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1264.598311][T13783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.608363][T13783] usb 3-1: Product: syz [ 1264.613876][T13783] usb 3-1: Manufacturer: syz [ 1264.619896][T13783] usb 3-1: SerialNumber: syz [ 1264.828674][T20139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.837742][T20139] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 1264.851450][T20139] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 1264.936068][ T30] audit: type=1326 audit(1753314534.156:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.5.4966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40e678e9a9 code=0x0 [ 1265.107385][T20144] lo speed is unknown, defaulting to 1000 [ 1266.004626][ T5126] usb 4-1: USB disconnect, device number 3 [ 1266.249077][T13783] metro_usb 3-1:162.97: required endpoints missing [ 1266.272853][T13783] usb 3-1: USB disconnect, device number 39 [ 1266.357445][T20152] loop4: detected capacity change from 0 to 128 [ 1266.427910][T20152] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1266.456949][T20154] netlink: 'syz.5.4970': attribute type 4 has an invalid length. [ 1266.503154][T20152] ext4 filesystem being mounted at /436/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.845846][T13727] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1267.282942][ T30] audit: type=1326 audit(1753314536.506:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.322696][T20160] loop3: detected capacity change from 0 to 4096 [ 1267.380167][T20160] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1267.411115][ T30] audit: type=1326 audit(1753314536.546:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.438058][ T30] audit: type=1326 audit(1753314536.586:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.462239][ T30] audit: type=1326 audit(1753314536.586:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.485408][ T30] audit: type=1326 audit(1753314536.596:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.508292][ T30] audit: type=1326 audit(1753314536.596:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.534875][ T30] audit: type=1326 audit(1753314536.676:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.559190][ T30] audit: type=1326 audit(1753314536.686:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.582241][ T30] audit: type=1326 audit(1753314536.686:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.605120][ T30] audit: type=1326 audit(1753314536.686:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1267.661092][T20160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.716116][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.152165][T20187] syzkaller0: entered promiscuous mode [ 1269.168106][T20187] syzkaller0: entered allmulticast mode [ 1271.282872][T13783] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1271.710578][T20216] loop5: detected capacity change from 0 to 4096 [ 1271.761356][T20216] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1271.833118][T20216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.849646][T13783] usb 3-1: Using ep0 maxpacket: 8 [ 1271.900431][T13783] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 1271.910812][T13783] usb 3-1: config 162 has no interface number 0 [ 1271.920232][T13783] usb 3-1: config 162 interface 97 has no altsetting 0 [ 1272.008822][T13783] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1272.020152][T13783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.037416][T13783] usb 3-1: Product: syz [ 1272.043356][T13783] usb 3-1: Manufacturer: syz [ 1272.049313][T13783] usb 3-1: SerialNumber: syz [ 1273.116486][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.460281][T13783] metro_usb 3-1:162.97: required endpoints missing [ 1275.483536][T13783] usb 3-1: USB disconnect, device number 40 [ 1275.559241][T20249] IPv6: Can't replace route, no match found [ 1275.559964][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 1275.560042][ T30] audit: type=1326 audit(1753314544.786:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20248 comm="syz.2.5000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07b0f8e9a9 code=0x0 [ 1279.140527][T20265] loop5: detected capacity change from 0 to 4096 [ 1279.215178][T20265] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1279.291707][T20265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.437676][T20269] loop4: detected capacity change from 0 to 4096 [ 1279.558215][T20269] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1279.694262][T20269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.498289][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.680691][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.089816][ T30] audit: type=1326 audit(1753314550.306:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.9.5015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effff78e9a9 code=0x0 [ 1281.188875][T20290] can0: slcan on ttyS3. [ 1281.233919][T20295] loop4: detected capacity change from 0 to 128 [ 1281.351429][T20295] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1281.384659][T20296] can0 (unregistered): slcan off ttyS3. [ 1281.396214][T20295] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.965788][T13727] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1284.194655][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5027'. [ 1284.204232][T20324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.423055][T20324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.819905][ T30] audit: type=1326 audit(1753314555.046:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20335 comm="syz.2.5031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07b0f8e9a9 code=0x0 [ 1286.546740][T20347] loop3: detected capacity change from 0 to 1024 [ 1286.600279][T20347] ext4: Unknown parameter 'defcontext' [ 1287.320060][T20360] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.557497][T20360] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.618161][T20358] xt_CT: No such helper "snmp_trap" [ 1287.785253][T20360] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.930802][T20360] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.051368][T20364] loop9: detected capacity change from 0 to 4096 [ 1288.197591][T20366] loop3: detected capacity change from 0 to 1764 [ 1288.287520][T20366] iso9660: Bad value for 'session' [ 1288.423690][T20360] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.476387][T20360] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.538911][T20360] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.592443][T20360] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.678018][T20364] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1288.834106][T20364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1289.492252][T20383] random: crng reseeded on system resumption [ 1289.970827][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.780015][ T30] audit: type=1326 audit(1753314559.996:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20392 comm="syz.9.5050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effff78e9a9 code=0x0 [ 1292.114568][T20407] siw: device registration error -23 [ 1292.140154][ T30] audit: type=1326 audit(1753314561.366:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20410 comm="syz.9.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1292.281983][ T30] audit: type=1326 audit(1753314561.396:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20410 comm="syz.9.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1292.308766][ T30] audit: type=1326 audit(1753314561.486:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20410 comm="syz.9.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1292.333152][ T30] audit: type=1326 audit(1753314561.486:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20410 comm="syz.9.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1292.356120][ T30] audit: type=1326 audit(1753314561.496:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20410 comm="syz.9.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1293.028807][T20413] loop5: detected capacity change from 0 to 4096 [ 1293.088093][T20413] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1293.260169][T20413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.403072][ T30] audit: type=1326 audit(1753314562.626:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20423 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1293.594163][ T30] audit: type=1326 audit(1753314562.756:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20423 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1293.617481][ T30] audit: type=1326 audit(1753314562.756:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20423 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1293.644040][ T30] audit: type=1326 audit(1753314562.756:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20423 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1294.536113][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.831096][T20444] tipc: Started in network mode [ 1295.836489][T20444] tipc: Node identity 5ecd26c0a32e, cluster identity 4711 [ 1295.844820][T20444] tipc: Enabled bearer , priority 0 [ 1295.933669][T20444] tipc: Resetting bearer [ 1296.001908][T20443] tipc: Disabling bearer [ 1297.162546][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1297.162624][ T30] audit: type=1326 audit(1753314566.386:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.192389][ T30] audit: type=1326 audit(1753314566.396:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.219445][ T30] audit: type=1326 audit(1753314566.406:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.243780][ T30] audit: type=1326 audit(1753314566.416:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.266863][ T30] audit: type=1326 audit(1753314566.416:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.289922][ T30] audit: type=1326 audit(1753314566.416:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.313299][ T30] audit: type=1326 audit(1753314566.416:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.339410][ T30] audit: type=1326 audit(1753314566.416:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.363873][ T30] audit: type=1326 audit(1753314566.426:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.386983][ T30] audit: type=1326 audit(1753314566.426:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.4.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1297.642662][T20459] loop9: detected capacity change from 0 to 512 [ 1297.721112][T20462] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5076'. [ 1297.773365][T20459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1297.790139][T20456] loop3: detected capacity change from 0 to 4096 [ 1297.889321][T20456] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1297.998420][T20456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.029031][T20459] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.046215][T20459] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.634294][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.804343][T20481] tipc: Enabled bearer , priority 0 [ 1298.897620][T20481] tipc: Resetting bearer [ 1298.934558][T20479] tipc: Disabling bearer [ 1299.180941][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.938442][T20493] 9pnet_fd: Insufficient options for proto=fd [ 1300.845423][T20503] loop3: detected capacity change from 0 to 128 [ 1300.967210][T20492] random: crng reseeded on system resumption [ 1301.411294][T20503] bio_check_eod: 1622 callbacks suppressed [ 1301.411370][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.411370][T20503] loop3: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1301.437313][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.437313][T20503] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1301.451375][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.451375][T20503] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1301.465951][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.465951][T20503] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1301.480015][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.480015][T20503] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1301.494381][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.494381][T20503] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1301.508622][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.508622][T20503] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1301.526737][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.526737][T20503] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1301.542184][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.542184][T20503] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1301.556578][T20503] syz.3.5089: attempt to access beyond end of device [ 1301.556578][T20503] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1302.415300][T20515] loop3: detected capacity change from 0 to 512 [ 1302.517336][T20515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1302.634308][T20515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.651361][T20515] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1302.891006][T20522] tipc: Enabled bearer , priority 0 [ 1302.940286][T20515] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1302.977350][T20522] tipc: Resetting bearer [ 1303.031992][T20521] tipc: Disabling bearer [ 1303.040896][T20515] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 1303.074599][T20515] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1303.074599][T20515] [ 1303.086841][T20515] EXT4-fs (loop3): Total free blocks count 0 [ 1303.094654][T20515] EXT4-fs (loop3): Free/Dirty block details [ 1303.102247][T20515] EXT4-fs (loop3): free_blocks=39626 [ 1303.108988][T20515] EXT4-fs (loop3): dirty_blocks=12 [ 1303.115503][T20515] EXT4-fs (loop3): Block reservation details [ 1303.123032][T20515] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 1303.619847][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.393354][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 1304.393429][ T30] audit: type=1326 audit(1753314573.626:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20535 comm="syz.3.5098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27c838e9a9 code=0x0 [ 1304.848270][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5103'. [ 1304.858442][T20546] netlink: 'syz.9.5103': attribute type 20 has an invalid length. [ 1304.867172][T20546] netlink: 'syz.9.5103': attribute type 21 has an invalid length. [ 1306.053281][ T30] audit: type=1326 audit(1753314575.276:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.172368][ T30] audit: type=1326 audit(1753314575.326:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.199799][ T30] audit: type=1326 audit(1753314575.336:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.235073][ T30] audit: type=1326 audit(1753314575.336:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.262478][ T30] audit: type=1326 audit(1753314575.346:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.289781][ T30] audit: type=1326 audit(1753314575.346:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.316811][ T30] audit: type=1326 audit(1753314575.346:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.351059][ T30] audit: type=1326 audit(1753314575.376:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1306.377909][ T30] audit: type=1326 audit(1753314575.376:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.4.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1307.291103][T20562] tipc: Enabled bearer , priority 0 [ 1307.416657][T20562] tipc: Resetting bearer [ 1307.537205][T20560] tipc: Disabling bearer [ 1308.400916][T20567] loop5: detected capacity change from 0 to 4096 [ 1308.454973][T20567] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1308.675838][T20567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.746560][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1309.746689][ T30] audit: type=1326 audit(1753314578.976:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1309.928536][ T30] audit: type=1326 audit(1753314579.016:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1309.955620][ T30] audit: type=1326 audit(1753314579.036:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1309.983155][ T30] audit: type=1326 audit(1753314579.056:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1309.986662][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.010095][ T30] audit: type=1326 audit(1753314579.096:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1310.051887][ T30] audit: type=1326 audit(1753314579.096:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1310.078771][ T30] audit: type=1326 audit(1753314579.106:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1310.106013][ T30] audit: type=1326 audit(1753314579.116:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1310.375188][ T30] audit: type=1326 audit(1753314579.606:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20596 comm="syz.3.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1310.402372][ T30] audit: type=1326 audit(1753314579.606:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20596 comm="syz.3.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1310.765230][T20604] random: crng reseeded on system resumption [ 1312.130825][T20620] loop5: detected capacity change from 0 to 1024 [ 1312.211408][T20620] ext4: Unknown parameter 'defcontext' [ 1314.701575][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5135'. [ 1314.711999][T20641] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5135'. [ 1314.741460][T20641] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.751957][T20641] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.760974][T20641] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.770154][T20641] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.865524][T20641] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1314.875161][T20641] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1314.884731][T20641] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1314.894193][T20641] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1315.216688][T20647] loop9: detected capacity change from 0 to 2048 [ 1315.345272][T20647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1315.604853][T20647] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 23 vs 150994969 free clusters [ 1315.731208][T20647] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 1315.747979][T20647] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1315.747979][T20647] [ 1315.763292][T20647] EXT4-fs (loop9): Total free blocks count 0 [ 1315.772394][T20647] EXT4-fs (loop9): Free/Dirty block details [ 1315.778770][T20647] EXT4-fs (loop9): free_blocks=2415919136 [ 1315.784978][T20647] EXT4-fs (loop9): dirty_blocks=16 [ 1315.790324][T20647] EXT4-fs (loop9): Block reservation details [ 1315.796674][T20647] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1315.864346][T20659] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1318.547111][T20676] loop3: detected capacity change from 0 to 4096 [ 1318.581332][T20676] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1318.754784][T20676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.834652][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.006450][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1320.006524][ T30] audit: type=1326 audit(1753314589.236:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.132683][ T30] audit: type=1326 audit(1753314589.306:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.159630][ T30] audit: type=1326 audit(1753314589.306:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.184361][ T30] audit: type=1326 audit(1753314589.306:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.207304][ T30] audit: type=1326 audit(1753314589.306:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.230712][ T30] audit: type=1326 audit(1753314589.316:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.253923][ T30] audit: type=1326 audit(1753314589.316:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.280044][ T30] audit: type=1326 audit(1753314589.316:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.304205][ T30] audit: type=1326 audit(1753314589.326:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1320.327225][ T30] audit: type=1326 audit(1753314589.326:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.2.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b0f8e9a9 code=0x7ffc0000 [ 1322.401223][T20730] random: crng reseeded on system resumption [ 1323.046407][T20740] loop9: detected capacity change from 0 to 4096 [ 1323.103161][T20740] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1323.218360][T20740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1323.412640][T13783] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1323.611285][T13783] usb 4-1: Using ep0 maxpacket: 8 [ 1323.664311][T13783] usb 4-1: config 162 has an invalid interface number: 97 but max is 0 [ 1323.674856][T13783] usb 4-1: config 162 has no interface number 0 [ 1323.683192][T13783] usb 4-1: config 162 interface 97 has no altsetting 0 [ 1323.712401][T13783] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1323.723816][T13783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.733854][T13783] usb 4-1: Product: syz [ 1323.746955][T13783] usb 4-1: Manufacturer: syz [ 1323.757963][T13783] usb 4-1: SerialNumber: syz [ 1325.329574][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.385026][T13783] metro_usb 4-1:162.97: required endpoints missing [ 1325.650643][T13783] usb 4-1: USB disconnect, device number 4 [ 1327.878532][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.652551][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1329.652712][ T30] audit: type=1326 audit(1753314598.866:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.4.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1329.690570][ T30] audit: type=1326 audit(1753314598.866:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.4.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1329.978809][T20771] loop3: detected capacity change from 0 to 128 [ 1330.097790][ T30] audit: type=1326 audit(1753314599.076:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.4.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1330.108093][T20771] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1330.125652][ T30] audit: type=1326 audit(1753314599.076:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.4.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1330.161036][ T30] audit: type=1326 audit(1753314599.076:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.4.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1330.267672][T20771] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1330.772915][T10078] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1331.772872][T13783] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1331.836409][T20794] loop9: detected capacity change from 0 to 4096 [ 1331.873036][T20794] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1331.920861][T20794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1331.986839][T13783] usb 3-1: Using ep0 maxpacket: 8 [ 1332.060919][T13783] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 1332.071630][T13783] usb 3-1: config 162 has no interface number 0 [ 1332.080034][T13783] usb 3-1: config 162 interface 97 has no altsetting 0 [ 1332.151598][T13783] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1332.163465][T13783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.173832][T13783] usb 3-1: Product: syz [ 1332.179382][T13783] usb 3-1: Manufacturer: syz [ 1332.185634][T13783] usb 3-1: SerialNumber: syz [ 1332.640315][T13783] metro_usb 3-1:162.97: required endpoints missing [ 1332.785723][T13783] usb 3-1: USB disconnect, device number 41 [ 1333.378644][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.563725][ T30] audit: type=1326 audit(1753314602.796:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20815 comm="syz.4.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1333.605597][ T30] audit: type=1326 audit(1753314602.796:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20815 comm="syz.4.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1333.632567][ T30] audit: type=1326 audit(1753314602.796:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20815 comm="syz.4.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1333.834260][T20820] loop5: detected capacity change from 0 to 512 [ 1333.902587][T20820] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1334.015849][T20820] EXT4-fs (loop5): 1 truncate cleaned up [ 1334.024803][T20820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1334.419350][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.013963][ T30] audit: type=1326 audit(1753314604.236:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.041686][ T30] audit: type=1326 audit(1753314604.236:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.228795][T20840] loop5: detected capacity change from 0 to 2048 [ 1335.259981][ T30] audit: type=1326 audit(1753314604.316:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.287498][ T30] audit: type=1326 audit(1753314604.316:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.320996][ T30] audit: type=1326 audit(1753314604.316:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.348054][ T30] audit: type=1326 audit(1753314604.316:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.375241][ T30] audit: type=1326 audit(1753314604.316:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.402092][ T30] audit: type=1326 audit(1753314604.316:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.435631][ T30] audit: type=1326 audit(1753314604.316:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.458450][T20849] random: crng reseeded on system resumption [ 1335.470238][ T30] audit: type=1326 audit(1753314604.326:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20844 comm="syz.3.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1335.470910][T20842] xt_CT: No such helper "snmp_trap" [ 1335.627344][T20840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.196032][T13716] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1336.257380][T13716] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1336.329861][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.407489][T20888] tipc: Enabling of bearer rejected, failed to enable media [ 1338.901365][T20890] loop3: detected capacity change from 0 to 2048 [ 1339.196727][T20890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1339.778797][T13712] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1339.848499][T13712] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1340.046930][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.267585][T20910] loop5: detected capacity change from 0 to 2048 [ 1340.452210][T20910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.051339][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.153576][T20935] tipc: Enabling of bearer rejected, failed to enable media [ 1345.068569][T20983] tipc: Enabling of bearer rejected, failed to enable media [ 1346.784989][T20978] random: crng reseeded on system resumption [ 1347.300520][T21012] loop5: detected capacity change from 0 to 128 [ 1347.426164][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 1347.426284][ T30] audit: type=1800 audit(1753314616.656:2470): pid=21012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5254" name="file0" dev="loop5" ino=1048710 res=0 errno=0 [ 1347.655019][T21019] bio_check_eod: 3 callbacks suppressed [ 1347.655096][T21019] syz.5.5254: attempt to access beyond end of device [ 1347.655096][T21019] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 1348.041351][ T30] audit: type=1326 audit(1753314617.266:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1348.135725][T10084] kworker/u8:19: attempt to access beyond end of device [ 1348.135725][T10084] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 1348.192084][ T30] audit: type=1326 audit(1753314617.306:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1348.222191][ T30] audit: type=1326 audit(1753314617.306:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1348.252073][ T30] audit: type=1326 audit(1753314617.306:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1348.279633][ T30] audit: type=1326 audit(1753314617.306:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1348.306542][ T30] audit: type=1326 audit(1753314617.306:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1349.018042][T21033] tipc: Enabling of bearer rejected, failed to enable media [ 1351.362071][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'. [ 1351.647557][T21064] loop9: detected capacity change from 0 to 1024 [ 1351.681230][T21064] EXT4-fs: Ignoring removed nobh option [ 1351.687382][T21064] EXT4-fs: Ignoring removed bh option [ 1351.870891][T21064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.666354][T21078] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5278'. [ 1352.807636][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.058262][T21081] tipc: Enabling of bearer rejected, failed to enable media [ 1354.549517][T21102] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5285'. [ 1355.170284][T21112] loop4: detected capacity change from 0 to 128 [ 1355.324713][T21112] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1355.387190][T21112] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.422304][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5291'. [ 1355.434355][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5291'. [ 1356.045722][T21121] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5292'. [ 1356.236387][T13727] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1356.454634][T21108] random: crng reseeded on system resumption [ 1356.935552][T21130] tipc: Enabled bearer , priority 0 [ 1357.054778][T21130] tipc: Resetting bearer [ 1357.082674][T21127] tipc: Disabling bearer [ 1358.513462][T21148] tipc: Failed to remove unknown binding: 66,1,1/0:1387548855/1387548857 [ 1358.575191][T21148] tipc: Failed to remove unknown binding: 66,1,1/0:1387548855/1387548857 [ 1358.585989][T21148] tipc: Failed to remove unknown binding: 66,1,1/0:1387548855/1387548857 [ 1359.134415][T21154] loop5: detected capacity change from 0 to 128 [ 1359.175188][T21153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1359.214416][T21154] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1359.304484][T21154] ext4 filesystem being mounted at /525/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.927690][T13716] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1359.969626][T21161] tipc: Enabled bearer , priority 0 [ 1360.068877][T21161] tipc: Resetting bearer [ 1360.137109][T21160] tipc: Disabling bearer [ 1361.172604][T21177] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5313'. [ 1362.667974][T21188] loop3: detected capacity change from 0 to 1024 [ 1362.839549][T21188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.017783][ T30] audit: type=1800 audit(1753314632.226:2477): pid=21188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5317" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1363.081926][T21188] siw: device registration error -23 [ 1363.474070][T13712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.723305][T21203] tipc: Enabled bearer , priority 0 [ 1363.847674][T21203] tipc: Resetting bearer [ 1363.933835][T21202] tipc: Disabling bearer [ 1364.213777][T21209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1364.220594][T21209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1364.229056][T21209] vhci_hcd vhci_hcd.0: Device attached [ 1364.442915][ T9941] vhci_hcd: vhci_device speed not set [ 1364.516205][ T9941] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 1364.842143][T21211] vhci_hcd: connection reset by peer [ 1364.851586][T10066] vhci_hcd: stop threads [ 1364.857190][T10066] vhci_hcd: release socket [ 1364.864103][T10066] vhci_hcd: disconnect device [ 1366.683465][T21240] syzkaller0: entered promiscuous mode [ 1366.689196][T21240] syzkaller0: entered allmulticast mode [ 1367.880478][T21261] loop4: detected capacity change from 0 to 128 [ 1367.945139][T21261] FAT-fs (loop4): Directory bread(block 162) failed [ 1367.952529][T21261] FAT-fs (loop4): Directory bread(block 163) failed [ 1367.959377][T21261] FAT-fs (loop4): Directory bread(block 164) failed [ 1367.966471][T21261] FAT-fs (loop4): Directory bread(block 165) failed [ 1367.978490][T21261] FAT-fs (loop4): Directory bread(block 166) failed [ 1367.987099][T21261] FAT-fs (loop4): Directory bread(block 167) failed [ 1367.994144][T21261] FAT-fs (loop4): Directory bread(block 168) failed [ 1368.000993][T21261] FAT-fs (loop4): Directory bread(block 169) failed [ 1368.163086][T21261] FAT-fs (loop4): Directory bread(block 162) failed [ 1368.170093][T21261] FAT-fs (loop4): Directory bread(block 163) failed [ 1368.243018][T21261] syz.4.5346: attempt to access beyond end of device [ 1368.243018][T21261] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 1368.257438][T21261] syz.4.5346: attempt to access beyond end of device [ 1368.257438][T21261] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 1368.719344][T21271] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1368.719344][T21271] program syz.9.5349 not setting count and/or reply_len properly [ 1369.363685][T21277] hub 6-0:1.0: USB hub found [ 1369.371001][T21277] hub 6-0:1.0: 1 port detected [ 1369.462705][T21279] syzkaller0: entered promiscuous mode [ 1369.468442][T21279] syzkaller0: entered allmulticast mode [ 1369.682481][ T9941] vhci_hcd: vhci_device speed not set [ 1370.207014][T21292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5358'. [ 1372.475672][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5365'. [ 1372.553397][T21320] syzkaller0: entered promiscuous mode [ 1372.559124][T21320] syzkaller0: entered allmulticast mode [ 1373.493272][ T30] audit: type=1326 audit(1753314642.726:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c2eb85967 code=0x7ffc0000 [ 1373.573592][T21323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1373.580537][T21323] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1373.587723][T21323] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1373.594607][T21323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1373.601280][T21323] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1373.702803][ T30] audit: type=1326 audit(1753314642.756:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c2eb2ab89 code=0x7ffc0000 [ 1373.729297][ T30] audit: type=1326 audit(1753314642.756:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1373.753322][ T30] audit: type=1326 audit(1753314642.756:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c2eb85967 code=0x7ffc0000 [ 1373.776718][ T30] audit: type=1326 audit(1753314642.756:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c2eb2ab89 code=0x7ffc0000 [ 1373.799628][ T30] audit: type=1326 audit(1753314642.766:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1373.825906][ T30] audit: type=1326 audit(1753314642.766:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c2eb85967 code=0x7ffc0000 [ 1373.850716][ T30] audit: type=1326 audit(1753314642.766:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c2eb2ab89 code=0x7ffc0000 [ 1373.873787][ T30] audit: type=1326 audit(1753314642.766:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c2eb85967 code=0x7ffc0000 [ 1373.896769][ T30] audit: type=1326 audit(1753314642.776:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21334 comm="syz.4.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c2eb2ab89 code=0x7ffc0000 [ 1373.993590][T21339] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1375.032480][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 1375.072630][T21348] loop9: detected capacity change from 0 to 128 [ 1375.662560][ T5814] Bluetooth: hci8: command 0x0406 tx timeout [ 1375.669512][T11730] Bluetooth: hci3: command 0x0406 tx timeout [ 1375.676528][T11730] Bluetooth: hci7: command 0x0406 tx timeout [ 1375.683963][ T5814] Bluetooth: hci6: command 0x0406 tx timeout [ 1375.751035][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.751035][T21348] loop9: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1375.769549][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.769549][T21348] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1375.785074][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.785074][T21348] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1375.799315][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.799315][T21348] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1375.813347][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.813347][T21348] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1375.827601][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.827601][T21348] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1375.841641][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.841641][T21348] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1375.897667][T21348] syz.9.5379: attempt to access beyond end of device [ 1375.897667][T21348] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1376.136876][T21356] syzkaller0: entered promiscuous mode [ 1376.144563][T21356] syzkaller0: entered allmulticast mode [ 1378.722077][T21387] loop3: detected capacity change from 0 to 128 [ 1378.940511][T21391] syzkaller0: entered promiscuous mode [ 1378.948125][T21391] syzkaller0: entered allmulticast mode [ 1379.348184][T21387] syz.3.5395: attempt to access beyond end of device [ 1379.348184][T21387] loop3: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1379.362524][T21387] syz.3.5395: attempt to access beyond end of device [ 1379.362524][T21387] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1381.677442][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1381.677515][ T30] audit: type=1326 audit(1753314650.906:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21422 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1381.710975][ T30] audit: type=1326 audit(1753314650.906:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21422 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1381.735118][ T30] audit: type=1326 audit(1753314650.906:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21422 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c2eb8d60a code=0x7ffc0000 [ 1381.757897][ T30] audit: type=1326 audit(1753314650.906:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21422 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c2ebc1265 code=0x7ffc0000 [ 1381.977049][ T30] audit: type=1326 audit(1753314651.116:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21422 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1382.008001][ T30] audit: type=1326 audit(1753314651.116:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21422 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2eb8e9a9 code=0x7ffc0000 [ 1382.593657][T21432] syzkaller0: entered promiscuous mode [ 1382.599398][T21432] syzkaller0: entered allmulticast mode [ 1383.101179][T21441] loop4: detected capacity change from 0 to 1024 [ 1383.162324][T21441] EXT4-fs: Ignoring removed bh option [ 1383.197488][T21441] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1383.290968][T21441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.429976][T21441] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.5415: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 1383.535579][ T30] audit: type=1326 audit(1753314652.766:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21443 comm="syz.5.5417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40e678e9a9 code=0x0 [ 1383.562207][T21441] EXT4-fs (loop4): Remounting filesystem read-only [ 1383.799679][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.574404][T21461] loop4: detected capacity change from 0 to 512 [ 1384.634249][T21461] EXT4-fs: Ignoring removed i_version option [ 1384.681517][T21461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1385.007116][T21461] EXT4-fs (loop4): 1 truncate cleaned up [ 1385.020025][T21461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.670270][T21473] loop9: detected capacity change from 0 to 128 [ 1386.114632][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.192835][T21478] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1386.343683][T21473] bio_check_eod: 11 callbacks suppressed [ 1386.343844][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.343844][T21473] loop9: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1386.367319][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.367319][T21473] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1386.385237][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.385237][T21473] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1386.401960][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.401960][T21473] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1386.427027][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.427027][T21473] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1386.443608][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.443608][T21473] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1386.460010][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.460010][T21473] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1386.476609][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.476609][T21473] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1386.493155][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.493155][T21473] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1386.519227][T21473] syz.9.5426: attempt to access beyond end of device [ 1386.519227][T21473] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1386.903579][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1387.931432][T21475] random: crng reseeded on system resumption [ 1388.993953][ T30] audit: type=1326 audit(1753314658.216:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.102794][ T30] audit: type=1326 audit(1753314658.246:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.130016][ T30] audit: type=1326 audit(1753314658.246:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.157267][ T30] audit: type=1326 audit(1753314658.246:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.187867][ T30] audit: type=1326 audit(1753314658.276:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.216293][ T30] audit: type=1326 audit(1753314658.286:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.243991][ T30] audit: type=1326 audit(1753314658.286:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.273900][ T30] audit: type=1326 audit(1753314658.326:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.304457][ T30] audit: type=1326 audit(1753314658.326:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1389.334460][ T30] audit: type=1326 audit(1753314658.326:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21499 comm="syz.9.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effff78e9a9 code=0x7ffc0000 [ 1390.264404][T21511] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5440'. [ 1390.275913][T21511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5440'. [ 1390.866690][T21515] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1393.743515][T21530] loop3: detected capacity change from 0 to 2048 [ 1393.926148][T21530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1394.122475][T21530] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 23 vs 150994969 free clusters [ 1394.160272][T21530] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 1394.176397][T21530] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1394.176397][T21530] [ 1394.196520][T21530] EXT4-fs (loop3): Total free blocks count 0 [ 1394.204225][T21530] EXT4-fs (loop3): Free/Dirty block details [ 1394.211642][T21530] EXT4-fs (loop3): free_blocks=2415919136 [ 1394.219113][T21530] EXT4-fs (loop3): dirty_blocks=16 [ 1394.225679][T21530] EXT4-fs (loop3): Block reservation details [ 1394.233144][T21530] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1394.265912][T21543] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5453'. [ 1394.276285][T21543] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5453'. [ 1394.739600][T10082] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1395.304422][T21551] netlink: 'syz.2.5458': attribute type 11 has an invalid length. [ 1396.794114][T21559] IPVS: stopping master sync thread 21562 ... [ 1396.794896][T21562] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1397.794088][T21575] random: crng reseeded on system resumption [ 1398.517729][T21582] loop9: detected capacity change from 0 to 128 [ 1399.291541][T21582] bio_check_eod: 3 callbacks suppressed [ 1399.291618][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.291618][T21582] loop9: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1399.316635][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.316635][T21582] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1399.332323][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.332323][T21582] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1399.346806][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.346806][T21582] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1399.360883][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.360883][T21582] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1399.375053][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.375053][T21582] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1399.389034][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.389034][T21582] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1399.403209][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.403209][T21582] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1399.421134][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.421134][T21582] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1399.436618][T21582] syz.9.5468: attempt to access beyond end of device [ 1399.436618][T21582] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1401.187500][T21595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1401.409207][T21599] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5473'. [ 1403.790232][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1403.790305][ T30] audit: type=1326 audit(1753314673.016:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1403.865877][T21616] IPVS: stopping master sync thread 18830 ... [ 1403.945431][ T30] audit: type=1326 audit(1753314673.096:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1403.968927][ T30] audit: type=1326 audit(1753314673.096:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1403.992018][ T30] audit: type=1326 audit(1753314673.106:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1404.014898][ T30] audit: type=1326 audit(1753314673.106:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1404.041043][ T30] audit: type=1326 audit(1753314673.106:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1404.065761][ T30] audit: type=1326 audit(1753314673.106:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1404.088652][ T30] audit: type=1326 audit(1753314673.156:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1404.111669][ T30] audit: type=1326 audit(1753314673.296:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1404.137844][ T30] audit: type=1326 audit(1753314673.296:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21613 comm="syz.3.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c838e9a9 code=0x7ffc0000 [ 1404.907253][T21624] loop9: detected capacity change from 0 to 128 [ 1405.505491][T21624] bio_check_eod: 2 callbacks suppressed [ 1405.505613][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.505613][T21624] loop9: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1405.529173][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.529173][T21624] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1405.545896][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.545896][T21624] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1405.571064][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.571064][T21624] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1405.587603][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.587603][T21624] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1405.604089][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.604089][T21624] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1405.620865][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.620865][T21624] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1405.637297][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.637297][T21624] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1405.670948][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.670948][T21624] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1405.687454][T21624] syz.9.5483: attempt to access beyond end of device [ 1405.687454][T21624] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1406.468796][T21633] xt_CT: No such helper "snmp_trap" [ 1406.623102][T21639] loop9: detected capacity change from 0 to 2048 [ 1406.732809][T21639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1407.259465][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1407.776960][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.786461][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.795949][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.805308][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.823925][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.833132][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.842335][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.851662][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.863130][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.872337][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.881555][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.891108][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.900329][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.919941][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.929644][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.938881][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.948252][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.957421][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.966586][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.975992][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.986271][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1407.995426][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.004823][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.023498][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.032716][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.041688][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.050897][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.060059][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.069425][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.079197][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.088781][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.098325][T13783] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1408.265119][T21655] IPVS: stopping master sync thread 21656 ... [ 1408.812882][T13783] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [sy] on syz0 [ 1410.604005][T21663] random: crng reseeded on system resumption [ 1410.754690][T21673] xt_CT: No such helper "snmp_trap" [ 1412.022649][T21693] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1412.034244][T21691] IPVS: stopping master sync thread 21693 ... [ 1414.105590][T21708] loop9: detected capacity change from 0 to 2048 [ 1414.202052][T21708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1414.410265][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1414.410343][ T30] audit: type=1800 audit(1753314683.626:2565): pid=21708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5515" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1414.845106][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1415.660066][T21715] xt_CT: No such helper "snmp_trap" [ 1416.232974][T21725] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5519'. [ 1416.806498][T21731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5522'. [ 1419.473871][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1419.498879][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1419.517763][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1419.592238][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1419.627179][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1419.851579][T21753] lo speed is unknown, defaulting to 1000 [ 1421.652857][T21774] random: crng reseeded on system resumption [ 1421.852888][ T5814] Bluetooth: hci0: command tx timeout [ 1422.320056][T21777] netlink: 'syz.4.5540': attribute type 1 has an invalid length. [ 1422.329810][T21777] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1422.472895][T21753] chnl_net:caif_netlink_parms(): no params data found [ 1423.278482][T10087] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.446399][T10087] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.663844][T10087] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.899578][T10087] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.903470][ T5814] Bluetooth: hci0: command tx timeout [ 1425.127945][T10087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.244466][T10087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.266593][T10087] bond0 (unregistering): Released all slaves [ 1425.698028][T10087] tipc: Left network mode [ 1425.708389][T21753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.716297][T21753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.724155][T21753] bridge_slave_0: entered allmulticast mode [ 1425.739055][T21753] bridge_slave_0: entered promiscuous mode [ 1425.984177][ T5814] Bluetooth: hci0: command tx timeout [ 1426.054248][T21753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.064262][T21753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.072767][T21753] bridge_slave_1: entered allmulticast mode [ 1426.082329][T21753] bridge_slave_1: entered promiscuous mode [ 1426.819619][T10087] hsr_slave_0: left promiscuous mode [ 1426.860059][T10087] hsr_slave_1: left promiscuous mode [ 1426.872706][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.882272][T10087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.897594][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.906873][T10087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.993595][T10087] veth1_macvtap: left promiscuous mode [ 1427.000453][T10087] veth0_macvtap: left promiscuous mode [ 1427.007525][T10087] veth1_vlan: left promiscuous mode [ 1427.014272][T10087] veth0_vlan: left promiscuous mode [ 1428.091020][ T5814] Bluetooth: hci0: command tx timeout [ 1428.625063][T10087] team0 (unregistering): Port device team_slave_1 removed [ 1428.687585][T10087] team0 (unregistering): Port device team_slave_0 removed [ 1429.570745][T21753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.733808][T21753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.790892][T10087] IPVS: stop unused estimator thread 0... [ 1430.470498][T21753] team0: Port device team_slave_0 added [ 1430.522587][T21753] team0: Port device team_slave_1 added [ 1430.829822][T21753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.838936][T21753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.873535][T21753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.955988][T21753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.956118][T21753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.956691][T21753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.302617][T21753] hsr_slave_0: entered promiscuous mode [ 1431.319782][T21753] hsr_slave_1: entered promiscuous mode [ 1431.334654][T21753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1431.344550][T21753] Cannot create hsr debugfs directory [ 1431.992526][T21834] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.868930][T21753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1434.045299][T21753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1434.048542][T21852] random: crng reseeded on system resumption [ 1434.145164][T21753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1434.259312][T21753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1435.472391][T21753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.586359][T21753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.781398][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.790436][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.920137][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.929038][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.675360][T21753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.217026][T21753] veth0_vlan: entered promiscuous mode [ 1439.356909][T21753] veth1_vlan: entered promiscuous mode [ 1439.823437][T21753] veth0_macvtap: entered promiscuous mode [ 1439.928352][T21753] veth1_macvtap: entered promiscuous mode [ 1440.137245][T21753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.279229][T21753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.365515][T21753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.378967][T21753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.389372][T21753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.398573][T21753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.859259][T21917] loop4: detected capacity change from 0 to 2048 [ 1442.997522][T21917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.690340][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.163842][T21946] loop9: detected capacity change from 0 to 1024 [ 1445.216138][T21946] ext4: Unknown parameter 'defcontext' [ 1446.778066][T21962] loop4: detected capacity change from 0 to 2048 [ 1446.804539][T21967] loop9: detected capacity change from 0 to 512 [ 1446.998484][T21962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1447.016702][T21967] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1447.192372][T21967] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1447.192623][T21967] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1447.192721][T21967] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 1447.291605][T21967] EXT4-fs (loop9): 1 truncate cleaned up [ 1447.367842][T21967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1447.520494][T21983] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1447.604819][T10087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.604956][T10087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.690066][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.692929][T21983] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 8 [ 1447.857274][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.857451][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.184192][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1448.437187][ T30] audit: type=1326 audit(1753314717.656:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.4.5607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c2eb8e9a9 code=0x0 [ 1448.698670][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.755863][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1450.197956][T22001] loop5: detected capacity change from 0 to 1024 [ 1450.268450][T22001] ext4: Unknown parameter 'defcontext' [ 1450.767926][T15154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1450.787975][T15154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1450.798591][T15154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1450.843707][T15154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1450.861342][T15154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1451.130863][T22010] lo speed is unknown, defaulting to 1000 [ 1452.740411][T22032] usb usb1: usbfs: process 22032 (syz.9.5622) did not claim interface 0 before use [ 1452.914806][T22010] chnl_net:caif_netlink_parms(): no params data found [ 1452.944373][T15154] Bluetooth: hci2: command tx timeout [ 1453.654307][T22038] syzkaller0: entered promiscuous mode [ 1453.660034][T22038] syzkaller0: entered allmulticast mode [ 1453.994388][T22043] loop9: detected capacity change from 0 to 1024 [ 1454.172774][T22043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1454.442212][T22043] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1454.498057][T22043] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1454.513977][T22043] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1454.513977][T22043] [ 1454.525043][T22043] EXT4-fs (loop9): Total free blocks count 0 [ 1454.531265][T22043] EXT4-fs (loop9): Free/Dirty block details [ 1454.537643][T22043] EXT4-fs (loop9): free_blocks=68451041280 [ 1454.544475][T22043] EXT4-fs (loop9): dirty_blocks=64 [ 1454.550263][T22043] EXT4-fs (loop9): Block reservation details [ 1454.556589][T22043] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 1454.583140][T22010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.590644][T22010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.598835][T22010] bridge_slave_0: entered allmulticast mode [ 1454.613560][T22010] bridge_slave_0: entered promiscuous mode [ 1454.831697][T22010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.842266][T22010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.849996][T22010] bridge_slave_1: entered allmulticast mode [ 1454.859326][T22010] bridge_slave_1: entered promiscuous mode [ 1455.024608][T15154] Bluetooth: hci2: command tx timeout [ 1455.175200][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.213232][T22010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.270751][T10082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.380558][T22010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.491340][T10082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.917542][T10082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.986633][T22064] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1456.002715][T22010] team0: Port device team_slave_0 added [ 1456.067032][T22010] team0: Port device team_slave_1 added [ 1456.127272][T10082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.552536][T22010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.559740][T22010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.587959][T22010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.688077][T22010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.695557][T22010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.722928][T22010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.103659][T15154] Bluetooth: hci2: command tx timeout [ 1457.110237][T10082] bond0 (unregistering): Released all slaves [ 1457.125995][T10082] bond1 (unregistering): Released all slaves [ 1457.159298][T22076] loop5: detected capacity change from 0 to 512 [ 1457.396495][T22077] syzkaller0: entered promiscuous mode [ 1457.402748][T22077] syzkaller0: entered allmulticast mode [ 1457.552862][T22083] netlink: 'syz.9.5640': attribute type 1 has an invalid length. [ 1457.558842][T22076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.562405][T22083] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5640'. [ 1457.576927][T22076] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1457.970678][T10082] tipc: Left network mode [ 1457.987138][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.012875][T22010] hsr_slave_0: entered promiscuous mode [ 1458.022466][T22010] hsr_slave_1: entered promiscuous mode [ 1458.030729][T22010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1458.038790][T22010] Cannot create hsr debugfs directory [ 1458.736877][T10082] hsr_slave_0: left promiscuous mode [ 1458.758038][T10082] hsr_slave_1: left promiscuous mode [ 1458.829936][T10082] veth1_macvtap: left promiscuous mode [ 1458.835909][T10082] veth0_macvtap: left promiscuous mode [ 1458.842094][T10082] veth1_vlan: left promiscuous mode [ 1458.847642][T10082] veth0_vlan: left promiscuous mode [ 1459.190983][T15154] Bluetooth: hci2: command tx timeout [ 1460.891184][T22117] loop4: detected capacity change from 0 to 1024 [ 1461.125481][T22117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1461.250264][T22117] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1461.320803][T22117] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1461.335226][T22117] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1461.335226][T22117] [ 1461.345529][T22117] EXT4-fs (loop4): Total free blocks count 0 [ 1461.351714][T22117] EXT4-fs (loop4): Free/Dirty block details [ 1461.358013][T22117] EXT4-fs (loop4): free_blocks=68451041280 [ 1461.365894][T22117] EXT4-fs (loop4): dirty_blocks=64 [ 1461.371221][T22117] EXT4-fs (loop4): Block reservation details [ 1461.378062][T22117] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1461.415235][T10082] IPVS: stop unused estimator thread 0... [ 1462.659343][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.968978][T22130] syzkaller0: entered promiscuous mode [ 1462.974841][T22130] syzkaller0: entered allmulticast mode [ 1463.381678][T22010] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1463.473216][T22010] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1463.568012][T22010] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1463.659960][T22010] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1465.167953][T22010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.327520][T22010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.454880][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.462500][T10062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.630942][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.638516][T10062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.260342][T22163] loop4: detected capacity change from 0 to 2048 [ 1466.418167][T22166] syzkaller0: entered promiscuous mode [ 1466.419312][T22163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1466.425965][T22166] syzkaller0: entered allmulticast mode [ 1466.530147][ T30] audit: type=1800 audit(1753314735.756:2567): pid=22163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5668" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1466.867297][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.784541][T22191] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1468.004870][T22010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.316304][T22193] xt_CT: No such helper "snmp_trap" [ 1468.509597][T22197] loop9: detected capacity change from 0 to 1024 [ 1468.515787][T22010] veth0_vlan: entered promiscuous mode [ 1468.627790][T22010] veth1_vlan: entered promiscuous mode [ 1468.709611][T22197] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.798366][T22010] veth0_macvtap: entered promiscuous mode [ 1468.825276][T22010] veth1_macvtap: entered promiscuous mode [ 1469.052173][T22010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.312206][T22010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.355598][T22010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.364859][T22010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.374007][T22010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.383072][T22010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.457427][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.337989][T22212] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5684'. [ 1470.393377][T22208] x_tables: duplicate underflow at hook 1 [ 1471.226033][T22214] loop5: detected capacity change from 0 to 512 [ 1472.163501][T22214] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.5684: Parent and EA inode have the same ino 15 [ 1472.335602][T22229] binder: 22227:22229 ioctl c0306201 0 returned -14 [ 1472.356931][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 1472.363889][T22214] EXT4-fs (loop5): 1 orphan inode deleted [ 1472.372093][T22214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.374465][T22229] binder: 22227:22229 ioctl c0306201 200000000640 returned -22 [ 1472.518220][T22231] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5688'. [ 1473.024091][T22234] tipc: Started in network mode [ 1473.029378][T22234] tipc: Node identity e69bfc2203, cluster identity 4711 [ 1473.039715][T22234] tipc: Enabled bearer , priority 0 [ 1473.148460][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5690'. [ 1473.154645][T22238] syzkaller0: MTU too low for tipc bearer [ 1473.164706][T22238] tipc: Disabling bearer [ 1473.193613][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5690'. [ 1473.251046][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1473.495254][T22241] loop4: detected capacity change from 0 to 1024 [ 1473.623715][T22241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1474.143973][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.146481][T22266] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5700'. [ 1475.217250][T22269] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5701'. [ 1475.426942][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1475.503217][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1475.575578][T22274] loop9: detected capacity change from 0 to 512 [ 1475.796693][T22274] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.5701: Parent and EA inode have the same ino 15 [ 1475.934664][T22274] EXT4-fs (loop9): Remounting filesystem read-only [ 1475.941484][T22274] EXT4-fs (loop9): 1 orphan inode deleted [ 1475.949646][T22274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.008016][T22280] loop4: detected capacity change from 0 to 1024 [ 1476.162519][T22280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.682724][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.767666][T10062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.776577][T10062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.787135][T22287] binder: 22285:22287 ioctl c0306201 0 returned -14 [ 1476.963145][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.082052][T10082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.090229][T10082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.146907][T22306] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1479.570686][T22320] loop5: detected capacity change from 0 to 512 [ 1479.650400][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1479.684100][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1479.724194][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1479.775863][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1479.792208][T22320] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.5718: Parent and EA inode have the same ino 15 [ 1479.803576][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1479.992165][T22320] EXT4-fs (loop5): Remounting filesystem read-only [ 1480.003900][T22320] EXT4-fs (loop5): 1 orphan inode deleted [ 1480.014679][T22320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1480.092520][T22326] lo speed is unknown, defaulting to 1000 [ 1481.328192][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.822591][T22326] chnl_net:caif_netlink_parms(): no params data found [ 1481.911372][ T5814] Bluetooth: hci3: command tx timeout [ 1482.004339][T22348] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5726'. [ 1482.680277][T10066] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.808396][T10066] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.019558][T10066] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.336715][T10066] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.545662][T22326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.553463][T22326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.561284][T22326] bridge_slave_0: entered allmulticast mode [ 1483.570889][T22326] bridge_slave_0: entered promiscuous mode [ 1483.784471][T22326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.796402][T22326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.804200][T22326] bridge_slave_1: entered allmulticast mode [ 1483.813633][T22326] bridge_slave_1: entered promiscuous mode [ 1484.006448][ T5814] Bluetooth: hci3: command tx timeout [ 1484.843285][T22373] loop4: detected capacity change from 0 to 512 [ 1484.878394][T10066]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.948323][T10066]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.003595][T10066]  (unregistering): Released all slaves [ 1485.169532][T22384] loop5: detected capacity change from 0 to 2048 [ 1485.193837][T22326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.225647][T22373] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.5735: Parent and EA inode have the same ino 15 [ 1485.273481][T22326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.318219][T22384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1485.411183][T22373] EXT4-fs (loop4): Remounting filesystem read-only [ 1485.420882][T22373] EXT4-fs (loop4): 1 orphan inode deleted [ 1485.434180][T22373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1485.498303][T22384] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 23 vs 150994969 free clusters [ 1485.522963][T22384] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 1485.542822][T22384] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1485.542822][T22384] [ 1485.553975][T22384] EXT4-fs (loop5): Total free blocks count 0 [ 1485.560172][T22384] EXT4-fs (loop5): Free/Dirty block details [ 1485.566379][T22384] EXT4-fs (loop5): free_blocks=2415919136 [ 1485.572883][T22384] EXT4-fs (loop5): dirty_blocks=16 [ 1485.578202][T22384] EXT4-fs (loop5): Block reservation details [ 1485.584576][T22384] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1485.600107][T10066] tipc: Left network mode [ 1485.647549][T22326] team0: Port device team_slave_0 added [ 1485.723695][T22326] team0: Port device team_slave_1 added [ 1486.112750][ T5814] Bluetooth: hci3: command tx timeout [ 1486.378551][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.428762][T22326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.436271][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.465526][T22326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.499637][T10082] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1486.677722][T10066] hsr_slave_0: left promiscuous mode [ 1486.707097][T10066] hsr_slave_1: left promiscuous mode [ 1486.715362][T10066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1486.723171][T10066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.852689][T10066] veth1_macvtap: left promiscuous mode [ 1486.852831][T10066] veth0_macvtap: left promiscuous mode [ 1486.853106][T10066] veth1_vlan: left promiscuous mode [ 1486.853318][T10066] veth0_vlan: left promiscuous mode [ 1487.591741][T10066] team0 (unregistering): Port device team_slave_1 removed [ 1487.622661][T10066] team0 (unregistering): Port device team_slave_0 removed [ 1488.130205][T22326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.138132][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.164962][T22326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.177531][ T5814] Bluetooth: hci3: command tx timeout [ 1488.662323][T22326] hsr_slave_0: entered promiscuous mode [ 1488.672012][T22326] hsr_slave_1: entered promiscuous mode [ 1488.680326][T22326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1488.688217][T22326] Cannot create hsr debugfs directory [ 1488.743049][T22407] loop5: detected capacity change from 0 to 2048 [ 1488.879497][T10066] IPVS: stop unused estimator thread 0... [ 1488.912286][T22409] loop4: detected capacity change from 0 to 2048 [ 1489.414436][T22407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.704944][T22409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.753381][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.172835][T22421] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5750'. [ 1490.482988][T22423] binder: 22422:22423 ioctl c0306201 200000000240 returned -14 [ 1490.674171][T13727] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1490.822743][T13727] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1490.950125][T22326] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1491.008394][T22326] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1491.054398][T22326] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1491.075782][T22426] loop5: detected capacity change from 0 to 512 [ 1491.118817][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.135080][T22326] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1491.177233][T22426] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.5752: Parent and EA inode have the same ino 15 [ 1491.197036][T22426] EXT4-fs (loop5): Remounting filesystem read-only [ 1491.204122][T22426] EXT4-fs (loop5): 1 orphan inode deleted [ 1491.212037][T22426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1491.256358][T22428] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1491.788546][T22433] loop4: detected capacity change from 0 to 128 [ 1492.121268][T22326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.242514][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.406399][T22326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.545839][T21793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.553411][T21793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.751685][T21793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.759413][T21793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.125425][T22326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1493.767861][T22442] xt_CT: No such helper "snmp_trap" [ 1494.318208][T22449] loop4: detected capacity change from 0 to 2048 [ 1494.390243][T22449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1496.323310][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.343300][T22326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.864782][ T9941] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1499.082094][ T9941] usb 5-1: Using ep0 maxpacket: 32 [ 1499.117590][ T9941] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1499.126701][ T9941] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1499.135790][ T9941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1499.145240][ T9941] usb 5-1: config 1 has no interface number 0 [ 1499.154559][ T9941] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1499.166801][ T9941] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1499.180348][ T9941] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1499.189798][ T9941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.611134][ T9941] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1499.809775][ T9941] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1500.258721][ T9941] usb 5-1: USB disconnect, device number 29 [ 1500.267968][ T9941] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1500.921614][T22326] veth0_vlan: entered promiscuous mode [ 1501.013663][T22326] veth1_vlan: entered promiscuous mode [ 1501.346227][T22490] xt_CT: No such helper "snmp_trap" [ 1501.443708][T22326] veth0_macvtap: entered promiscuous mode [ 1501.511114][T22326] veth1_macvtap: entered promiscuous mode [ 1501.753128][T22326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.871150][T22326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.999273][T22326] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.008780][T22326] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.021185][T22326] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.031172][T22326] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.704155][T22502] loop5: detected capacity change from 0 to 32768 [ 1504.240656][T22507] loop4: detected capacity change from 0 to 2048 [ 1504.612557][T22507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1504.905385][T22502] loop5: detected capacity change from 0 to 32768 [ 1504.926713][T22502] bcachefs (/dev/loop5): error reading default superblock: Unsupported superblock version_min 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive) [ 1505.038155][T22502] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 1505.038275][T22502] allowing incompatible features above 0.0: (unknown version) [ 1505.038358][T22502] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1505.081044][T22502] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 1505.093464][T22502] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 1505.104157][T22502] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 1505.104157][T22502] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1505.128173][ T30] audit: type=1800 audit(1753314774.356:2568): pid=22507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5776" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1505.446521][T22502] bcachefs (loop5): accounting_read... done [ 1505.459213][T22502] bcachefs (loop5): alloc_read... done [ 1505.476293][T22502] bcachefs (loop5): snapshots_read... done [ 1505.502572][T22502] bcachefs (loop5): check_allocations... [ 1505.506343][T22502] bcachefs (loop5): pointer to nonexistent bucket 4294964982 on device loop5 (valid range 0-128) [ 1505.506445][T22502] emergency read only at seq 10 [ 1505.528400][T22502] bcachefs (loop5): bch2_gc_mark_key(): error trigger_alloc [ 1505.536083][T22502] bcachefs (loop5): bch2_gc_btree(): error trigger_alloc [ 1505.543446][T22502] bcachefs (loop5): bch2_gc_btrees(): error trigger_alloc [ 1505.551346][T22502] bcachefs (loop5): bch2_check_allocations(): error trigger_alloc [ 1505.559695][T22502] bcachefs (loop5): error in recovery: trigger_alloc [ 1505.566846][T22502] bcachefs (loop5): bch2_fs_start(): error starting filesystem trigger_alloc [ 1505.576031][T22502] bcachefs (loop5): shutting down [ 1505.602996][T22502] bcachefs (loop5): shutdown complete [ 1505.868623][T13727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.586045][T22502] bcachefs: bch2_fs_get_tree() error: trigger_alloc [ 1508.443321][T22535] xt_CT: No such helper "snmp_trap" [ 1509.609251][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.640708][T22552] loop5: detected capacity change from 0 to 2048 [ 1509.746964][T22552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1510.361133][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.558702][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1510.907890][T22571] loop5: detected capacity change from 0 to 64 [ 1511.032767][ T30] audit: type=1800 audit(1753314780.256:2569): pid=22571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5790" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 1511.087841][T22571] ===================================================== [ 1511.095324][T22571] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 [ 1511.103415][T22571] hfs_find_set_zero_bits+0x74d/0xb60 [ 1511.109014][T22571] hfs_vbm_search_free+0x13c/0x5b0 [ 1511.114632][T22571] hfs_extend_file+0x6a5/0x1b00 [ 1511.119751][T22571] hfs_get_block+0x435/0x1150 [ 1511.124712][T22571] __block_write_begin_int+0xa73/0x3030 [ 1511.133283][T22571] cont_write_begin+0x10e1/0x1bc0 [ 1511.138525][T22571] hfs_write_begin+0x85/0x130 [ 1511.144455][T22571] cont_write_begin+0x35d/0x1bc0 [ 1511.149621][T22571] hfs_write_begin+0x85/0x130 [ 1511.154629][T22571] hfs_file_truncate+0x1d6/0xe60 [ 1511.159774][T22571] hfs_inode_setattr+0x964/0xaa0 [ 1511.165062][T22571] notify_change+0x1990/0x1aa0 [ 1511.170055][T22571] do_truncate+0x28f/0x310 [ 1511.174881][T22571] do_ftruncate+0x698/0x730 [ 1511.179649][T22571] __x64_sys_ftruncate+0x11b/0x250 [ 1511.185124][T22571] x64_sys_call+0xfe3/0x3db0 [ 1511.189928][T22571] do_syscall_64+0xd9/0x210 [ 1511.194749][T22571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.200852][T22571] [ 1511.203518][T22571] Uninit was created at: [ 1511.207999][T22571] __kmalloc_cache_noprof+0x7f7/0xed0 [ 1511.213701][T22571] hfs_mdb_get+0x1cc8/0x2a90 [ 1511.218486][T22571] hfs_fill_super+0x3d0/0xb80 [ 1511.223494][T22571] get_tree_bdev_flags+0x6e6/0x920 [ 1511.228816][T22571] get_tree_bdev+0x38/0x50 [ 1511.236239][T22571] hfs_get_tree+0x35/0x40 [ 1511.240778][T22571] vfs_get_tree+0xb3/0x5c0 [ 1511.246320][T22571] do_new_mount+0x738/0x1610 [ 1511.251105][T22571] path_mount+0x6db/0x1e90 [ 1511.255812][T22571] __se_sys_mount+0x6eb/0x7d0 [ 1511.260674][T22571] __x64_sys_mount+0xe4/0x150 [ 1511.265796][T22571] x64_sys_call+0xfa7/0x3db0 [ 1511.270599][T22571] do_syscall_64+0xd9/0x210 [ 1511.275442][T22571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.281524][T22571] [ 1511.284117][T22571] CPU: 1 UID: 0 PID: 22571 Comm: syz.5.5790 Tainted: G W 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(none) [ 1511.298102][T22571] Tainted: [W]=WARN [ 1511.302144][T22571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1511.312468][T22571] ===================================================== [ 1511.319523][T22571] Disabling lock debugging due to kernel taint [ 1511.326408][T22571] Kernel panic - not syncing: kmsan.panic set ... [ 1511.332971][T22571] CPU: 1 UID: 0 PID: 22571 Comm: syz.5.5790 Tainted: G B W 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(none) [ 1511.346845][T22571] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1511.351993][T22571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1511.362193][T22571] Call Trace: [ 1511.365594][T22571] [ 1511.368638][T22571] __dump_stack+0x26/0x30 [ 1511.373178][T22571] dump_stack_lvl+0x53/0x270 [ 1511.377977][T22571] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1511.383989][T22571] dump_stack+0x1e/0x25 [ 1511.388333][T22571] panic+0x4bd/0xd50 [ 1511.392471][T22571] kmsan_report+0x31c/0x320 [ 1511.397154][T22571] ? __msan_warning+0x1b/0x30 [ 1511.401993][T22571] ? hfs_find_set_zero_bits+0x74d/0xb60 [ 1511.407756][T22571] ? hfs_vbm_search_free+0x13c/0x5b0 [ 1511.413246][T22571] ? hfs_extend_file+0x6a5/0x1b00 [ 1511.418447][T22571] ? hfs_get_block+0x435/0x1150 [ 1511.423470][T22571] ? __block_write_begin_int+0xa73/0x3030 [ 1511.429384][T22571] ? cont_write_begin+0x10e1/0x1bc0 [ 1511.434775][T22571] ? hfs_write_begin+0x85/0x130 [ 1511.439808][T22571] ? cont_write_begin+0x35d/0x1bc0 [ 1511.445107][T22571] ? hfs_write_begin+0x85/0x130 [ 1511.450137][T22571] ? hfs_file_truncate+0x1d6/0xe60 [ 1511.455424][T22571] ? hfs_inode_setattr+0x964/0xaa0 [ 1511.460714][T22571] ? notify_change+0x1990/0x1aa0 [ 1511.465877][T22571] ? do_truncate+0x28f/0x310 [ 1511.470641][T22571] ? do_ftruncate+0x698/0x730 [ 1511.475500][T22571] ? __x64_sys_ftruncate+0x11b/0x250 [ 1511.480969][T22571] ? x64_sys_call+0xfe3/0x3db0 [ 1511.485943][T22571] ? do_syscall_64+0xd9/0x210 [ 1511.490812][T22571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.497060][T22571] ? hfs_get_block+0x435/0x1150 [ 1511.502086][T22571] ? __block_write_begin_int+0xa73/0x3030 [ 1511.507997][T22571] ? cont_write_begin+0x10e1/0x1bc0 [ 1511.513380][T22571] ? hfs_write_begin+0x85/0x130 [ 1511.518406][T22571] ? cont_write_begin+0x35d/0x1bc0 [ 1511.523712][T22571] ? hfs_write_begin+0x85/0x130 [ 1511.528749][T22571] ? hfs_file_truncate+0x1d6/0xe60 [ 1511.534035][T22571] ? hfs_inode_setattr+0x964/0xaa0 [ 1511.539330][T22571] ? notify_change+0x1990/0x1aa0 [ 1511.544490][T22571] ? do_truncate+0x28f/0x310 [ 1511.549254][T22571] ? do_ftruncate+0x698/0x730 [ 1511.554152][T22571] ? __x64_sys_ftruncate+0x11b/0x250 [ 1511.559629][T22571] ? x64_sys_call+0xfe3/0x3db0 [ 1511.564593][T22571] ? do_syscall_64+0xd9/0x210 [ 1511.569445][T22571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.575692][T22571] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1511.581690][T22571] ? kfree+0x101/0xec0 [ 1511.585933][T22571] ? filter_irq_stacks+0x49/0x190 [ 1511.591129][T22571] ? stack_depot_save_flags+0x35/0x7b0 [ 1511.596794][T22571] ? kmsan_get_metadata+0xfb/0x160 [ 1511.602086][T22571] __msan_warning+0x1b/0x30 [ 1511.606745][T22571] hfs_find_set_zero_bits+0x74d/0xb60 [ 1511.612321][T22571] ? kmsan_get_metadata+0xfb/0x160 [ 1511.617611][T22571] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1511.623604][T22571] hfs_vbm_search_free+0x13c/0x5b0 [ 1511.628930][T22571] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1511.634922][T22571] hfs_extend_file+0x6a5/0x1b00 [ 1511.639960][T22571] ? __mark_inode_dirty+0x371/0x1090 [ 1511.645469][T22571] hfs_get_block+0x435/0x1150 [ 1511.650325][T22571] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1511.656628][T22571] ? kmsan_get_metadata+0xfb/0x160 [ 1511.661932][T22571] __block_write_begin_int+0xa73/0x3030 [ 1511.667726][T22571] ? __pfx_hfs_get_block+0x10/0x10 [ 1511.673037][T22571] cont_write_begin+0x10e1/0x1bc0 [ 1511.678236][T22571] ? kmsan_get_metadata+0xfb/0x160 [ 1511.683689][T22571] ? kmsan_get_metadata+0xfb/0x160 [ 1511.688992][T22571] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1511.695004][T22571] hfs_write_begin+0x85/0x130 [ 1511.699847][T22571] ? __pfx_hfs_get_block+0x10/0x10 [ 1511.705131][T22571] ? __pfx_hfs_write_begin+0x10/0x10 [ 1511.710589][T22571] cont_write_begin+0x35d/0x1bc0 [ 1511.715779][T22571] hfs_write_begin+0x85/0x130 [ 1511.720615][T22571] ? __pfx_hfs_get_block+0x10/0x10 [ 1511.725909][T22571] hfs_file_truncate+0x1d6/0xe60 [ 1511.731015][T22571] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1511.737309][T22571] ? up_read+0x6a/0xf0 [ 1511.741567][T22571] ? truncate_setsize+0x13d/0x1c0 [ 1511.746807][T22571] hfs_inode_setattr+0x964/0xaa0 [ 1511.751954][T22571] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 1511.757604][T22571] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 1511.763247][T22571] notify_change+0x1990/0x1aa0 [ 1511.768257][T22571] do_truncate+0x28f/0x310 [ 1511.772841][T22571] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1511.779146][T22571] do_ftruncate+0x698/0x730 [ 1511.783844][T22571] __x64_sys_ftruncate+0x11b/0x250 [ 1511.789152][T22571] x64_sys_call+0xfe3/0x3db0 [ 1511.793943][T22571] do_syscall_64+0xd9/0x210 [ 1511.798618][T22571] ? irqentry_exit+0x16/0x60 [ 1511.803369][T22571] ? clear_bhb_loop+0x40/0x90 [ 1511.808219][T22571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.814285][T22571] RIP: 0033:0x7f40e678e9a9 [ 1511.818831][T22571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1511.838637][T22571] RSP: 002b:00007f40e7592038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 1511.847241][T22571] RAX: ffffffffffffffda RBX: 00007f40e69b5fa0 RCX: 00007f40e678e9a9 [ 1511.855374][T22571] RDX: 0000000000000000 RSI: 0000000002007ffa RDI: 0000000000000004 [ 1511.863485][T22571] RBP: 00007f40e6810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1511.871604][T22571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.879705][T22571] R13: 0000000000000000 R14: 00007f40e69b5fa0 R15: 00007ffda57afa28 [ 1511.887854][T22571] [ 1511.891322][T22571] Kernel Offset: disabled [ 1511.895717][T22571] Rebooting in 86400 seconds..