last executing test programs: 22m10.738841214s ago: executing program 32 (id=77): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FITRIM(r0, 0xc0185879, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 20m2.86059853s ago: executing program 33 (id=345): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x220088c5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000800)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x27, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x5, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xf}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x81, 0x6, '\x00', 0x79}, {0xe2, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x5, 0xb6, 0x89, '\x00', 0x83}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0xb, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x81, 0x4, '\x00', 0xff}]}}) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0xc, 0x0, 0x0, 0x0, 0x0) 18m53.686822276s ago: executing program 34 (id=471): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 15m20.815349917s ago: executing program 2 (id=1035): r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x43) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x100, 0x80000, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r4, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) 15m18.912635643s ago: executing program 2 (id=1039): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 15m16.319489417s ago: executing program 2 (id=1043): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x451, 0x8001008, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x800002b, r3, 0x0) 15m15.247529184s ago: executing program 2 (id=1045): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 15m9.754900898s ago: executing program 2 (id=1056): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x451, 0x8001008, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x800002b, r3, 0x0) 15m7.488537044s ago: executing program 2 (id=1058): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$hiddev(0x0, 0x7, 0x208000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 14m52.347291575s ago: executing program 35 (id=1058): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$hiddev(0x0, 0x7, 0x208000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 9m7.306947347s ago: executing program 8 (id=1975): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 9m5.747098855s ago: executing program 8 (id=1978): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 9m3.785313994s ago: executing program 8 (id=1984): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 9m3.161373459s ago: executing program 8 (id=1986): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x400000000a0a01, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f00000001c0)) 9m1.844342731s ago: executing program 8 (id=1990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) 8m58.957649012s ago: executing program 8 (id=1994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 8m41.441710125s ago: executing program 36 (id=1994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 7m3.642733253s ago: executing program 7 (id=2266): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7, 0x4, 0x9, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 7m1.435237575s ago: executing program 7 (id=2269): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socket(0x23, 0x80805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 6m59.92524555s ago: executing program 7 (id=2273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x26044028}, 0x20000800) 6m59.382680263s ago: executing program 7 (id=2278): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x80000, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0x0, 0xab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) 6m58.915173314s ago: executing program 7 (id=2279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 6m57.237276163s ago: executing program 7 (id=2284): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x220088c5) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22048dc, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 6m41.283428938s ago: executing program 37 (id=2284): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x220088c5) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22048dc, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 5m43.859743158s ago: executing program 0 (id=2419): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x8000001, 0x1}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 5m41.115388023s ago: executing program 0 (id=2421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0x0, 0x0, 0xffffffff, 0x1e0, 0xd0, 0x394, 0x394, 0xffffffff, 0x394, 0x394, 0x5, &(0x7f00000005c0), {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'netdevsim0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0x9c, 0xd0, 0x0, {}, [@common=@inet=@udp={{0x2c}, {[0x4e20, 0x4e22], [0x4e21, 0x4e20], 0x3}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x18, @rand_addr=0x64010102, @broadcast, @gre_key=0x8, @gre_key=0x5}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @remote, 0xff, 0xff, 'veth1_to_batadv\x00', 'caif0\x00', {}, {}, 0x2f, 0x1, 0x2}, 0x0, 0xdc, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x8, 0x5, 0x0, 0x1, 0x0, 0x3], 0x5, 0x2}}}, @common=@addrtype={{0x2c}, {0x400, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x2, @remote, @empty, @icmp_id=0x66, @port=0x4e22}}}}, {{@uncond, 0x0, 0xdc, 0x110, 0x0, {}, [@common=@addrtype={{0x2c}, {0x200, 0x400, 0x1, 0x1}}, @common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x5, 0x4, 0xd, 0x5], 0x0, 0x8}}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e22, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x10, @private=0xa010101, @local, @icmp_id=0x64, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x484) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000040c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x500, 0x4}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) 5m38.995346062s ago: executing program 0 (id=2426): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x202f) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffc0fe, 0x103) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x60080800, 0x0, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1}}, 0x50) stat(&(0x7f0000000380)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22e, {0x0, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x0, 0x1000002, 0x1007, 0x8000000000000001, 0x9, 0xffffffff, {0x1, 0x3fd, 0x9, 0xc, 0x6, 0x4, 0x6, 0x97, 0x3d1d, 0xc000, 0xc1de, r2, 0xee01, 0x20f77, 0x89b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m37.720116052s ago: executing program 0 (id=2430): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x0) write(r2, &(0x7f0000000300)='lzo-rle', 0x7) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)="001122334455", 0x6) close(r5) 5m34.492957998s ago: executing program 0 (id=2435): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a0000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000a00)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m29.467330476s ago: executing program 0 (id=2448): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x220088c5) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22048dc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 5m13.711796176s ago: executing program 38 (id=2448): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x220088c5) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22048dc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 2m20.238775224s ago: executing program 5 (id=2814): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001500)={'batadv0\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0xfffffffc, 0x0, 0xfffffeff, 0x3, 0x1, 0x2, 0x5, 0x7fff}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) close(0x3) 2m18.26706725s ago: executing program 5 (id=2818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x22, 0x6, 0x7) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) 2m17.197584785s ago: executing program 5 (id=2819): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d5, &(0x7f00000097c0)="$eJzs/QW8bXWhcH/vA4duBEGkpA0aCVGkQxElRQlBWlJABBSklVBBEVDp7u7u7u7u7o73c+CAyh1wvc97/w/3PmOMD3uvvWLP/Vu/75yTtfbcZ61lF1xy3oGBMQc+6MPTf3TxHvevuNRoi254ym6Db9tn58WeGnrx8B+cjDX30NN5hp7OOzAwMGjocgZ9cNnguU4+ZZiBwQND/vtHo4408jCjDgyMPPTs0OUMzPbBySiHfni79z4WD3TSIT9upw8+3m+0IQsZ8sXyK72z3sDAwIj/9P1DxjXDf7ij0padZ6EF/2H1kdswQ68e9I/r3j8d/MHHKAcODIyy/8Anrx9DbjvcP33v/82G/MwxJx9Y+v7P4Gf/r2vZeRZa5GP+Q7bFYYdeNtuQbfzj26Cxj6/nOy+59hNDp3DQ0Ikb/E/by2ex3v8ftew8Cy468Mnb8cBiC2zx+Hvv7zcHzz8wMHiBgYHBCw4MDF7os/ao/54+05WvqqqqPpPmmXfmIc/Zh/nY44ERP3xcS48LL397xocHBgYv9sHzxMErffhcsKqqqqqqqqr+ZzbPvDPPB8//x/y05/+TnrXdWD3/r6qqqqqqqvrf0yLzzDvzkOf6H3v+P/6nPf9//sljDvngb//nnu2D73r3s70TVVVVVVVVVfWpLbgIPv+f9NOe/1958qTX9vy/qqqqqqqq6n9PS8y84HwD//Q6e0MvnubD6+n5/zmP3bvCZzXeqqqqqqqqqvqv9+4zZ577j9d8n3jgY6/3/n5Dfy8w6Pjzr7/+Mxvo/4wG/cffh2z1WY/p/9+GOI945KQDA+st/VkPpT6D/te8Vn39f1L+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uE47/f/T6/+ecuMqH7wU/9ZQz337mP77z/ff+H7zYIs9s/RkN/bPo/9Xj/wNrDRoYGOo75loDAwOLzbPEUtMMDAycefvMU04x8NF1sw+5bs6xh33/DeI//GciC4zFC95qsg9Oh6woA+N8tIzj31/+Iu8dMOygjw3inxrr1EMOWXPZ12b5+OlUn3w/hvnoq9FOefLDf8syzMduNOInfPOHy//wvnzceejYpxky9uk3XneD6TfabPNp11p35TVWW2O19eaYadYZZ5ljjllnnX71tdZZbYYPPn/SnE36/uf5/p05G/Xjc/bMPP88Zx+/b580Z5N++py9v8Tdrxjx2x/O2eD/4pzN9+lzNulaQ3/QWHMPN7DS+3MzaGBgrPmHG9h0yJkZRxgYGGuBobcdf8htvzn2MAMDu/7jjg75aoSP1sFBWw25zbILLjnvB7upgYF/nP6jT3g/++GHjnzuoafzDD2d94MfM+bAP1bFwXOdfMowQ+biX6Zj1JFGHmbUgYGRh54dupyBOT44GfmsD2/3Ce+z/rGBvv8yKzt98PF+ow0MDIwy5IuJVz5n+yFT/3/hfdr/j/7//x+8Zh/00fo4aOjH0Nt84DXPQov842e9Pw1D5m7YoZfNNsTkv/mt7f+l/zDeSUccmPRTxvspr4vzfrR+rXPmuNv8d70uDo13/E8Z76e8ju8njneZh/d64oNF/beN92P7ukXf/zz3v7OvG/j0fd2wtIDVrpno4/u6737yEP9ld/nhHI3wsRt90r5u/L0n2WrI8uf+9H3dokPGPty/7OuGGRgYa74P93VDdnwLDjew65AzMw05s9BwA4cPOTPz+2dGGjh/yJnpVll/nVWHXLDwf1wPphn0L3+gCdvZgh/bzgb9030f9LG/7xz8wekoB374Hk6fsN8cNPRu/af7Clpvx/yU8X7K+0/hPA+5bNUTRhz3v+v9p2i8I376eD/p/bI/cby7vHrO/f/N4/1oOxvun6Zr4X9nO5v0X7ezIXdx2H/aMv7dx2Grwu0/+Hr8j5a2yZZPfvSYYriPLfc/e0yx8KdvZ2Ou9bHv23H/gUGfNjcL/TtzM+F/2Adt/c9z8+8+3ppm8g+uH/ZT5maEOVac6sO5Gf6/ODcL/VfnZu6BYf91bgYPLDAwMDDF0P3Dgv/O3Iz/6XPz7643I8PtP/h6tY8umn/nIy/9cG4+Phf/2dws+F+dm0k/Wm+meP+6yYYZGH74gU1X3njjDWf84POHZ2f64POnb4Pz/ztzOeZ/z1xOMPiT5vIfq+qoD1974H+yDf6HffqHy5//vzqXAx/N5cBaH99Y6n9q/f7PXf7u8neXv7v83eXvLn9xn3D8/6PX/99zzDl3G/rLjeGunWS8HT7r8X7G/T99/H+o778c/99hvEmuHWbgo+s+9fjsB7f5H3l8drYPTkY59MPbffz4IA/0k4/P7j/HbNv9Xzo++3/Uh9vqv/F7uPb/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3GfcPx/hg//DuCxGRd/ceiB0OGe2na5xT/r8X7G/T99/H+o778c/198uW2fGmbgo+s+9fj/B7dxHP9/8K0Fd/mffPz/w2214//1n5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7hOP/c3/4dwDHHLPX5h/+PcDNY+105mc93s+4/1eP//f+/97a/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFDT3+P/Cxt7f8QesFBsf//3f3Cf6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/D/PHLP7L5o9Z/H+UP2bx/3H+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfx/kj9m8V8pf8ziv3L+mMX/p/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//P8scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8f9F/pjFf5P8MYv/L/PHLP6b5o9Z/DfLH7P4b54/ZvH/Vf6Yxf/X+WMW/y3yxyz+W+aPWfx/kz9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+P82f8zi/7v8MYv/jvljFv+d8scs/jvnj1n8d8kfs/j/Pn/M4v+H/DGL/x/zxyz+u+aPWfx3yx+z+P8pf8zi/+f8MYv/7vljFv+/5I9Z/PfIH7P475k/ZvHfK3/M4v/X/DGL/9/yxyz+f88fs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf8zi/27+mMX/vfwxif+ggfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/+fyxyz+4+SPWfzHzR+z+H8+f8ziP17+mMV//Pwxi/8X8scs/hPkj1n8v5g/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/l/KH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/nj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/2/kj1n858wfs/h/M3/M4v+t/DGL/1z5Yxb/b+ePWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvH/Tv6Yxf+7+WMW/0Xzxyz+38sfs/gvlj9m8f9+/pjF/wf5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/4f5Yxb/ZfPHLP4/yh+z+P84f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+P8kfs/ivlD9m8V85f8zi/9P8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMX/Z/ljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/5/ljFv8N88cs/hvlj1n8N84fs/j/In/M4r9J/pjF/5f5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yp/zOL/6/wxi/8W+WMW/y3zxyz+v8kfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/mz9m8f9d/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8f58/ZvH/Q/6Yxf+P+WMW/13zxyz+u+WPWfz/lD9m8f9z/pjFf/f8MYv/X/LHLP575I9Z/PfMH7P475U/ZvH/a/6Yxf9v+WMW/7/nj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f8zi/17+mMT//S/z/49Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5c/ZvEfJ3/M4j9u/pjF//P5Yxb/8fLHLP7j549Z/L+QP2bxnyB/zOL/xfwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1L+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4fyN/zOI/Z/6Yxf+b+WMW/2/lj1n858ofs/h/O3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/938scs/t/NH7P4L5o/ZvH/Xv6YxX+x/DGL//fzxyz+P8gfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+P8wfs/gvmz9m8f9R/pjF/8f5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvH/Sf6YxX+l/DGL/8r5Yxb/n+aPWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP4/yx+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+G+YP2bx3yh/zOK/cf6Yxf8X+WMW/03yxyz+v8wfs/hvmj9m8d8sf8ziv3n+mMX/V/ljFv9f549Z/LfIH7P4b5k/ZvH/Tf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/b/DGL/+/yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOL/+/wxi/8f8scs/n/MH7P475o/ZvHfLX/M4v+n/DGL/5/zxyz+u+ePWfz/kj9m8d8jf8ziv2f+mMV/r/wxi/9f88cs/n/LH7P4/z1/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5Yxb/9/LHJP7DDuSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+XP2bxHyd/zOI/bv6Yxf/z+WMW//Hyxyz+4+ePWfy/kD9m8Z8gf8zi/8X8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9S/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/9fwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+H8jf8ziP2f+mMX/m/ljFv9v5Y9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/d/LHLP7fzR+z+C+aP2bx/17+mMV/sfwxi//388cs/j/IH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/j/MH7P4L5s/ZvH/Uf6Yxf/H+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bx/0n+mMV/pfwxi//K+WMW/5/mj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+P8sfs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/hvmD9m8d8of8ziv3H+mMX/F/ljFv9N8scs/r/MH7P4b5o/ZvHfLH/M4r95/pjF/1f5Yxb/X+ePWfy3yB+z+G+ZP2bx/03+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/2/wxi//v8scs/jvmj1n8d8ofs/jvnD9m8d8lf8zi//v8MYv/H/LHLP5/zB+z+O+aP2bx3y1/zOL/p/wxi/+f88cs/rvnj1n8/5I/ZvHfI3/M4r9n/pjFf6/8MYv/X/PHLP5/yx+z+P89f8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMW//fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/+EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv/hB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/L+RP2bxnzN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4fy9/zOK/WP6Yxf/7+WMW/x/kj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/x/mj1n8l80fs/j/KH/M4v/j/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4/yR/zOK/Uv6YxX/l/DGL/0/zxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/n+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOL/i/wxi/8m+WMW/1/mj1n8N80fs/hvlj9m8d88f8zi/6v8MYv/r/PHLP5b5I9Z/LfMH7P4/yZ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx/33+mMX/D/ljFv8/5o9Z/HfNH7P475Y/ZvH/U/6Yxf/P+WMW/93zxyz+f8kfs/jvkT9m8d8zf8ziv1f+mMX/r/ljFv+/5Y9Z/P+eP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/EQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/xEH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv+RBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/L+RP2bxnzN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4fy9/zOK/WP6Yxf/7+WMW/x/kj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/x/mj1n8l80fs/j/KH/M4v/j/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4/yR/zOK/Uv6YxX/l/DGL/0/zxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/n+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOL/i/wxi/8m+WMW/1/mj1n8N80fs/hvlj9m8d88f8zi/6v8MYv/r/PHLP5b5I9Z/LfMH7P4/yZ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx/33+mMX/D/ljFv8/5o9Z/HfNH7P475Y/ZvH/U/6Yxf/P+WMW/93zxyz+f8kfs/jvkT9m8d8zf8ziv1f+mMX/r/ljFv+/5Y9Z/P+eP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/kQfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/1EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv9RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/L+RP2bxnzN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4fy9/zOK/WP6Yxf/7+WMW/x/kj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/x/mj1n8l80fs/j/KH/M4v/j/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4/yR/zOK/Uv6YxX/l/DGL/0/zxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/n+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOL/i/wxi/8m+WMW/1/mj1n8N80fs/hvlj9m8d88f8zi/6v8MYv/r/PHLP5b5I9Z/LfMH7P4/yZ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx/33+mMX/D/ljFv8/5o9Z/HfNH7P475Y/ZvH/U/6Yxf/P+WMW/93zxyz+f8kfs/jvkT9m8d8zf8ziv1f+mMX/r/ljFv+/5Y9Z/P+eP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/0Qbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/9EH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv8xBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6Yxf//x869B9lZ13ccP7lHlOLPzgBT7OCAZZzO2EhIY6M1BAiE5bKKCRhDCOSyuUgu5EJMgpCkjVWgaaECLZq0BA1NKVathIaWeqvGBkWLtTGtVSmEWoNpSpMakWI6m+zGZPtlp/ukz0Pr9/X6I7vnLN8j5D0fzmEy4zD9Q1n6v0H/UJb+Z+ofytJ/uP6hLP3P0j+Upf8I/UNZ+v+y/qEs/UfqH8rS/436h7L0/xX9Q1n6j9I/lKX/m/QPZen/Zv1DWfr/qv6hLP3fon8oS//R+oey9D9b/1CW/mP0D2Xpf47+oSz9z9U/lKX/efqHsvQfq38oS//z9Q9l6X+B/qEs/cfpH8rS/0L9Q1n6t+kfytL/Iv1DWfpfrH8oS/9L9A9l6X+p/qEs/dv1D2Xp/1b9Q1n6v03/UJb+l+kfytL/7fqHsvQfr38oS/8J+oey9L9c/1CW/lfoH8rS/x36h7L0n6h/KEv/d+ofytJ/kv6hLP2v1D+Upf9k/UNZ+l+lfyhL/yn6h7L0v1r/UJb+1+gfytJ/qv6hLP2n6R/K0n+6/qEs/WfoH8rSv0P/UJb+M/UPZek/S/9Qlv6z9Q9l6T9H/1CW/u/SP5Sl/7X6h7L0n6t/KEv/efqHsvSfr38oS/8F+oey9L9O/1CW/gv1D2Xpv0j/UJb+i/UPZem/RP9Qlv7X6x/K0n+p/qEs/d+tfyhL/2X6h7L0X65/KEv/FfqHsvS/Qf9Qlv7v0T+Upf+N+oey9L9J/1CW/iv1D2Xpv0r/UJb+q/UPZen/a/qHsvT/df1DWfqv0T+Upf979Q9l6f8b+oey9H+f/qEs/d+vfyhL/5v1D2Xpf4v+oSz9b9U/lKX/b+ofytJ/rf6hLP1/S/9Qlv6/rX8oS//b9A9l6X+7/qEs/X9H/1CW/h/QP5Sl/x36h7L0v1P/UJb+d+kfytL/d/UPZen/e/qHsvS/W/9Qlv4f1D+Upf+H9A9l6b9O/1CW/uv1D2Xp//v6h7L0/wP9Q1n636N/KEv/DfqHsvS/V/9Qlv4f1j+Upf9H9A9l6b9R/1CW/vfpH8rS/w/1D2Xpv0n/UJb+f6R/KEv/+/UPZen/x/qHsvR/QP9Qlv4f1T+Upf+f6B/K0v9j+oey9P+4/qEs/T+hfyhL/z/VP5Sl/yf1D2Xp/6D+oSz9N+sfytL/If1DWfr/mf6hLP236B/K0v9h/UNZ+v+5/qEs/f9C/1CW/o/oH8rS/y/1D2Xp/yn9Q1n6f1r/UJb+n9E/lKX/Z/UPZen/Of1DWfr/lf6hLP0/r38oS/8v6B/K0n+r/qEs/b+ofyhL/7/WP5Sl/zb9Q1n6P6p/KEv/L+kfytL/y/qHsvR/TP9Qlv5f0T+Upf9X9Q9l6f83+oey9H9c/1CW/l/TP5Sl/9/qH8rS/+v6h7L0/zv9Q1n6b9c/lKX/N/QPZem/Q/9Qlv5/r38oS/9/0D+Upf839Q9l6f+P+oey9P+W/qEs/b+tfyhL/+/oH8rS/wn9Q1n6/5P+oSz9n9Q/lKX/U/qHsvTfqX8oS/+n9Q9l6f/P+oey9P+u/qEs/f9F/1CW/t/TP5Sl/y79Q1n6P6N/KEv/7+sfytJ/t/6hLP3/Vf9Qlv579A9l6f9v+oey9H9W/1CW/v+ufyhL/736h7L036d/KEv//9A/lKX/D/QPZem/X/9Qlv4/1D+Upf9z+oey9P+R/qEs/Z/XP5Sl/3/qH8rS/wX9Q1n6/1j/UJb+B/QPJen/ypb+oSz9++kfytK/v/6hLP0H6B/K0n+g/qEs/QfpH8rSf7D+oSz9h+gfytJ/qP6hLP1fpn8oS//j9A9l6f9y/UNZ+r9C/1CW/sfrH8rS/2f0D2Xpf4L+oZ+6/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/XLF6+4tqpc+d2LPKNb3zjm8PfvNT/ZgIAAP63/eRD/0v9dwIAAAAAAAAAAAAAAAAAAAB5NfF/J/ZS/zMCAAAAAAAAAAAAAMD/d23t5+we0O+opwYc+eDnH+s4+HXE/omzN258qHR/7frxxcFL9j/ywYEDBw6sf3b02K6HQ1qtVuf/2iu7Hg/tedz5+qtOXXfyoUdlzOfvemLKhOMvWbT59oHfWH9r+zODDj47qHXNzDlzO97Qv9Uq5w1qLet8cGa/VqtcMKh1W+eD4Z0Pxg1qbep8cNbBBy9rfabzwS9NXzB3RucTF1b+PYOfFm3tq1oDjlps66h/Gxy5/1WnPjm7+2svL9n9agNbXfs/bfOXTurxs24vsv/u1y/n9Nx/n/8BgRfVt/0/t6P7ay8v+d/e/z+8bf+K6Gcvvv/u1y/n2j/UJ/j8f9RGe37u7/H5/zXBSx6+P3votjs69992+f2v7npq4P/k8/9PXr+c13P//Y/6/N/5OX5s9+f/Ia1WOf8Yfzsglbb21bt7e//vff8Df67HTb8j93/vV3a+onP/9z3fWtP11KA+7n9sb+//N/f4ewX6pq19w4Ee7/992H/rjOAlD+9/1+bjD37+3/nA9BOP+Flf9n9+z/0PWzLvumGLl694/Zx5U2d1zOqYP2r4yDNHjBo1cuSwg58IDv16jL8pkMSxvf+3jutx06/V6jh8v/X+W8d27n/Pw2s+0vXU0D7u/4Je3/9f4/0fQqf1bw0e3Fo2dcmSRWce+rX74fBDvx76y4L99+G//09/Xddf1v1nhv1arZMP358xZdSQzv3fsLBs6XpqcB/3P67X/Y85+s8qgb45xvf/GT1ujtr/2btuWtq5/9f+4FU7u57q63//X9jr/u/x/g/Hoq29VeubaOf+zxqy+qJq16XNn/9BfZrY/6l7b9tX7bpcZP9Qnyb2P2Htm6dVuy4X2z/Up4n9PzTv6rXVrssl9g/1aWL/L/zsvlOqXZdL7R/q08T+H//u0xurXZd2+4f6NLH/D97dfla16/JW+4f6NLH/11//w9HVrsvb7B/q08T+Z758/KZq1+Uy+4f6NLH/iw6ce2K16/J2+4f6NLH/fqu/t6radRlv/1CfJvb/1NS1C6pdlwn2D/VpYv+bTj3juWrX5XL7h/o0sf81z7xxXLXrcoX9Q32a2P9X71z3eLXr8g77h/o0sf9PTH7VumrXZaL9Q32a2P+PTnv4uGrX5Z32D/VpYv/bt296sNp1mWT/UJ8m9r9+04DTql2XK+0f6tPE/ldeOOuxatdlsv1DfZrY/4iRX76y2nW5yv6hPk3s/+TPfevpatdliv1DfZrY//hHli6udl2utn+oTxP7X3rKx39c7bpcY/9Qnyb2/5aOU2ZXuy5T7R/q08T+y+3Hba92XabZP9Snif1P2rNhTLXrMt3+oT5N7H/LCV/4WLXrMsP+oT5N7H/vwvmjql2XDvuH+jSx/++8d+X7ql2XmfYP9Wli/3c8//VS7brMsn+oTxP73zV80uRq12W2/UN9mtj/hkuefbTadZlj/1CfJva/dssTS6pdl3fZP9Snif1v3Xrxk9Wuy7X2D/VpYv+vPWPY8dWuy1z7h/o0sf8FE9d8qNp1mWf/UJ8m9n/eA3f+QrXrMt/+oT5N7H/o10Z/stp1WWD/UJ8m9v/p0e//VLXrcp39Q32a2P++Mae/rtp1WWj/UJ8m9r/jweF3Vbsui+wf6tPE/j/w6N0Vr8ti+4f6NLH/hb/4wp5q12WJ/UN9mtj/myZcsbzadbne/qE+Tez/xHvGfbHadVlq/1CfJvZ/1be/f1m16/Ju+4f6NLH/00+a9upq12WZ/UN9mtj/7Dnbbql2XZbbP9Snif2PXb9jRLXrssL+oT5N7P+EpxbfW+263GD/UJ8m9r97wEmXVrsu77F/qE8T+7/vxke+We263Gj/UJ8m9n/LzR/tqHZdbrJ/qE8T+//s/sF7q12XlfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8F/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOojeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+ri+0D") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='file1\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0x2000) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0x4000) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0x6000) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0x8000) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0xc000) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0xe000) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0x10000) pwrite64(r0, &(0x7f0000001000)='A', 0x1, 0x12fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='file2\x00', 0x42, 0x1ff) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r0}, 0x0, 0x13000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000520)={{r0}, 0x0, 0x13000, 0x13000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000540)={{r0}, 0x0, 0x13000, 0x26000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000560)={{r0}, 0x0, 0x13000, 0x39000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000005a0)={{r0}, 0x0, 0x13000, 0x5f000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000005c0)={{r0}, 0x0, 0x13000, 0x72000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000005e0)={{r0}, 0x0, 0x13000, 0x85000}) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='file3\x00', 0x42, 0x1ff) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000840)={{r1}, 0x0, 0x0, 0x17c000}) 2m14.338471142s ago: executing program 5 (id=2824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000300)=0xfffffd7c, 0x4) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r5 = io_uring_setup(0x66a4, &(0x7f0000000380)={0x0, 0x417c, 0x2, 0x1, 0x2b8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c814) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 2m8.04696499s ago: executing program 5 (id=2835): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f00000001c0)) close_range(r4, 0xffffffffffffffff, 0x0) 2m6.965682965s ago: executing program 5 (id=2838): creat(&(0x7f0000000380)='./file0\x00', 0x206) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffcc6, 0x0, 0xffffffffffffffb5, 0x0, 0x53}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r2, &(0x7f0000000080)=0x800, 0x12) read$FUSE(r2, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 1m50.834362485s ago: executing program 39 (id=2838): creat(&(0x7f0000000380)='./file0\x00', 0x206) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffcc6, 0x0, 0xffffffffffffffb5, 0x0, 0x53}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r2, &(0x7f0000000080)=0x800, 0x12) read$FUSE(r2, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 24.047278354s ago: executing program 1 (id=3005): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={r5, r0, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x1, 0x73}, 0x9c) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 22.786879204s ago: executing program 1 (id=3008): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socket(0x23, 0x80805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 19.352547595s ago: executing program 9 (id=3013): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 19.10340339s ago: executing program 9 (id=3015): move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x4d5, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, {}, {}, {0x7, 0xfffffffd}, 0x0, 0x0, 0x2}, 0x0, 0x4}}, 0xf8}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 18.899830635s ago: executing program 4 (id=3016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.977441877s ago: executing program 9 (id=3017): syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x8000001, 0x1}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 16.296611166s ago: executing program 9 (id=3018): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r6, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x1, 0x73}, 0x9c) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r7, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 16.13433996s ago: executing program 1 (id=3020): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.031295673s ago: executing program 4 (id=3022): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff0000000001000000040007800c00020068fff829c0dd5d87"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r4 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x2, 0x80000001}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r7, 0x0) write$char_usb(r6, &(0x7f00000001c0)="64e9", 0x2) 14.160464007s ago: executing program 9 (id=3024): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000180)=0x800) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 13.652839548s ago: executing program 4 (id=3026): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 13.366180215s ago: executing program 4 (id=3028): syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x8000001, 0x1}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 12.233173432s ago: executing program 4 (id=3030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 10.467347974s ago: executing program 1 (id=3031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x20}}, 0x8000) 10.312173197s ago: executing program 6 (id=3032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000080)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r8, 0xc0844123, &(0x7f00000001c0)) close_range(r5, 0xffffffffffffffff, 0x0) 9.34614229s ago: executing program 1 (id=3033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 6.468644518s ago: executing program 3 (id=3035): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x0) write(r3, &(0x7f0000000300)='lzo-rle', 0x7) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_DIRENTPLUS(r4, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)="001122334455", 0x6) close(r6) 6.389538769s ago: executing program 4 (id=3036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) 6.082951276s ago: executing program 6 (id=3037): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 6.076902297s ago: executing program 1 (id=3038): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/ramdisk_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/ramdisk_0/rd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/ramdisk_0/rd/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000240), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/ramdisk_0/rd/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000740)='./config/target/core/ramdisk_0/rd\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/port1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000003c0)='0x1d', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 5.881975111s ago: executing program 6 (id=3039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000040)={0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x20}}, 0x8000) 5.861419172s ago: executing program 3 (id=3040): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x8000001, 0x1}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 5.818166813s ago: executing program 9 (id=3041): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2040400) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fcntl$setpipe(r4, 0x407, 0xffffffffffffffff) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r5, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x2052, r7, 0x0) r8 = syz_io_uring_setup(0xd06b, &(0x7f0000000400)={0x0, 0x5961, 0x20, 0x2, 0x28a, 0x0, r4}, 0x0, &(0x7f00000000c0), 0x0) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.747891908s ago: executing program 6 (id=3042): syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 4.715789799s ago: executing program 3 (id=3043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x20}}, 0x8000) 4.435470665s ago: executing program 6 (id=3044): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r0, 0xf, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x109202) 3.120811086s ago: executing program 3 (id=3045): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r6, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x1, 0x73}, 0x9c) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r7, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 1.052304135s ago: executing program 6 (id=3046): clock_getres(0x8, 0x0) 1.015146936s ago: executing program 3 (id=3047): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f00000001c0)) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) kernel console output (not intermixed with test programs): config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 880.816859][ T4357] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 880.963298][ T4783] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 880.986634][ T4783] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 880.997151][ T4783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.726039][ T4357] usb 9-1: USB disconnect, device number 3 [ 881.942294][ T4783] snd-usb-audio: probe of 6-1:27.0 failed with error -12 [ 881.957730][ T4783] usb 6-1: USB disconnect, device number 2 [ 882.794027][ T9339] udevd[9339]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.905796][T12727] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 882.917527][T12727] qnx6: wrong signature (magic) in superblock #1. [ 882.924102][T12727] qnx6: unable to read the first superblock [ 885.676876][ T4778] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 885.806994][ T4783] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 885.876312][ T4778] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 885.909172][ T4778] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 886.616389][T12744] loop7: detected capacity change from 0 to 32768 [ 886.738165][ T4778] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 886.747975][ T4778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.765247][T12750] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 886.786936][T12744] XFS (loop7): Mounting V5 Filesystem [ 886.792395][ T4783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.792427][ T4783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.792450][ T4783] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 886.792487][ T4783] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 886.792541][ T4783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.802454][ T4783] usb 6-1: config 0 descriptor?? [ 886.927923][T12745] loop4: detected capacity change from 0 to 32768 [ 887.012162][T12744] XFS (loop7): Ending clean mount [ 887.084283][ T4780] usb 9-1: USB disconnect, device number 4 [ 887.184095][T12745] XFS (loop4): Mounting V5 Filesystem [ 887.299219][T12745] XFS (loop4): log mount failed [ 887.424055][ T4783] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 887.477598][ T4783] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 887.553584][ T6507] XFS (loop7): Unmounting Filesystem [ 887.798759][ T4783] usb 6-1: USB disconnect, device number 3 [ 888.209433][T12786] fido_id[12786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 890.028730][T12806] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 890.040835][T12806] qnx6: wrong signature (magic) in superblock #1. [ 890.047980][T12806] qnx6: unable to read the first superblock [ 890.550702][ T26] audit: type=1800 audit(1785927705.709:71): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1886" name="UDC" dev="configfs" ino=60683 res=0 errno=0 [ 894.564209][T12859] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 894.575814][T12859] qnx6: wrong signature (magic) in superblock #1. [ 894.583330][T12859] qnx6: unable to read the first superblock [ 895.426518][T12869] binder: BINDER_SET_CONTEXT_MGR already set [ 895.459184][T12869] binder: 12866:12869 ioctl 4018620d 200000004a80 returned -16 [ 896.526990][ T4782] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 896.747711][ T4782] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.767804][ T4782] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 896.928040][ T4782] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.937741][ T4782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.957555][T12871] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 897.782289][ T4782] usb 6-1: USB disconnect, device number 4 [ 898.089104][ T9247] udevd[9247]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.066529][T12887] loop7: detected capacity change from 0 to 32768 [ 899.414721][T12887] XFS (loop7): Mounting V5 Filesystem [ 900.290618][T12887] XFS (loop7): log mount failed [ 900.605511][T12901] loop8: detected capacity change from 0 to 32768 [ 900.673246][T12901] XFS (loop8): Mounting V5 Filesystem [ 900.888420][T12901] XFS (loop8): Ending clean mount [ 901.399553][ T9418] XFS (loop8): Unmounting Filesystem [ 902.817264][ T4782] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 904.506900][ T4782] usb 7-1: Using ep0 maxpacket: 32 [ 904.528541][ T4782] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 904.563813][ T4782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.599816][ T4782] usb 7-1: Product: syz [ 904.614298][ T4782] usb 7-1: Manufacturer: syz [ 904.627091][ T4782] usb 7-1: SerialNumber: syz [ 904.806049][ T4782] usb 7-1: config 0 descriptor?? [ 904.834179][ T4782] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 906.447033][ T4782] gspca_topro: reg_w err -110 [ 906.537766][ T4782] gspca_topro: Sensor soi763a [ 908.084283][ T4782] usb 7-1: USB disconnect, device number 3 [ 909.215534][T12978] loop8: detected capacity change from 0 to 32768 [ 909.540754][T12978] XFS (loop8): Mounting V5 Filesystem [ 909.939747][T12978] XFS (loop8): Ending clean mount [ 910.184430][T12997] loop4: detected capacity change from 0 to 32768 [ 910.223779][ T9418] XFS (loop8): Unmounting Filesystem [ 910.300147][T12992] loop6: detected capacity change from 0 to 32768 [ 910.336357][T12997] XFS (loop4): Mounting V5 Filesystem [ 910.404265][T12997] XFS (loop4): Ending clean mount [ 910.452947][T12992] XFS (loop6): Mounting V5 Filesystem [ 910.583413][T12992] XFS (loop6): Ending clean mount [ 910.751277][ T4284] XFS (loop4): Unmounting Filesystem [ 911.068076][ T5909] XFS (loop6): Unmounting Filesystem [ 911.180126][T13042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 911.194536][T13042] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 911.206386][T13042] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 911.480117][T13049] overlayfs: failed to resolve './file0': -2 [ 911.538533][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1941'. [ 911.547705][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1941'. [ 914.151774][T13081] tc_dump_action: action bad kind [ 914.193202][T13067] loop8: detected capacity change from 0 to 32768 [ 914.707101][T13067] XFS (loop8): Mounting V5 Filesystem [ 915.749496][T13067] XFS (loop8): Ending clean mount [ 916.310757][T13086] loop7: detected capacity change from 0 to 32768 [ 916.413755][T13086] XFS (loop7): Mounting V5 Filesystem [ 916.511201][ T9418] XFS (loop8): Unmounting Filesystem [ 916.551659][T13086] XFS (loop7): Ending clean mount [ 917.102040][T13114] overlayfs: failed to resolve './file0': -2 [ 917.135691][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1954'. [ 917.145165][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1954'. [ 918.013577][ T6507] XFS (loop7): Unmounting Filesystem [ 918.184975][T13118] overlayfs: missing 'lowerdir' [ 921.335820][T13157] overlayfs: failed to resolve './file0': -2 [ 921.394572][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1968'. [ 921.403728][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1968'. [ 922.258938][T13164] overlayfs: missing 'lowerdir' [ 923.541852][T13179] loop7: detected capacity change from 0 to 1024 [ 923.828126][T13184] 9pnet_virtio: no channels available for device syz [ 924.486391][ T26] audit: type=1800 audit(1785927739.539:72): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1976" name="file0" dev="loop7" ino=18 res=0 errno=0 [ 926.806002][T13211] overlayfs: failed to resolve './file0': -2 [ 931.399838][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.406276][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.920012][T13270] overlayfs: failed to resolve './file0': -2 [ 934.128454][T13266] overlayfs: missing 'workdir' [ 935.677770][T13286] zram: Can't change algorithm for initialized device [ 935.749338][T13286] zram: Cannot change disksize for initialized device [ 936.215538][T13297] loop7: detected capacity change from 0 to 128 [ 936.720406][T13297] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 936.730828][T13297] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 937.141332][ T6507] EXT4-fs (loop7): unmounting filesystem. [ 937.542748][T13313] overlayfs: failed to resolve './file0': -2 [ 938.713044][T13322] loop5: detected capacity change from 0 to 1024 [ 938.818285][T13322] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 938.871708][T13322] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.669342][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 941.894794][T13341] zram: Can't change algorithm for initialized device [ 941.918180][T13341] zram: Cannot change disksize for initialized device [ 942.645800][T13353] loop7: detected capacity change from 0 to 128 [ 942.699483][T13353] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 942.745180][T13353] ext4 filesystem being mounted at /303/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 943.024177][T13358] overlayfs: failed to resolve './file0': -2 [ 943.782251][ T6507] EXT4-fs (loop7): unmounting filesystem. [ 944.117889][T13368] loop7: detected capacity change from 0 to 1024 [ 944.229914][T13371] loop6: detected capacity change from 0 to 1024 [ 944.429423][T13368] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 944.591686][T13371] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 944.615351][T13368] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.761182][T13371] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.936860][T13303] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 947.972907][T13303] EXT4-fs (loop7): Remounting filesystem read-only [ 948.215926][ T6507] EXT4-fs (loop7): unmounting filesystem. [ 948.547021][T13303] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 948.781704][T13303] EXT4-fs (loop6): Remounting filesystem read-only [ 949.752162][ T5909] EXT4-fs (loop6): unmounting filesystem. [ 950.693040][T13405] loop5: detected capacity change from 0 to 128 [ 951.503992][T13405] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 951.537079][T13405] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 952.450906][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 952.780095][T13423] overlayfs: failed to resolve './file0': -2 [ 953.944461][T13431] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2039'. [ 954.729390][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 954.741116][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 954.749854][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 954.758668][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 954.767581][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 954.775358][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 954.893276][T13441] loop5: detected capacity change from 0 to 1024 [ 954.945545][ T4516] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.956528][T13441] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 954.977169][T13441] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.181213][ T4516] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.938926][ T4516] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.102796][ T4516] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.816940][ T4516] tipc: Left network mode [ 956.954802][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 957.371473][T13436] chnl_net:caif_netlink_parms(): no params data found [ 957.718009][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 957.786113][T13436] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.799818][T13466] loop7: detected capacity change from 0 to 128 [ 957.834383][T13436] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.865970][T13436] device bridge_slave_0 entered promiscuous mode [ 957.877326][T13466] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 957.909354][T13466] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 958.766255][T13483] overlayfs: failed to resolve './file0': -2 [ 959.134752][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 959.202997][ T6507] EXT4-fs (loop7): unmounting filesystem. [ 959.349000][T13487] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2051'. [ 959.543685][T13436] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.572351][T13436] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.586091][T13489] loop7: detected capacity change from 0 to 1024 [ 959.604059][T13436] device bridge_slave_1 entered promiscuous mode [ 960.254905][T13497] 9pnet_virtio: no channels available for device syz [ 960.570771][ T26] audit: type=1800 audit(1785927775.599:73): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2050" name="file0" dev="loop7" ino=18 res=0 errno=0 [ 961.178300][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 961.672722][T13513] loop6: detected capacity change from 0 to 1024 [ 961.733081][T13436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.744412][T13513] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 961.760658][T13513] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.793151][T13436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.960147][T13517] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 962.002106][T13517] EXT4-fs (loop6): Remounting filesystem read-only [ 962.904701][T13436] team0: Port device team_slave_0 added [ 963.038772][T13436] team0: Port device team_slave_1 added [ 963.245706][T13436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.266782][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 963.272943][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.025668][ T5909] EXT4-fs (loop6): unmounting filesystem. [ 964.031608][T13436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.679274][T13436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.686304][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.728399][T13436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.400460][T13436] device hsr_slave_0 entered promiscuous mode [ 965.521963][T13436] device hsr_slave_1 entered promiscuous mode [ 965.617082][T13436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.624754][T13436] Cannot create hsr debugfs directory [ 966.000614][T13565] overlayfs: failed to resolve './file0': -2 [ 967.626867][ T14] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 968.259721][ T4516] device hsr_slave_0 left promiscuous mode [ 968.278904][ T14] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 968.306925][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.327255][ T4516] device hsr_slave_1 left promiscuous mode [ 968.352060][ T14] usb 8-1: config 0 descriptor?? [ 968.364963][ T14] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 968.371976][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.387018][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.580205][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.614300][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.282343][ T4516] device bridge_slave_1 left promiscuous mode [ 969.316916][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.382496][ T4516] device bridge_slave_0 left promiscuous mode [ 969.400217][ T14] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 969.417882][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.483153][T13576] loop4: detected capacity change from 0 to 32768 [ 969.490979][ T4516] device veth1_macvtap left promiscuous mode [ 969.497420][ T4516] device veth0_macvtap left promiscuous mode [ 969.503643][ T4516] device veth1_vlan left promiscuous mode [ 969.537550][ T4516] device veth0_vlan left promiscuous mode [ 969.582186][T13576] XFS (loop4): Mounting V5 Filesystem [ 969.609222][ T14] gspca_cpia1: usb_control_msg 02, error -71 [ 969.615290][ T14] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 969.638558][ T14] usb 8-1: USB disconnect, device number 4 [ 969.691185][T13576] XFS (loop4): Ending clean mount [ 969.933189][ T4284] XFS (loop4): Unmounting Filesystem [ 972.250371][T13636] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2080'. [ 972.840078][T13644] loop4: detected capacity change from 0 to 1024 [ 974.255809][T13651] 9pnet_virtio: no channels available for device syz [ 974.703143][ T4516] team0 (unregistering): Port device team_slave_1 removed [ 974.790896][ T4516] team0 (unregistering): Port device team_slave_0 removed [ 974.869294][T13649] loop6: detected capacity change from 0 to 32768 [ 974.902121][ T4516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.367896][ T4516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.473670][T13649] XFS (loop6): Mounting V5 Filesystem [ 975.821921][T13649] XFS (loop6): Ending clean mount [ 975.998596][T13665] loop4: detected capacity change from 0 to 128 [ 976.024042][ T5909] XFS (loop6): Unmounting Filesystem [ 976.094987][T13665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 976.118570][T13665] ext4 filesystem being mounted at /443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 976.752565][ T4516] bond0 (unregistering): Released all slaves [ 976.950266][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 977.055453][T13675] loop4: detected capacity change from 0 to 1024 [ 978.177804][T13675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 978.186429][T13675] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.582995][T13436] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 979.046224][T13436] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 979.117307][T13436] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 979.176622][T13436] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 979.389667][T13703] binder: 13702:13703 ioctl c0306201 0 returned -14 [ 979.541218][T13436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.609711][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 979.637501][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.683204][T13436] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.739072][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 979.765634][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.790930][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.798241][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.863875][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 979.901766][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 979.961488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 980.120891][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.128164][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.246820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 980.340787][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 980.438256][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 980.505703][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 980.515178][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 980.524153][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 980.527609][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 980.548396][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 980.612970][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 980.656620][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 980.726041][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 980.757627][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 980.790594][T13436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 981.886191][T13712] loop4: detected capacity change from 0 to 32768 [ 981.992410][T13712] XFS (loop4): Mounting V5 Filesystem [ 982.156337][T13712] XFS (loop4): Ending clean mount [ 982.246871][ T4284] XFS (loop4): Unmounting Filesystem [ 983.277581][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 983.285296][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 983.392672][T13747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2099'. [ 983.497738][T13436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.606978][T13763] loop5: detected capacity change from 0 to 1024 [ 984.796346][T13769] dlm: no locking on control device [ 984.818286][T13763] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 984.853601][T13763] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.516801][T13771] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 986.914677][T13771] EXT4-fs (loop5): Remounting filesystem read-only [ 986.995604][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 987.389569][T13760] loop7: detected capacity change from 0 to 32768 [ 987.802828][T13798] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2113'. [ 988.729830][T13778] loop4: detected capacity change from 0 to 32768 [ 988.961907][T13778] XFS (loop4): Mounting V5 Filesystem [ 989.155195][T13778] XFS (loop4): log mount failed [ 989.373397][ T6448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 989.412501][ T6448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 989.484756][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 989.533094][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.555788][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.574505][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.683059][T13436] device veth0_vlan entered promiscuous mode [ 989.699490][T13799] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.753901][T13436] device veth1_vlan entered promiscuous mode [ 989.846657][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 989.862875][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 989.897696][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 990.006291][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 990.079315][T13436] device veth0_macvtap entered promiscuous mode [ 990.164253][T13436] device veth1_macvtap entered promiscuous mode [ 990.297584][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.340984][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.351851][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.365773][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.378091][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.389041][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.400960][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.415277][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.448505][T13436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.623138][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.665889][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.676103][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.706940][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.722644][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.733566][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.749314][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.762711][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.780198][T13436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.860382][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 990.965998][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 991.024979][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 991.085773][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 991.778722][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 991.816134][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 991.925990][T13436] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.015431][T13436] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.186182][T13436] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.363500][T13436] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.850073][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.856541][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.081937][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.117424][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.144138][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 993.184741][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.200654][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.229670][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 993.365944][T13847] loop6: detected capacity change from 0 to 32768 [ 993.681034][T13847] XFS (loop6): Mounting V5 Filesystem [ 994.144785][T13847] XFS (loop6): Ending clean mount [ 994.246262][ T5909] XFS (loop6): Unmounting Filesystem [ 995.603892][T13896] zram: Can't change algorithm for initialized device [ 995.670907][T13896] zram: Cannot change disksize for initialized device [ 995.727547][T13862] loop4: detected capacity change from 0 to 32768 [ 1000.118273][T13937] loop5: detected capacity change from 0 to 1024 [ 1000.141568][T13945] 0x000000000007-0x000000020000 : "" [ 1000.159602][T13945] ftl_cs: FTL header corrupt! [ 1000.649003][T13937] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1000.839875][T13937] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.371446][T13960] zram: Can't change algorithm for initialized device [ 1001.412121][T13960] zram: Cannot change disksize for initialized device [ 1002.670042][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 1004.662308][T13977] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.723380][T13977] binder: 13975:13977 ioctl 4018620d 200000004a80 returned -16 [ 1007.333946][T13972] loop6: detected capacity change from 0 to 32768 [ 1008.235735][T14013] loop4: detected capacity change from 0 to 1024 [ 1008.462563][T14022] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1008.516428][T14023] zram: Cannot change disksize for initialized device [ 1008.624175][T14013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1008.658350][T14013] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.028493][T14028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1010.376428][T14028] EXT4-fs (loop4): Remounting filesystem read-only [ 1011.476810][ T9274] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1011.565703][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 1012.068350][T14053] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1015.097366][T14064] loop7: detected capacity change from 0 to 32768 [ 1015.239053][T14064] XFS (loop7): Mounting V5 Filesystem [ 1015.441112][T14064] XFS (loop7): Ending clean mount [ 1016.186619][ T6507] XFS (loop7): Unmounting Filesystem [ 1017.327287][T14126] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1017.337905][T14126] qnx6: wrong signature (magic) in superblock #1. [ 1017.344348][T14126] qnx6: unable to read the first superblock [ 1018.913530][T14145] loop7: detected capacity change from 0 to 128 [ 1019.058997][T14145] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1019.096509][T14145] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.841383][ T6507] EXT4-fs (loop7): unmounting filesystem. [ 1021.819128][T14175] loop7: detected capacity change from 0 to 32768 [ 1021.928077][T14175] XFS (loop7): Mounting V5 Filesystem [ 1022.016131][T14175] XFS (loop7): Ending clean mount [ 1022.256467][T14201] overlayfs: missing 'lowerdir' [ 1022.321726][ T6507] XFS (loop7): Unmounting Filesystem [ 1024.694176][T14231] 0x000000000007-0x000000020000 : "" [ 1024.709332][T14231] ftl_cs: FTL header corrupt! [ 1026.134415][T14243] loop6: detected capacity change from 0 to 1024 [ 1026.370245][T14248] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2208'. [ 1026.574119][T14257] 9pnet_virtio: no channels available for device syz [ 1029.040450][T14246] loop9: detected capacity change from 0 to 32768 [ 1029.938280][T14298] syz.5.2216 (14298): /proc/14298/oom_adj is deprecated, please use /proc/14298/oom_score_adj instead. [ 1030.100994][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2221'. [ 1031.973335][T14310] loop6: detected capacity change from 0 to 1024 [ 1032.293699][T14325] 9pnet_virtio: no channels available for device syz [ 1032.797610][T14324] input: syz1 as /devices/virtual/input/input10 [ 1034.522194][T14321] loop4: detected capacity change from 0 to 32768 [ 1034.606954][T14321] XFS (loop4): Mounting V5 Filesystem [ 1034.728839][T14321] XFS (loop4): Ending clean mount [ 1036.123647][ T4284] XFS (loop4): Unmounting Filesystem [ 1036.280122][T14384] loop6: detected capacity change from 0 to 1024 [ 1037.036115][T14388] 9pnet_virtio: no channels available for device syz [ 1037.266768][ T26] audit: type=1800 audit(1785927852.379:74): pid=14388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2238" name="file0" dev="loop6" ino=18 res=0 errno=0 [ 1037.846605][T14375] loop5: detected capacity change from 0 to 32768 [ 1038.015165][T14375] XFS (loop5): Mounting V5 Filesystem [ 1038.148611][T14375] XFS (loop5): Ending clean mount [ 1041.678477][ T4871] XFS (loop5): Unmounting Filesystem [ 1042.892598][T14455] loop9: detected capacity change from 0 to 1024 [ 1043.234743][T14461] 9pnet_virtio: no channels available for device syz [ 1045.356534][ T9274] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1045.586876][ T9274] usb 6-1: Using ep0 maxpacket: 16 [ 1045.603988][T14489] 0x000000000007-0x000000020000 : "" [ 1045.619091][T14489] ftl_cs: FTL header corrupt! [ 1046.376483][ T9274] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1046.385798][ T9274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.394210][ T9274] usb 6-1: Product: syz [ 1046.398590][ T9274] usb 6-1: Manufacturer: syz [ 1046.403217][ T9274] usb 6-1: SerialNumber: syz [ 1046.409641][ T9274] usb 6-1: config 0 descriptor?? [ 1046.417820][ T9274] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1046.823168][ T9274] ssu100: probe of 6-1:0.0 failed with error -71 [ 1047.007723][ T9274] usb 6-1: USB disconnect, device number 5 [ 1047.910487][T14516] overlayfs: missing 'lowerdir' [ 1048.216848][T14515] loop6: detected capacity change from 0 to 1024 [ 1048.850599][T14515] 9pnet_virtio: no channels available for device syz [ 1051.189150][T14558] ip_tables: iptables: counters copy to user failed while replacing table [ 1051.550097][ T9274] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1051.837056][ T9274] usb 6-1: Using ep0 maxpacket: 8 [ 1051.851313][ T9274] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1051.942040][ T9274] usb 6-1: config 3 has an invalid interface number: 171 but max is 0 [ 1052.022458][ T9274] usb 6-1: config 3 has no interface number 0 [ 1052.065551][ T9274] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 1052.158325][ T9274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.166417][ T9274] usb 6-1: Product: syz [ 1052.173920][T14570] binder: 14569:14570 ioctl 4018620d 0 returned -22 [ 1052.305099][ T9274] usb 6-1: Manufacturer: syz [ 1052.402183][ T9274] usb 6-1: SerialNumber: syz [ 1053.071340][T14552] autofs4:pid:14552:autofs_fill_super: called with bogus options [ 1053.225826][ T9274] (null): radio-mr800 - initialization failed [ 1053.255043][ T9274] radio-mr800: probe of 6-1:3.171 failed with error -22 [ 1053.281320][ T9274] usbhid 6-1:3.171: couldn't find an input interrupt endpoint [ 1053.346057][T14584] loop7: detected capacity change from 0 to 1024 [ 1053.363256][ T9274] usb 6-1: USB disconnect, device number 6 [ 1053.465194][T14590] loop4: detected capacity change from 0 to 1024 [ 1054.337168][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.343564][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.390483][T14584] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1054.421521][T14584] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.955097][T14606] 9pnet_virtio: no channels available for device syz [ 1055.270242][ T26] audit: type=1800 audit(1785927870.299:75): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2286" name="file0" dev="loop4" ino=18 res=0 errno=0 [ 1055.581567][T14615] loop9: detected capacity change from 0 to 128 [ 1055.667608][T14615] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1055.682370][T14615] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.558832][T13436] EXT4-fs (loop9): unmounting filesystem. [ 1056.837069][T14596] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1056.892830][T14596] EXT4-fs (loop7): Remounting filesystem read-only [ 1056.938349][T14638] zram: Can't change algorithm for initialized device [ 1056.999962][T14638] zram: Cannot change disksize for initialized device [ 1058.464138][T14655] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1058.477281][T14655] qnx6: wrong signature (magic) in superblock #1. [ 1058.483848][T14655] qnx6: unable to read the first superblock [ 1060.006669][T14669] tc_dump_action: action bad kind [ 1061.639908][T14677] loop6: detected capacity change from 0 to 128 [ 1061.723149][T14677] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1061.767465][T14677] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.740233][ T5909] EXT4-fs (loop6): unmounting filesystem. [ 1064.476862][T14695] 0x000000000007-0x000000020000 : "" [ 1064.490535][T14695] ftl_cs: FTL header corrupt! [ 1068.346336][T14730] loop6: detected capacity change from 0 to 128 [ 1068.394378][T14730] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1068.407532][T14730] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.417431][ T5909] EXT4-fs (loop6): unmounting filesystem. [ 1071.158228][T14603] EXT4-fs (loop7): unmounting filesystem. [ 1072.510095][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1072.522452][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1072.531538][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1072.539602][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1072.549267][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1072.556841][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1073.326929][ T4780] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1073.557026][ T4780] usb 6-1: Using ep0 maxpacket: 8 [ 1073.594735][ T4780] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1073.799100][ T4780] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1073.955159][ T4780] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1073.999751][ T4780] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1074.016215][ T4780] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.029956][ T4780] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1074.041010][ T4780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.430338][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.492516][T14771] chnl_net:caif_netlink_parms(): no params data found [ 1074.578985][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.597060][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 1075.303038][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.709157][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.769550][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.835946][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.872223][T14771] device bridge_slave_0 entered promiscuous mode [ 1075.925274][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.955795][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.983481][T14771] device bridge_slave_1 entered promiscuous mode [ 1076.078609][ T4780] usb 6-1: usb_control_msg returned -71 [ 1076.084890][ T4780] usbtmc 6-1:16.0: can't read capabilities [ 1076.467571][T14771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.693207][T14771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.726749][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 1076.861244][ T4780] usb 6-1: USB disconnect, device number 7 [ 1076.930254][T14771] team0: Port device team_slave_0 added [ 1077.027953][T14825] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1077.039595][T14825] qnx6: wrong signature (magic) in superblock #1. [ 1077.046131][T14825] qnx6: unable to read the first superblock [ 1077.181891][T14771] team0: Port device team_slave_1 added [ 1078.200782][ T57] tipc: Left network mode [ 1078.445060][T14771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.480588][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.695248][T14771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.708201][T14771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.715201][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.742594][T14771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.757093][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 1079.914709][T14771] device hsr_slave_0 entered promiscuous mode [ 1079.939312][T14771] device hsr_slave_1 entered promiscuous mode [ 1079.968068][T14771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1079.986277][T14771] Cannot create hsr debugfs directory [ 1080.836813][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 1081.451010][T14866] 0x000000000007-0x000000020000 : "" [ 1082.263773][T14866] ftl_cs: FTL header corrupt! [ 1082.888297][T14870] tc_dump_action: action bad kind [ 1093.015609][ T57] device hsr_slave_0 left promiscuous mode [ 1093.809251][ T57] device hsr_slave_1 left promiscuous mode [ 1093.894935][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.926115][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.758652][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.766151][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.807481][ T57] device bridge_slave_1 left promiscuous mode [ 1094.813795][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.842683][ T57] device bridge_slave_0 left promiscuous mode [ 1094.876873][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.077297][ T57] device veth1_macvtap left promiscuous mode [ 1095.083426][ T57] device veth0_macvtap left promiscuous mode [ 1095.317024][ T57] device veth1_vlan left promiscuous mode [ 1095.336865][ T57] device veth0_vlan left promiscuous mode [ 1096.555398][ T4778] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1096.786570][ T4778] usb 10-1: Using ep0 maxpacket: 8 [ 1096.799790][ T4778] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1096.818796][ T4778] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1096.833797][ T4778] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.846577][ T4778] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.863914][ T4778] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.884480][ T4778] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1096.894071][ T4778] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.639796][ T4778] usb 10-1: usb_control_msg returned -71 [ 1097.655070][ T4778] usbtmc 10-1:16.0: can't read capabilities [ 1097.689618][ T4778] usb 10-1: USB disconnect, device number 2 [ 1098.001165][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1098.050911][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1098.100287][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.152743][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.965537][ T57] bond0 (unregistering): Released all slaves [ 1100.286100][T15000] binder: 14998:15000 ioctl c0306201 200000000080 returned -14 [ 1100.297285][T15000] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.303335][T15000] binder: 14998:15000 ioctl 4018620d 200000000040 returned -16 [ 1100.339625][T15000] binder: 14998:15000 ioctl c0306201 2000000003c0 returned -14 [ 1102.333076][T14771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1103.665360][T14771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1103.717552][T14771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1103.790405][T14771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1105.166937][T13993] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1105.416816][T13993] usb 10-1: Using ep0 maxpacket: 8 [ 1105.427423][T13993] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1105.471275][T13993] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1105.512264][T13993] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1105.542617][T13993] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1105.585825][T13993] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1105.616411][T13993] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1105.657191][T13993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.669113][T15031] tc_dump_action: action bad kind [ 1106.134011][T14771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.822929][T14771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.847741][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1106.865732][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1107.317936][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1108.675280][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1108.747494][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.754718][T13525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.908753][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1109.982805][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1110.098592][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.105766][T13525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.197306][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1110.330529][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1110.386294][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1110.427335][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1110.447934][T13993] usb 10-1: usb_control_msg returned -71 [ 1110.453675][T13993] usbtmc 10-1:16.0: can't read capabilities [ 1110.515741][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1110.543999][T13993] usb 10-1: USB disconnect, device number 3 [ 1110.550358][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1110.611047][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1110.636444][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1110.647457][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1110.659726][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1110.672911][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1110.695942][T15061] binder: 15058:15061 ioctl c0306201 0 returned -14 [ 1110.704760][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1110.730132][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1111.386756][T13993] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1111.906725][T13993] usb 10-1: Using ep0 maxpacket: 32 [ 1111.924673][T13993] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1111.963168][T13993] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1111.997673][T13993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.036473][T13993] usb 10-1: Product: syz [ 1112.046593][T13993] usb 10-1: Manufacturer: syz [ 1112.093733][T15092] zram: Can't change algorithm for initialized device [ 1112.101110][T13993] usb 10-1: SerialNumber: syz [ 1112.226884][T13993] usb 10-1: selecting invalid altsetting 1 [ 1112.281319][T13993] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 1112.312144][T15092] zram: Cannot change disksize for initialized device [ 1112.469157][T13993] usb 10-1: selecting invalid altsetting 1 [ 1112.566397][T13993] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 1112.708807][T13993] usb 10-1: selecting invalid altsetting 1 [ 1112.818276][T13993] snd-usb-audio: probe of 10-1:1.2 failed with error -22 [ 1112.899520][T13993] usb 10-1: USB disconnect, device number 4 [ 1113.218461][T12772] udevd[12772]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.452368][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1114.548169][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1114.603885][T14771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.616763][ T4779] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1114.826850][ T4779] usb 6-1: Using ep0 maxpacket: 8 [ 1114.850462][ T4779] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1114.993703][T15115] overlayfs: missing 'workdir' [ 1115.014257][ T4779] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1115.155921][ T4779] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1115.283743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1115.299753][ T4779] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1115.720136][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.730184][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.017329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1117.300555][ T4779] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.313906][ T4779] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1117.323913][ T4779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.348694][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1117.368915][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1117.420106][T14771] device veth0_vlan entered promiscuous mode [ 1117.473616][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.518297][ T4779] usb 6-1: can't set config #16, error -71 [ 1117.532327][ T4779] usb 6-1: USB disconnect, device number 8 [ 1117.555926][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1117.593684][T14771] device veth1_vlan entered promiscuous mode [ 1118.461103][T15133] binder: 15132:15133 ioctl c0306201 0 returned -14 [ 1118.476876][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1118.547337][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1118.591112][T14771] device veth0_macvtap entered promiscuous mode [ 1118.704642][T14771] device veth1_macvtap entered promiscuous mode [ 1118.767764][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.816732][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.846720][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.869531][T15143] zram: Can't change algorithm for initialized device [ 1118.869905][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.912475][T15143] zram: Cannot change disksize for initialized device [ 1118.949660][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.978563][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.019090][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.066084][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.213524][T14771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.261136][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1119.282592][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1119.337949][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1119.445634][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1119.675894][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.338432][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.401791][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.421085][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.459967][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.481019][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.511673][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.554740][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.616566][T14771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.700257][T14771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.848535][T14771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.861858][T14771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.873692][T14771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.934714][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1120.965617][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1122.026878][T13525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.088080][T13525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.132432][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1122.172287][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.182070][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.271712][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1122.501461][T15202] 0x000000000007-0x000000020000 : "" [ 1122.514013][T15202] ftl_cs: FTL header corrupt! [ 1125.628797][T15232] zram: Can't change algorithm for initialized device [ 1125.855853][T15232] zram: Cannot change disksize for initialized device [ 1130.993237][T15263] tc_dump_action: action bad kind [ 1134.226372][T15288] 0x000000000007-0x000000020000 : "" [ 1134.495232][T15288] ftl_cs: FTL header corrupt! [ 1134.861716][T15293] zram: Can't change algorithm for initialized device [ 1134.977660][T15293] zram: Cannot change disksize for initialized device [ 1137.286795][T10156] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1137.468590][T10156] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.499449][T10156] usb 1-1: config 0 has no interfaces? [ 1137.539916][T10156] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1137.576750][T10156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.647432][T10156] usb 1-1: config 0 descriptor?? [ 1139.439333][T15311] loop5: detected capacity change from 0 to 32768 [ 1139.752056][T15311] XFS (loop5): Mounting V5 Filesystem [ 1139.889178][T15311] XFS (loop5): Ending clean mount [ 1140.273629][T15361] 0x000000000007-0x000000020000 : "" [ 1140.291253][T15361] ftl_cs: FTL header corrupt! [ 1140.930583][ T4779] usb 1-1: USB disconnect, device number 2 [ 1140.989440][ T4871] XFS (loop5): Unmounting Filesystem [ 1141.144032][T15375] loop0: detected capacity change from 0 to 1024 [ 1141.392866][T15375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1141.427811][T15375] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.237870][ T26] audit: type=1800 audit(1785927960.399:76): pid=15420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2458" name="size" dev="configfs" ino=72108 res=0 errno=0 [ 1146.031209][T15418] loop5: detected capacity change from 0 to 32768 [ 1146.136974][ T4287] Bluetooth: hci1: link tx timeout [ 1146.142727][ T4287] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1146.276826][T15382] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1146.498537][T15382] EXT4-fs (loop0): Remounting filesystem read-only [ 1146.846734][T15418] XFS (loop5): Mounting V5 Filesystem [ 1147.948250][T15418] XFS (loop5): Ending clean mount [ 1148.196738][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 1150.632938][T15463] tipc: Started in network mode [ 1150.638007][T15463] tipc: Node identity 4, cluster identity 4711 [ 1150.644210][T15463] tipc: Node number set to 4 [ 1151.060499][ T4871] XFS (loop5): Unmounting Filesystem [ 1152.375611][T15482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1152.447176][T15482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1152.506093][T15482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1152.538256][T15482] device bridge_slave_0 left promiscuous mode [ 1152.545577][T15482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.615206][T15482] device bridge_slave_1 left promiscuous mode [ 1152.640364][T15482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.853888][T15482] bond0: (slave bond_slave_0): Releasing backup interface [ 1153.487844][T15482] bond0: (slave bond_slave_1): Releasing backup interface [ 1154.021279][T15482] team0: Port device team_slave_0 removed [ 1154.079183][T15482] team0: Port device team_slave_1 removed [ 1154.168623][T15482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.182774][T15482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.223200][T15482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.249104][T15482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.602160][T15483] team0: Port device xfrm0 added [ 1154.869162][T15501] dlm: no local IP address has been set [ 1154.875357][T15501] dlm: cannot start dlm midcomms -107 [ 1154.920722][T15485] tipc: Enabled bearer , priority 0 [ 1156.388608][T15513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2477'. [ 1156.916813][T13993] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1157.216297][T15524] tc_dump_action: action bad kind [ 1157.509247][T13993] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.858449][T13993] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1157.868454][T13993] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1157.877890][T13993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.888001][T13993] usb 10-1: config 0 descriptor?? [ 1158.135642][ T4316] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1158.138277][ T9274] usb 10-1: USB disconnect, device number 5 [ 1160.567416][T15532] fido_id[15532]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1161.856370][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1161.870314][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1161.878588][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1161.951105][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1161.959884][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1161.967704][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1164.036813][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 1164.212907][ T26] audit: type=1800 audit(1785927979.369:77): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2492" name="memory_backed" dev="configfs" ino=71488 res=0 errno=0 [ 1164.247849][T15387] EXT4-fs (loop0): unmounting filesystem. [ 1164.363074][T15549] chnl_net:caif_netlink_parms(): no params data found [ 1166.134540][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 1166.542453][T15549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.553052][T15549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.605372][T15549] device bridge_slave_0 entered promiscuous mode [ 1168.206873][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 1168.309267][T15549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.316442][T15549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.465794][T15549] device bridge_slave_1 entered promiscuous mode [ 1168.630834][T15549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.669698][T15549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.936886][T15549] team0: Port device team_slave_0 added [ 1169.116417][ T6448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.185518][T15549] team0: Port device team_slave_1 added [ 1169.318795][ T6448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.399272][T15549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.415339][T15549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.509366][T15549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.622610][ T6448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.474127][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 1170.607523][T15549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.624811][T15549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.597466][T15549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.907473][ T6448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.210713][T15549] device hsr_slave_0 entered promiscuous mode [ 1176.297920][T15549] device hsr_slave_1 entered promiscuous mode [ 1177.160435][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.167981][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.447384][T15682] tc_dump_action: action bad kind [ 1183.966379][T15549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1183.992895][T15549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1184.123346][T15549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1186.387984][T15549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1186.869336][T15727] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1187.610227][T15727] qnx6: wrong signature (magic) in superblock #1. [ 1187.626776][T15727] qnx6: unable to read the first superblock [ 1188.216321][T15549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.290820][ T6448] device hsr_slave_0 left promiscuous mode [ 1188.333350][ T6448] device hsr_slave_1 left promiscuous mode [ 1188.367134][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.408512][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.424926][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.445386][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.456246][ T6448] device bridge_slave_1 left promiscuous mode [ 1188.462928][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.485256][ T6448] device bridge_slave_0 left promiscuous mode [ 1188.499718][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.536369][ T6448] device veth1_macvtap left promiscuous mode [ 1189.543145][ T6448] device veth0_macvtap left promiscuous mode [ 1189.594485][ T6448] device veth1_vlan left promiscuous mode [ 1189.616022][ T6448] device veth0_vlan left promiscuous mode [ 1194.603488][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 1197.072507][T15816] 0x000000000007-0x000000020000 : "" [ 1197.086064][T15816] ftl_cs: FTL header corrupt! [ 1202.265231][ T6448] team0 (unregistering): Port device team_slave_1 removed [ 1202.941857][T15849] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1203.982775][ T6448] team0 (unregistering): Port device team_slave_0 removed [ 1204.218193][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.377386][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.436795][T15240] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1204.671113][T15240] usb 5-1: Using ep0 maxpacket: 8 [ 1204.682616][T15240] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1204.701342][T15240] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1204.821181][T15240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1204.831934][T15240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1204.861597][T15240] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.969484][T15240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1205.044376][T15240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.719015][T15240] usb 5-1: usb_control_msg returned -71 [ 1206.724776][T15240] usbtmc 5-1:16.0: can't read capabilities [ 1206.757936][T15240] usb 5-1: USB disconnect, device number 7 [ 1207.380065][T15881] loop4: detected capacity change from 0 to 1024 [ 1207.731010][T15883] 9pnet_virtio: no channels available for device syz [ 1208.444030][ T6448] bond0 (unregistering): Released all slaves [ 1209.752703][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1209.812529][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1209.836506][T15549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.965080][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1210.001070][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1210.029186][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.036373][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.077550][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1211.568855][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1211.585860][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1211.611706][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.618955][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.671996][T15911] loop9: detected capacity change from 0 to 1024 [ 1211.783277][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1212.196388][T15915] 9pnet_virtio: no channels available for device syz [ 1212.221955][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1212.255204][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1212.314324][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1212.359503][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1212.413253][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1212.453323][T15908] tc_dump_action: action bad kind [ 1212.621730][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1212.702009][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1212.739409][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1212.803758][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1212.823545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1212.862173][T15549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1216.090006][T15938] loop5: detected capacity change from 0 to 1024 [ 1216.290728][T15938] 9pnet_virtio: no channels available for device syz [ 1218.653152][T15952] tc_dump_action: action bad kind [ 1221.667013][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1221.717049][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1221.725784][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1221.737131][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1221.744994][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1221.753811][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1223.798308][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 1225.886929][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 1226.866854][T15976] chnl_net:caif_netlink_parms(): no params data found [ 1227.224915][T16012] tc_dump_action: action bad kind [ 1227.966893][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 1230.036928][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 1230.411520][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.207401][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.215784][T15976] device bridge_slave_0 entered promiscuous mode [ 1232.315191][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.324531][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.466657][T15976] device bridge_slave_1 entered promiscuous mode [ 1232.976461][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.014337][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.848192][T16061] tc_dump_action: action bad kind [ 1234.430327][T15976] team0: Port device team_slave_0 added [ 1234.536459][T15976] team0: Port device team_slave_1 added [ 1234.612710][T13967] device hsr_slave_0 left promiscuous mode [ 1234.641276][T13967] device hsr_slave_1 left promiscuous mode [ 1234.680297][T13967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.703257][T16070] loop5: detected capacity change from 0 to 32768 [ 1234.715434][T13967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.733486][T13967] device bridge_slave_1 left promiscuous mode [ 1234.752075][T13967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.782121][T13967] device bridge_slave_0 left promiscuous mode [ 1234.791020][T13967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.817039][T16070] XFS (loop5): Mounting V5 Filesystem [ 1234.964642][T16070] XFS (loop5): Ending clean mount [ 1235.698220][ T4871] XFS (loop5): Unmounting Filesystem [ 1235.867661][T13967] team0 (unregistering): Port device team_slave_1 removed [ 1236.232929][T13967] team0 (unregistering): Port device team_slave_0 removed [ 1237.756180][T13967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.051081][T13967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.525320][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.536933][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.471134][T13967] bond0 (unregistering): Released all slaves [ 1242.479535][T16135] loop5: detected capacity change from 0 to 32768 [ 1242.555015][T16135] XFS (loop5): Mounting V5 Filesystem [ 1242.590026][T16135] XFS (loop5): Ending clean mount [ 1242.641093][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.656698][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.683425][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.723647][T16136] tc_dump_action: action bad kind [ 1242.729496][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.864794][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.931695][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.347651][T15976] device hsr_slave_0 entered promiscuous mode [ 1243.489911][T15976] device hsr_slave_1 entered promiscuous mode [ 1244.318809][ T4871] XFS (loop5): Unmounting Filesystem [ 1247.186007][T15976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1247.306048][T15976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1247.375264][T15976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1247.466752][T15976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1249.326786][T15976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.383952][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1249.423358][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1249.457041][T15976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.512996][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1249.537865][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1249.577418][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.584594][T13525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.622440][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1249.667458][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1250.117164][T16208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1250.700739][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1250.719875][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.727328][T13525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.763954][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1250.996135][T15976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1251.008320][T15976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1251.102820][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1251.137872][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1251.197501][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1251.257273][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1251.287891][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1251.314708][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1251.344585][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1251.367035][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1251.400827][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1251.423102][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1251.440334][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1252.215245][T15976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.248840][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1252.256405][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1252.358236][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1252.504681][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1252.650987][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1252.794377][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1253.082871][T15976] device veth0_vlan entered promiscuous mode [ 1253.102249][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1253.144855][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1253.330658][T15976] device veth1_vlan entered promiscuous mode [ 1253.475246][T15976] device veth0_macvtap entered promiscuous mode [ 1253.486423][T15976] device veth1_macvtap entered promiscuous mode [ 1253.504914][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1253.571537][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1254.378873][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1254.517468][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1254.556242][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.605762][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.641543][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.687164][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.743883][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.826871][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.953887][T15976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.447085][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1255.456066][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1255.627236][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.663377][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.717920][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.746671][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.799073][T15976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.849200][T15976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.896727][T15976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.033140][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1256.082629][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1256.135191][T15976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.166905][T15976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.208895][T15976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.258611][T15976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.696924][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.704824][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.797166][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1256.845696][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.877854][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.918745][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1257.121925][T16293] fuse: Bad value for 'rootmode' [ 1257.385383][T13993] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1258.256700][T13993] usb 10-1: Using ep0 maxpacket: 8 [ 1258.264170][T13993] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1258.298372][T13993] usb 10-1: config 0 has no interface number 0 [ 1258.589613][T13993] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1258.600702][T13993] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1258.612867][T13993] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1258.626809][T13993] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1258.635999][T13993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.721160][T13993] usb 10-1: config 0 descriptor?? [ 1258.753260][T13993] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1258.980376][ T4433] usb 10-1: USB disconnect, device number 6 [ 1261.033173][T16336] fuse: Unknown parameter 'use00000000000000000000' [ 1262.391495][T16349] tc_dump_action: action bad kind [ 1264.107063][T16369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1264.892217][T16375] binder_alloc: 16372: binder_alloc_buf, no vma [ 1266.187517][T16385] fuse: Unknown parameter 'use00000000000000000000' [ 1267.474954][T16401] zram: Can't change algorithm for initialized device [ 1267.483891][T16401] zram: Cannot change disksize for initialized device [ 1270.787118][T16417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1271.898208][T16429] fuse: Unknown parameter 'use00000000000000000000' [ 1273.146169][T16440] zram: Can't change algorithm for initialized device [ 1273.194411][T16440] zram: Cannot change disksize for initialized device [ 1274.746851][ T4782] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1275.307458][T16462] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1276.264859][ T4782] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1276.301811][ T4782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.337098][ T4782] usb 10-1: config 0 descriptor?? [ 1276.354512][ T4782] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1276.646387][T16471] input: syz1 as /devices/virtual/input/input11 [ 1276.749852][ T4782] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1276.967236][ T4782] gspca_cpia1: usb_control_msg 01, error -32 [ 1277.311295][ T4782] gspca_cpia1: usb_control_msg 02, error -71 [ 1277.380310][ T4782] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1277.435525][ T4782] usb 10-1: USB disconnect, device number 7 [ 1277.947154][T16488] fuse: Unknown parameter 'user_i00000000000000000000' [ 1278.223745][T16495] zram: Can't change algorithm for initialized device [ 1278.296436][T16495] zram: Cannot change disksize for initialized device [ 1280.967527][T16520] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1284.112934][T16547] zram: Can't change algorithm for initialized device [ 1284.158465][T16547] zram: Cannot change disksize for initialized device [ 1285.828103][T16564] fuse: Unknown parameter 'user_i00000000000000000000' [ 1289.667461][T16584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1290.474512][ T26] audit: type=1326 audit(1785928103.339:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1290.518762][ T26] audit: type=1326 audit(1785928103.339:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1290.543204][ T26] audit: type=1326 audit(1785928103.509:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1290.567835][ T26] audit: type=1326 audit(1785928103.509:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1290.704343][ T26] audit: type=1326 audit(1785928103.509:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1290.889241][ T26] audit: type=1326 audit(1785928103.639:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1290.913519][ T26] audit: type=1326 audit(1785928103.639:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1291.036642][ T26] audit: type=1326 audit(1785928103.639:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1291.109232][ T26] audit: type=1326 audit(1785928103.779:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1291.210007][ T26] audit: type=1326 audit(1785928103.779:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16578 comm="syz.6.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524599e019 code=0x7ffc0000 [ 1291.417279][T16604] zram: Can't change algorithm for initialized device [ 1291.797026][T16604] zram: Cannot change disksize for initialized device [ 1291.891375][T16611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2724'. [ 1292.663212][T16618] fuse: Unknown parameter 'user_i00000000000000000000' [ 1295.668350][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1295.668418][ T26] audit: type=1800 audit(1785928110.829:96): pid=16636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2730" name="addr_trtype" dev="configfs" ino=77520 res=0 errno=0 [ 1296.006651][ T26] audit: type=1800 audit(1785928110.849:97): pid=16636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2730" name="attr_qid_max" dev="configfs" ino=77521 res=0 errno=0 [ 1297.789886][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2737'. [ 1297.906602][ C0] hrtimer: interrupt took 50067 ns [ 1298.594809][T16673] binder_alloc: 16667: binder_alloc_buf, no vma [ 1298.840526][T16681] tmpfs: Unknown parameter 'grpquota' [ 1300.106052][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.112527][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.216846][T16708] overlayfs: failed to resolve './file0': -2 [ 1301.255016][T16716] tc_dump_action: action bad kind [ 1302.505287][T16719] loop1: detected capacity change from 0 to 32768 [ 1302.573694][T16719] XFS (loop1): Mounting V5 Filesystem [ 1302.853830][T16719] XFS (loop1): Ending clean mount [ 1302.936745][ T4779] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1303.677503][ T4779] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1303.697132][ T4779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1303.736731][ T4779] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1303.778605][ T4779] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1303.817408][ T4779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1303.852071][ T4779] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1303.914051][ T4779] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1303.935762][ T4779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1304.141075][ T4779] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1304.152641][ T4779] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1304.161142][ T4779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1304.176645][ T4779] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1304.216633][ T4779] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1304.953259][T15976] XFS (loop1): Unmounting Filesystem [ 1304.994606][ T4779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1305.016664][ T4779] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1305.036655][ T4779] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1305.057379][ T4779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1305.077510][ T4779] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1305.133324][ T4779] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1305.163085][ T4779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1305.202595][ T4779] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1305.224285][ T4779] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1306.100794][ T4779] usb 7-1: unable to read config index 7 descriptor/all [ 1306.110709][ T4779] usb 7-1: can't read configurations, error -71 [ 1307.751489][T16789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1308.887875][T16801] fuse: Unknown parameter 'user_id00000000000000000000' [ 1311.972208][ T4282] Bluetooth: hci1: link tx timeout [ 1311.978539][ T4282] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1314.037249][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 1315.155810][T16852] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1315.774971][T16857] fuse: Bad value for 'fd' [ 1322.467417][T16915] fuse: Bad value for 'fd' [ 1326.062299][T16964] fuse: Bad value for 'fd' [ 1327.207696][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1327.217552][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1327.226823][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1327.234775][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1327.242488][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1327.251459][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1327.393155][T16946] loop9: detected capacity change from 0 to 32768 [ 1328.341631][T15652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.947820][T15652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.135625][T15652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.396949][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 1330.123669][T15652] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.476696][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 1332.012648][T15652] tipc: Left network mode [ 1332.045136][T16980] chnl_net:caif_netlink_parms(): no params data found [ 1333.566651][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 1333.689982][T16980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.375378][T16980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.384058][T16980] device bridge_slave_0 entered promiscuous mode [ 1334.394645][T17062] tc_dump_action: action bad kind [ 1334.554699][T16980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.579586][T16980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.595822][T16980] device bridge_slave_1 entered promiscuous mode [ 1334.690938][T16980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.778335][T16980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.831631][T17055] loop5: detected capacity change from 0 to 32768 [ 1335.165522][T16980] team0: Port device team_slave_0 added [ 1335.180237][T16980] team0: Port device team_slave_1 added [ 1335.277948][T17055] XFS (loop5): Mounting V5 Filesystem [ 1335.398220][T17055] XFS (loop5): Ending clean mount [ 1335.568381][T16980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.575408][T16980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.636710][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 1335.694399][T16980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.076411][T16980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.087266][T16980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.116267][T16980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.843419][ T4871] XFS (loop5): Unmounting Filesystem [ 1337.212141][T16980] device hsr_slave_0 entered promiscuous mode [ 1337.254737][T16980] device hsr_slave_1 entered promiscuous mode [ 1337.316473][T16980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1337.360534][T16980] Cannot create hsr debugfs directory [ 1344.827265][T15652] device hsr_slave_0 left promiscuous mode [ 1345.495320][T15652] device hsr_slave_1 left promiscuous mode [ 1346.527851][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.615468][T15652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.850008][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.053619][T15652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.190829][T15652] device bridge_slave_1 left promiscuous mode [ 1347.271639][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.386869][T15652] device bridge_slave_0 left promiscuous mode [ 1347.463288][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.540052][T15652] device veth1_macvtap left promiscuous mode [ 1348.546271][T15652] device veth0_macvtap left promiscuous mode [ 1348.558372][T15652] device veth1_vlan left promiscuous mode [ 1348.564337][T15652] device veth0_vlan left promiscuous mode [ 1351.735310][T15652] team0 (unregistering): Port device team_slave_1 removed [ 1351.852597][T15652] team0 (unregistering): Port device team_slave_0 removed [ 1351.951632][T15652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.041197][T15652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.878108][T15652] bond0 (unregistering): Released all slaves [ 1356.733345][T16980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1357.704973][T16980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1357.733558][T16980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1357.771148][T16980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1359.849179][T17238] tipc: Started in network mode [ 1359.854269][T17238] tipc: Node identity 4, cluster identity 4711 [ 1359.860846][T17238] tipc: Node number set to 4 [ 1360.909030][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1360.967307][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1360.987739][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1360.998084][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1361.005750][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1361.013372][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1361.497211][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.503609][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.591939][T16980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.731084][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1361.760093][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1361.945400][T16980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.708784][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1362.738386][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1363.058865][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.066045][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.076701][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 1363.930800][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1363.965835][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1364.010714][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.017965][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.063279][T17263] tc_dump_action: action bad kind [ 1365.868233][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 1365.911011][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1365.945170][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1365.985092][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1366.022785][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1366.055366][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1366.119864][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1366.220189][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1366.252915][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1366.305126][T16980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1366.374974][T16980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1366.457552][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1366.477097][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1366.489825][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1366.527615][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1366.583132][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1366.681638][T17241] chnl_net:caif_netlink_parms(): no params data found [ 1367.048318][T17241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.055653][T17241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.108156][T17241] device bridge_slave_0 entered promiscuous mode [ 1367.138919][T17241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.157194][T17241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.186413][T17241] device bridge_slave_1 entered promiscuous mode [ 1367.958732][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 1368.025878][T17241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.138210][T17241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.183333][T17241] team0: Port device team_slave_0 added [ 1368.205010][T17241] team0: Port device team_slave_1 added [ 1370.158494][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 1370.185706][T17241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.192832][T17241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.302897][T17241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.572472][T17241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.594700][T17241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.811018][T17241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.887229][T16980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.938400][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1370.945968][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1371.192172][T17241] device hsr_slave_0 entered promiscuous mode [ 1371.219360][T17241] device hsr_slave_1 entered promiscuous mode [ 1371.254628][T17241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1371.336466][T17328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1371.354151][T17241] Cannot create hsr debugfs directory [ 1374.351560][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1374.368072][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1374.698351][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1374.753662][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1374.781949][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1374.817270][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1374.854821][T16980] device veth0_vlan entered promiscuous mode [ 1375.178990][T16980] device veth1_vlan entered promiscuous mode [ 1375.295756][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1375.323391][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1375.348895][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1375.375631][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1375.397714][T16980] device veth0_macvtap entered promiscuous mode [ 1375.441974][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1375.487789][T16980] device veth1_macvtap entered promiscuous mode [ 1375.604746][T16980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1375.640384][T16980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.672255][T16980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1375.718103][T16980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.753794][T16980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1375.786579][T16980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.818919][T16980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1375.865067][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1375.887515][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1375.939807][T16980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.976933][T16980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.997045][T16980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.067932][T16980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.108525][T16980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.146611][T16980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.171277][T16980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.202091][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1376.231433][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1377.076951][T16980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.085838][T16980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.134549][T16980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.144039][T16980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.162734][T17241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1377.519773][T17241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1377.860085][T17241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1377.995332][T17241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1379.331074][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.406733][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.427315][ T9477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.435209][ T9477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.448477][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1379.483238][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1379.740291][T17241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.852714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1379.870108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1379.925142][T17241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.985238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1380.017094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1380.071635][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.078908][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.338839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1380.349348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1380.441754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1380.599564][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.606843][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.617274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1380.933894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1381.094660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1381.341085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1381.461794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1381.497936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1381.535430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1381.560763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1381.584672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1381.628824][T17241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1381.662670][T17241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1381.684723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1381.701701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1383.607600][ T4357] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1383.886759][ T4357] usb 5-1: Using ep0 maxpacket: 32 [ 1383.917517][ T4357] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.942565][ T4357] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1383.997341][ T4357] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1384.076747][ T4357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.084888][ T4357] usb 5-1: Product: syz [ 1384.103862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1384.126850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1384.165242][T17241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.191757][ T4357] usb 5-1: Manufacturer: syz [ 1384.197582][ T4357] usb 5-1: SerialNumber: syz [ 1384.248816][ T4357] usb 5-1: config 0 descriptor?? [ 1384.274215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1384.303001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1384.394671][T17241] device veth0_vlan entered promiscuous mode [ 1384.421930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1384.439489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1384.507465][T17241] device veth1_vlan entered promiscuous mode [ 1384.567893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1384.596302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1384.639127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1384.712185][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1384.732024][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1384.769589][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1384.811918][T17241] device veth0_macvtap entered promiscuous mode [ 1384.860847][T17241] device veth1_macvtap entered promiscuous mode [ 1385.000412][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.039833][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.082636][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.121383][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.161868][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.202469][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.248029][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.284843][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.329709][T17241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.355132][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1385.368879][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1385.401196][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1385.435583][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1385.470617][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.503546][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.545821][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.602979][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.661724][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.719794][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.823594][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.896708][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.958152][T17241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.972879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1386.010016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1386.061246][T17241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.116780][T17241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.146786][T17241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.156003][T17241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.507036][ T4476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.515181][ T4476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.576193][ T6448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1386.693907][ T4476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.726633][ T4476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.765483][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1386.876485][ T4316] usb 5-1: USB disconnect, device number 8 [ 1387.597780][T17476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2858'. [ 1391.911679][T17505] tc_dump_action: action bad kind [ 1393.629060][T10156] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1393.653857][T17518] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2905'. [ 1396.128340][T10156] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1396.136459][T10156] usb 5-1: config 1 has no interface number 0 [ 1396.187744][T10156] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1396.276622][T10156] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.328535][T10156] usb 5-1: string descriptor 0 read error: -71 [ 1396.373413][T10156] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1396.440545][T10156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.697118][ T4784] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1396.731010][T10156] usb 5-1: can't set config #1, error -71 [ 1397.066956][T17545] tc_dump_action: action bad kind [ 1397.689913][T10156] usb 5-1: USB disconnect, device number 9 [ 1398.026891][ T4784] usb 7-1: Using ep0 maxpacket: 8 [ 1398.034817][ T4784] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1398.066866][ T4784] usb 7-1: config 179 has no interface number 0 [ 1398.073261][ T4784] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1398.135702][ T4784] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1398.183030][ T4784] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.225059][ T4784] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1398.335590][T17556] tipc: Started in network mode [ 1398.340666][T17556] tipc: Node identity 4, cluster identity 4711 [ 1398.346964][T17556] tipc: Node number set to 4 [ 1398.418432][ T4784] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1399.260216][ T4784] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1399.271798][ T4784] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1399.285480][ T4784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.405863][ T4784] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input12 [ 1399.594618][ T4784] usb 7-1: USB disconnect, device number 7 [ 1399.600590][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1399.705440][ T4784] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1401.092960][T17571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1404.583783][T17645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2922'. [ 1408.999131][T17687] tc_dump_action: action bad kind [ 1409.870333][T17686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1410.746171][T17690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1416.250156][T17741] tc_dump_action: action bad kind [ 1417.708318][T17751] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1419.232543][T17762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2945'. [ 1422.897896][T17793] tc_dump_action: action bad kind [ 1423.157687][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.164271][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.344601][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2960'. [ 1428.263495][T17835] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1428.274142][T17835] qnx6: wrong signature (magic) in superblock #1. [ 1428.280669][T17835] qnx6: unable to read the first superblock [ 1429.601228][ T26] audit: type=1800 audit(1785928244.759:98): pid=17859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2969" name="idProduct" dev="configfs" ino=81875 res=0 errno=0 [ 1429.719980][T17854] device syzkaller0 entered promiscuous mode [ 1433.656121][T17873] tipc: Started in network mode [ 1433.661200][T17873] tipc: Node identity 4, cluster identity 4711 [ 1433.668013][T17873] tipc: Node number set to 4 [ 1433.922579][T17880] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2972'. [ 1434.232906][T17890] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1434.244961][T17890] qnx6: wrong signature (magic) in superblock #1. [ 1434.251550][T17890] qnx6: unable to read the first superblock [ 1435.362939][T17905] comedi comedi3: pcl730: I/O port conflict (0x8,4) [ 1436.107509][T17912] tc_dump_action: action bad kind [ 1436.615607][T17919] zram: Can't change algorithm for initialized device [ 1436.658284][T17919] zram: Cannot change disksize for initialized device [ 1440.112745][T17950] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1440.125696][T17950] qnx6: wrong signature (magic) in superblock #1. [ 1440.132306][T17950] qnx6: unable to read the first superblock [ 1440.912508][T17953] xt_hashlimit: size too large, truncated to 1048576 [ 1442.946956][T17882] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1443.120063][T17978] zram: Can't change algorithm for initialized device [ 1443.168148][T17882] usb 7-1: Using ep0 maxpacket: 8 [ 1443.174209][T17981] zram: Cannot change disksize for initialized device [ 1443.182795][T17882] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1443.217481][T17882] usb 7-1: config 179 has no interface number 0 [ 1443.297377][T17882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1443.505587][T17882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1443.720847][T17882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1443.953449][T17882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1444.041403][T17882] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1444.166607][T17882] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1444.216342][T17882] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1444.264568][T17882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.737621][T17882] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input13 [ 1445.405423][T17882] usb 7-1: USB disconnect, device number 8 [ 1445.669878][T17882] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1447.642518][T18025] kAFS: bad VL server IP address [ 1447.995739][T18036] zram: Can't change algorithm for initialized device [ 1448.035137][T18036] zram: Cannot change disksize for initialized device [ 1451.623865][T18061] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1451.957328][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 1456.231909][T18099] zram: Can't change algorithm for initialized device [ 1456.299060][T18100] zram: Cannot change disksize for initialized device [ 1464.323996][T18155] zram: Can't change algorithm for initialized device [ 1464.384385][T18155] zram: Cannot change disksize for initialized device [ 1466.317471][ T14] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1466.556678][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 1466.569509][ T14] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1466.720658][ T14] usb 7-1: config 179 has no interface number 0 [ 1466.810393][ T14] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1466.859336][ T14] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1466.908087][ T14] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1466.948828][ T14] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1466.990023][ T14] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1467.030792][ T14] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1467.058689][ T14] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1467.105912][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.172342][ T14] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input14 [ 1467.398049][ T9791] usb 7-1: USB disconnect, device number 9 [ 1467.404925][ T9791] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1470.567196][T18212] [ 1470.569601][T18212] ====================================================== [ 1470.576648][T18212] WARNING: possible circular locking dependency detected [ 1470.583720][T18212] syzkaller #0 Not tainted [ 1470.588169][T18212] ------------------------------------------------------ [ 1470.595218][T18212] syz.1.3038/18212 is trying to acquire lock: [ 1470.601310][T18212] ffff888148c85590 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 1470.612965][T18212] [ 1470.612965][T18212] but task is already holding lock: [ 1470.620364][T18212] ffff888056d7cd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1470.629560][T18212] [ 1470.629560][T18212] which lock already depends on the new lock. [ 1470.629560][T18212] [ 1470.639998][T18212] [ 1470.639998][T18212] the existing dependency chain (in reverse order) is: [ 1470.649046][T18212] [ 1470.649046][T18212] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1470.656765][T18212] __mutex_lock+0x12d/0xae0 [ 1470.661850][T18212] tcm_set_name+0x26/0x90 [ 1470.666745][T18212] function_make+0x195/0x350 [ 1470.671978][T18212] configfs_mkdir+0x511/0x9e0 [ 1470.677224][T18212] vfs_mkdir+0x386/0x570 [ 1470.682095][T18212] do_mkdirat+0x1d8/0x440 [ 1470.686982][T18212] __x64_sys_mkdirat+0x85/0x90 [ 1470.692303][T18212] do_syscall_64+0x4c/0xa0 [ 1470.697289][T18212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.703749][T18212] [ 1470.703749][T18212] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1470.712049][T18212] __mutex_lock+0x12d/0xae0 [ 1470.717123][T18212] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1470.723923][T18212] configfs_symlink+0x5a4/0x13c0 [ 1470.729945][T18212] vfs_symlink+0x245/0x3d0 [ 1470.734920][T18212] do_symlinkat+0x1b6/0x400 [ 1470.739988][T18212] __x64_sys_symlink+0x7a/0x90 [ 1470.745311][T18212] do_syscall_64+0x4c/0xa0 [ 1470.750290][T18212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.756742][T18212] [ 1470.756742][T18212] -> #0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 1470.765481][T18212] __lock_acquire+0x2d18/0x7c40 [ 1470.770895][T18212] lock_acquire+0x1bb/0x4a0 [ 1470.775970][T18212] down_write+0x36/0x60 [ 1470.780674][T18212] configfs_depend_item_unlocked+0x14f/0x430 [ 1470.787222][T18212] usbg_make_tpg+0x1f3/0x580 [ 1470.792377][T18212] target_fabric_make_tpg+0xa0/0x6d0 [ 1470.798361][T18212] configfs_mkdir+0x511/0x9e0 [ 1470.803609][T18212] vfs_mkdir+0x386/0x570 [ 1470.808408][T18212] do_mkdirat+0x1d8/0x440 [ 1470.813290][T18212] __x64_sys_mkdirat+0x85/0x90 [ 1470.818604][T18212] do_syscall_64+0x4c/0xa0 [ 1470.823583][T18212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.830033][T18212] [ 1470.830033][T18212] other info that might help us debug this: [ 1470.830033][T18212] [ 1470.840290][T18212] Chain exists of: [ 1470.840290][T18212] &sb->s_type->i_mutex_key#21 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1470.840290][T18212] [ 1470.855059][T18212] Possible unsafe locking scenario: [ 1470.855059][T18212] [ 1470.862549][T18212] CPU0 CPU1 [ 1470.867954][T18212] ---- ---- [ 1470.873356][T18212] lock(&opts->dep_lock); [ 1470.877823][T18212] lock(gadget_subsys.su_mutex); [ 1470.885405][T18212] lock(&opts->dep_lock); [ 1470.892397][T18212] lock(&sb->s_type->i_mutex_key#21); [ 1470.897905][T18212] [ 1470.897905][T18212] *** DEADLOCK *** [ 1470.897905][T18212] [ 1470.906089][T18212] 5 locks held by syz.1.3038/18212: [ 1470.911315][T18212] #0: ffff888145aa2460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1470.920618][T18212] #1: ffff888034d56ee0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 1470.931481][T18212] #2: ffffffff8d4e96b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 1470.941292][T18212] #3: ffffffff8d8089e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 1470.950988][T18212] #4: ffff888056d7cd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1470.960518][T18212] [ 1470.960518][T18212] stack backtrace: [ 1470.966461][T18212] CPU: 0 PID: 18212 Comm: syz.1.3038 Not tainted syzkaller #0 [ 1470.973939][T18212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1470.984009][T18212] Call Trace: [ 1470.987309][T18212] [ 1470.990263][T18212] dump_stack_lvl+0x188/0x24e [ 1470.994974][T18212] ? load_image+0x410/0x410 [ 1470.999501][T18212] ? show_regs_print_info+0x12/0x12 [ 1471.004726][T18212] ? print_circular_bug+0x12b/0x1a0 [ 1471.009969][T18212] check_noncircular+0x296/0x330 [ 1471.014940][T18212] ? look_up_lock_class+0x75/0x140 [ 1471.020079][T18212] ? add_chain_block+0x9b0/0x9b0 [ 1471.025040][T18212] ? lockdep_lock+0xf1/0x1f0 [ 1471.029655][T18212] ? _find_first_zero_bit+0xd2/0x100 [ 1471.035077][T18212] __lock_acquire+0x2d18/0x7c40 [ 1471.039967][T18212] ? __kernel_text_address+0x9/0x30 [ 1471.045270][T18212] ? verify_lock_unused+0x140/0x140 [ 1471.050500][T18212] ? __mutex_trylock_common+0x15c/0x260 [ 1471.056073][T18212] lock_acquire+0x1bb/0x4a0 [ 1471.060636][T18212] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1471.066826][T18212] ? __might_sleep+0xd0/0xd0 [ 1471.071529][T18212] ? read_lock_is_recursive+0x10/0x10 [ 1471.076931][T18212] ? __mutex_trylock_common+0x15c/0x260 [ 1471.082503][T18212] ? usbg_make_tpg+0x144/0x580 [ 1471.087294][T18212] ? mutex_lock_nested+0x10/0x10 [ 1471.092264][T18212] down_write+0x36/0x60 [ 1471.096438][T18212] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1471.102622][T18212] configfs_depend_item_unlocked+0x14f/0x430 [ 1471.108642][T18212] usbg_make_tpg+0x1f3/0x580 [ 1471.113268][T18212] ? configfs_mkdir+0x4b5/0x9e0 [ 1471.118148][T18212] ? usbg_drop_tport+0x20/0x20 [ 1471.122958][T18212] ? vscnprintf+0x80/0x80 [ 1471.127489][T18212] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1471.133143][T18212] target_fabric_make_tpg+0xa0/0x6d0 [ 1471.138452][T18212] ? target_fabric_release_wwn+0xa0/0xa0 [ 1471.144109][T18212] configfs_mkdir+0x511/0x9e0 [ 1471.148836][T18212] vfs_mkdir+0x386/0x570 [ 1471.153116][T18212] do_mkdirat+0x1d8/0x440 [ 1471.157480][T18212] ? vfs_mkdir+0x570/0x570 [ 1471.161928][T18212] __x64_sys_mkdirat+0x85/0x90 [ 1471.166719][T18212] do_syscall_64+0x4c/0xa0 [ 1471.171174][T18212] ? clear_bhb_loop+0x60/0xb0 [ 1471.175878][T18212] ? clear_bhb_loop+0x60/0xb0 [ 1471.180587][T18212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1471.186528][T18212] RIP: 0033:0x7f991a19e019 [ 1471.190968][T18212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.210619][T18212] RSP: 002b:00007f991b0ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1471.219063][T18212] RAX: ffffffffffffffda RBX: 00007f991a425fa0 RCX: 00007f991a19e019 [ 1471.227087][T18212] RDX: 00000000000001ff RSI: 0000200000000680 RDI: ffffffffffffff9c [ 1471.235077][T18212] RBP: 00007f991a23500c R08: 0000000000000000 R09: 0000000000000000 [ 1471.243067][T18212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1471.251060][T18212] R13: 00007f991a426038 R14: 00007f991a425fa0 R15: 00007ffd349983a8 [ 1471.259062][T18212] [ 1472.193885][ T26] audit: type=1800 audit(1785928287.349:99): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3038" name="idProduct" dev="configfs" ino=84634 res=0 errno=0 [ 1476.196580][ T4287] Bluetooth: hci1: command 0x0406 tx timeout