last executing test programs: 11.127890157s ago: executing program 3 (id=1272): ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200), 0x0, 0x40, 0x4, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x0) 10.708759157s ago: executing program 3 (id=1276): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000900)={[{@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'macinuit'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0x72}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.969004581s ago: executing program 3 (id=1281): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x42001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0xfffffff9, 0xd, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x400d4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x140, 0x20, 0x9, 0x2, 0x400, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x8, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x6, 0xaad8, 0x9, 0x1000, 0x8, 0xa, 0xffffffff, 0x383, 0x8001, 0x4]}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000500)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) close(r0) 7.734696013s ago: executing program 0 (id=1287): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0x6, 0x5d05}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b008c", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 7.183538437s ago: executing program 4 (id=1288): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2000ec50034e0500192cbd7000fbdbdf252b0000000c000b00000000001600000066287c8204f581433e8fa6ee008d9d13c7f9888bdb9ff126e931d5bc2916d3dd69595b0adf4f10eb7f319fb0a3abd810"], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x20000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x2e390c280, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x80000027}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x4f) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 6.880867754s ago: executing program 0 (id=1289): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) creat(0x0, 0x44) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) pwrite64(r1, 0x0, 0x0, 0xe7c) 5.612082606s ago: executing program 0 (id=1291): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000900)={[{@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'macinuit'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$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") ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0x72}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.534249988s ago: executing program 4 (id=1292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.122242629s ago: executing program 3 (id=1294): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x42001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0xfffffff9, 0xd, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x400d4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000500)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) close(r0) 4.438555527s ago: executing program 0 (id=1295): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418909a508cec60ec73e2ab286245ded56fd4bb93db8cef041ac8901cf7fa0171bc6c8778368c89776f4a0bb5446d423e805f9626dfd56a936915f5b671523b633ec3be455e31904a4d4bf66fe47a151ac5d3f27e6652cade7078194ce7dcdf18081557b930dcbcd11dddb73025102dca2baef0fb96fc6ce652ec419dbf21c2f339f1565073f97d7839dffd2ab6c5165a0c19268fd0339ea230703346ddf0c71ca2112ecbb107ab6c5fe95fa98a5b8a", 0xc5}], 0x1}}], 0x1, 0x20002090) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 4.30236099s ago: executing program 4 (id=1296): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x42001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0xfffffff9, 0xd, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x400d4) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) close(r0) 3.546373269s ago: executing program 2 (id=1297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.542945449s ago: executing program 0 (id=1298): socket$alg(0x26, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 3.162497169s ago: executing program 2 (id=1300): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0x6, 0x5d05}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b008c", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 3.13492193s ago: executing program 1 (id=1301): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0x2c, 0x0, &(0x7f0000000480)="63eced8e46dc3fcd8bc91d4128f4423a2d83f871462ddf33c9e9b986f77384e87dfe6435d6edbcb8c4327860f96b65725f8fb514263302fe6a8ebadd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\x00', 0x2) 2.857551007s ago: executing program 1 (id=1302): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r3, &(0x7f0000000800)='(', 0x1) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2000ec50034e0500192cbd7000fbdbdf252b0000000c000b00000000001600000066287c8204f581433e8fa6ee008d9d13c7f9888bdb9ff126e931d5bc2916d3dd69595b0adf4f10eb7f319fb0a3abd810"], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x20000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x2e390c280, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x80000027}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x4f) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 2.426674518s ago: executing program 2 (id=1303): syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f51601"], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000080)='i', 0x1) 2.330136s ago: executing program 1 (id=1304): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r3, &(0x7f0000000800)='(', 0x1) r4 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2000ec50034e0500192cbd7000fbdbdf252b0000000c000b00000000001600000066287c8204f581433e8fa6ee008d9d13c7f9888bdb9ff126e931d5bc2916d3dd69595b0adf4f10eb7f319fb0a3abd810"], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x20000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x2e390c280, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x80000027}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x4f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 2.298349181s ago: executing program 3 (id=1305): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9}}}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 2.127568525s ago: executing program 4 (id=1306): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000900)={[{@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'macinuit'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$eJzs3U1rXNcZB/D/nRlLHhccJbGT1C1EpFBMTGy9mLSFQtViihbBBLrJVtRyLDx2gjQpkyyKWvxB0oW6yqKbEihdZOF1F/kCgi4LhS5FNy5z585oYsvyqNG8OP798Jl7js495zz38b1XmivBBHhhrX+QM7spsn7lvU63vb+32trfW73XryeZT1Ir/6XRrf4zqT9IFtMr+X6SopqueNo6X658cenrm53LvVatKuX+9ePGjWa3Klmrglw7xfkefuv5isERdie90Z98Fjx6tv+Mcfn6GOfmBIqn/F8sJOeSnK3uA/0TtzbZ6E7fzFyAAAAAMEYvHeQgnZyfdhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPKk+/7+oSq1fX0zR//z/ueprqerPta+mHQAAAAAAAAAAnII3D3KQTs7324+K8nf+b5WNC+Xr9/JJdrKZ7VxNJxtpp53tLCdZ6I2pV2Pb7e3lEUauHI4szXU22u3tlQkdMAAAAAAAAAB8N/0x64e//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFlQJPXepiwX+vWF1BpJziaZ6+63m/y9X3+efTXtAAAAAGACXjrIQTo5328/Ksr3/K+V7/vP5pPcTztbaaeVzdwqnwX03vXX9vdWW/t7q/e65cl5f/nvE4VRzpjes4ejV14q97g4GLGeX+c3uZLFvJ/tbOV32Ug7m1nMjbK2kSIL1dOLhX6cR8e79o3W+8+K9Y0ykmZuZ6uM7Wp+m4/Syq3UymMo9zl+xT90s1P8ojJijm5V2yIpflAd2bjNj7TXQpmRM4OMLFW572bj5eMzccLz5PGVllMbPIO6MIacn6u2xcw96Ho8EytDZ99rx2cieaf91zfvtO7fvXN758okTqOxejwTq0OZeP2FysRclY3eXfRkd8u3yrHns5Wb+Si3spmf5N2slGW13A7n9eII11rtZNfajy5XlVeSotnbzohuXl8eyuvwnW6h7Bv+ymGWXjn9O1LjUlWpJ0VjENMseDwTy0OZePX4TPzpUfd1p3X/7vadjY9HXO/H1bb7/XB+Qt8PRzNXnb2NsvXNs6Pb9+qRfctl34VBX+2JvouDvmddqXPVz3BPzrRS9r1+ZF9v3BtDfUf9lAPAzDv39rm55r+a/2h+3nzQvNN87+yv5n86/8O5nHnY+Fv9L7U/135evJ3P8/vD9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/b+fTz+5utFqb25OszE9j0RekUstMhDFipZGZCEPlycrR94vGpG9QjNW19r2Pr+18+tk7W/c2Ptz8cPP+9aVm3r2+/LPr125vtTaXeq/TjpJxObzopx0JAAAAAAAAAAAAJzGJPyed9jECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/Fj/IGd2U2R56epSt72/t9rqln79cM9akkZ3+9+k/iBZTK9kYWi64mnrfLnyxaWvb3YuH85V6+9fP27caHarkrUqyLVTnO/ht56vGBxhd9Ib/clh2v4XAAD//3D1GxQ=") ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0x72}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.126595265s ago: executing program 3 (id=1307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x50) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 1.91696654s ago: executing program 1 (id=1308): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418909a508cec60ec73e2ab286245ded56fd4bb93db8cef041ac8901cf7fa0171bc6c8778368c89776f4a0bb5446d423e805f9626dfd56a936915f5b671523b633ec3be455e31904a4d4bf66fe47a151ac5d3f27e6652cade7078194ce7dcdf18081557b930dcbcd11dddb73025102dca2baef0fb96fc6ce652ec419dbf21c2f339f1565073f97d7839dffd2ab6c5165a0c19268fd0339ea230703346ddf0c71ca2112ecbb107ab6c5fe95fa98a5b8a", 0xc5}], 0x1}}], 0x1, 0x20002090) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 1.746511045s ago: executing program 2 (id=1309): socket(0x10, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(0xfffffffffffffffd, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sched_setparam(r1, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r4, 0x4b62, 0xfffffffffffffffe) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="693b6149c2c80000000000000055627855005100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) ioctl$ECCGETSTATS(r3, 0x80104d12, &(0x7f0000000140)) 1.664544027s ago: executing program 1 (id=1310): socket(0x10, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(0xfffffffffffffffd, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.509268361s ago: executing program 2 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 626.534353ms ago: executing program 4 (id=1312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0x2c, 0x0, &(0x7f0000000480)="63eced8e46dc3fcd8bc91d4128f4423a2d83f871462ddf33c9e9b986f77384e87dfe6435d6edbcb8c4327860f96b65725f8fb514263302fe6a8ebadd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\x00', 0x2) 529.174956ms ago: executing program 1 (id=1313): r0 = socket(0x10, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(0xfffffffffffffffd, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89fd, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 430.173918ms ago: executing program 2 (id=1314): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r3, &(0x7f0000000800)='(', 0x1) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2000ec50034e0500192cbd7000fbdbdf252b0000000c000b00000000001600000066287c8204f581433e8fa6ee008d9d13c7f9888bdb9ff126e931d5bc2916d3dd69595b0adf4f10eb7f319fb0a3abd810"], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x20000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x2e390c280, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x80000027}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x4f) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 387.303329ms ago: executing program 4 (id=1315): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x42001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0xfffffff9, 0xd, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x400d4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000500)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) close(r0) 0s ago: executing program 0 (id=1316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, 0x0, 0x0, 0x4080, 0x0, 0x0) write$hidraw(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001400), 0xe8b3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x8, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x5, 0x4, 0x5, 0x4}, &(0x7f0000000040)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): oid problems! [ 89.655151][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.680719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.691527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.704338][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.713107][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.722709][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.731874][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.743009][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.756368][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.804620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.815295][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.825106][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.855050][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.862951][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.904715][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.933019][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.021340][ T4367] loop3: detected capacity change from 0 to 2048 [ 90.094811][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.133952][ T4367] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 90.160567][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.168427][ T4367] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 90.196533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.229231][ T4367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.315983][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.353826][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.391983][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.406765][ T4372] loop1: detected capacity change from 0 to 128 [ 90.514570][ T4372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.550200][ T4372] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.741756][ T4372] syz.1.2 (pid 4372) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 91.049046][ T4381] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 91.056974][ T4381] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 91.064582][ T4381] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 91.071366][ T4381] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 91.078110][ T4381] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 91.085332][ T4381] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 91.117232][ T4381] loop2: detected capacity change from 0 to 3 [ 91.151137][ T4381] Dev loop2: unable to read RDB block 3 [ 91.157969][ T4381] loop2: unable to read partition table [ 91.173853][ T4381] loop2: partition table beyond EOD, truncated [ 91.180402][ T4381] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.855922][ T14] cfg80211: failed to load regulatory.db [ 91.869733][ T4369] loop2: detected capacity change from 0 to 32768 [ 91.967598][ T4369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4369) [ 92.081009][ T4369] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.120622][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 92.158013][ T4369] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.234041][ T4369] BTRFS info (device loop2): force clearing of disk cache [ 92.269931][ T4369] BTRFS info (device loop2): enabling auto defrag [ 92.375183][ T4375] loop0: detected capacity change from 0 to 1024 [ 92.432855][ T4369] BTRFS info (device loop2): max_inline at 0 [ 92.566486][ T4369] BTRFS info (device loop2): enabling disk space caching [ 92.750918][ T4369] BTRFS info (device loop2): disk space caching is enabled [ 92.823468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.833475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.843453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.853455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.863452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.873459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 93.177489][ T4393] loop1: detected capacity change from 0 to 32768 [ 93.369164][ T4393] XFS (loop1): Mounting V5 Filesystem [ 93.387405][ T4369] BTRFS error (device loop2): open_ctree failed: -12 [ 93.515883][ T4393] XFS (loop1): Ending clean mount [ 94.661377][ T4443] loop0: detected capacity change from 0 to 256 [ 94.758581][ T4281] XFS (loop1): Unmounting Filesystem [ 94.861469][ T4443] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.874101][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.092083][ T4451] loop3: detected capacity change from 0 to 512 [ 95.102990][ T26] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 95.150785][ T26] usb 5-1: config 1 has no interface number 0 [ 95.178618][ T4451] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.197842][ T26] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 95.266614][ T26] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 95.376906][ T26] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.400350][ T4454] loop2: detected capacity change from 0 to 32768 [ 95.458086][ T26] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 95.477620][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.497959][ T26] usb 5-1: Product: syz [ 95.502209][ T26] usb 5-1: Manufacturer: syz [ 95.515922][ T26] usb 5-1: SerialNumber: syz [ 95.550682][ T4437] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.600286][ T4445] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 95.617078][ T26] usb 5-1: Expected 3 endpoints, found: 2 [ 95.729387][ T4454] XFS (loop2): Mounting V5 Filesystem [ 95.805589][ T4454] XFS (loop2): Ending clean mount [ 96.943236][ T4280] XFS (loop2): Unmounting Filesystem [ 97.373576][ T127] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.185955][ T14] usb 5-1: USB disconnect, device number 2 [ 98.350282][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 98.361303][ T127] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 98.381689][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.421472][ T127] usb 4-1: Product: syz [ 98.436741][ T127] usb 4-1: Manufacturer: syz [ 98.470247][ T127] usb 4-1: SerialNumber: syz [ 98.519798][ T127] usb 4-1: config 0 descriptor?? [ 98.568200][ T127] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 98.854170][ T4479] loop1: detected capacity change from 0 to 32768 [ 98.885597][ T4479] ======================================================= [ 98.885597][ T4479] WARNING: The mand mount option has been deprecated and [ 98.885597][ T4479] and is ignored by this kernel. Remove the mand [ 98.885597][ T4479] option from the mount to silence this warning. [ 98.885597][ T4479] ======================================================= [ 98.958190][ T127] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 99.017147][ T4479] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 99.057552][ T4479] JBD2: Ignoring recovery information on journal [ 99.188880][ T4507] loop2: detected capacity change from 0 to 64 [ 99.231199][ T4413] usb 4-1: USB disconnect, device number 2 [ 99.255112][ T4413] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 99.286818][ T4479] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 99.304231][ T4413] visor 4-1:0.0: device disconnected [ 99.615153][ T4497] loop4: detected capacity change from 0 to 32768 [ 99.652612][ T4281] ocfs2: Unmounting device (7,1) on (node local) [ 99.659764][ T4497] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.21 (4497) [ 99.685074][ T4497] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 99.738123][ T4497] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 99.840069][ T4497] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.902273][ T4497] BTRFS info (device loop4): use zstd compression, level 3 [ 99.941329][ T4497] BTRFS info (device loop4): using free space tree [ 100.061313][ T4521] loop0: detected capacity change from 0 to 1024 [ 100.693440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.561475][ T4547] loop2: detected capacity change from 0 to 2048 [ 101.848938][ T4547] Alternate GPT is invalid, using primary GPT. [ 101.856515][ T4547] loop2: p2 p3 p7 [ 102.146074][ T4497] BTRFS error (device loop4): open_ctree failed: -12 [ 102.229495][ T4362] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (4362) [ 102.263648][ T4314] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 102.287852][ T27] audit: type=1800 audit(1786479625.176:2): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 102.745839][ T4314] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x9B, skipping [ 102.933540][ T4314] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.067359][ T4314] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.133462][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.142490][ T4314] usb 4-1: SerialNumber: syz [ 103.227588][ T4314] hub 4-1:1.0: bad descriptor, ignoring hub [ 103.308610][ T4314] hub: probe of 4-1:1.0 failed with error -5 [ 103.508915][ T4314] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 103.559285][ T4530] loop3: detected capacity change from 0 to 256 [ 103.700476][ T4314] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 103.876950][ T4314] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 103.922795][ T4530] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.143243][ T4565] Zero length message leads to an empty skb [ 104.204413][ T4314] usb 4-1: USB disconnect, device number 3 [ 104.232933][ T4563] udevd[4563]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 104.503660][ T4409] udevd[4409]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 104.608502][ T14] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 104.798257][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 105.037349][ T14] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 105.094578][ T14] usb 2-1: config 4 has no interface number 0 [ 105.128242][ T4571] loop2: detected capacity change from 0 to 1024 [ 105.153482][ T14] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 105.186384][ T4575] loop0: detected capacity change from 0 to 1024 [ 105.198520][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.230322][ T14] usb 2-1: Product: syz [ 105.246598][ T14] usb 2-1: Manufacturer: syz [ 105.289636][ T14] usb 2-1: SerialNumber: syz [ 105.320057][ T4561] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 105.432874][ T27] audit: type=1800 audit(1786479628.316:3): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 105.453414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 105.537344][ T4578] Bluetooth: MGMT ver 1.22 [ 105.812315][ T14] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 106.115967][ T14] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 106.135595][ T27] audit: type=1800 audit(1786479629.026:4): pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 106.162703][ T14] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 106.373409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.713574][ T14] usb 2-1: media controller created [ 106.755269][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.098956][ T14] DVB: Unable to find symbol dib7000p_attach() [ 107.112884][ T14] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 107.192878][ T4593] loop2: detected capacity change from 0 to 1024 [ 107.254719][ T4596] loop0: detected capacity change from 0 to 512 [ 107.376542][ T4596] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 107.419352][ T4596] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.40: invalid block [ 107.480364][ T4596] EXT4-fs (loop0): 1 truncate cleaned up [ 107.486550][ T14] rc_core: IR keymap rc-dib0700-rc5 not found [ 107.502723][ T14] Registered IR keymap rc-empty [ 107.509556][ T27] audit: type=1800 audit(1786479630.396:5): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.39" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 107.525788][ T4596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.548452][ T14] dvb-usb: could not initialize remote control. [ 108.029646][ T14] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 108.295852][ T14] usb 2-1: USB disconnect, device number 2 [ 108.334071][ T4599] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 108.429281][ T14] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 108.457776][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 108.636345][ T4607] loop3: detected capacity change from 0 to 256 [ 108.661598][ T4607] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.507046][ T4615] input: syz0 as /devices/virtual/input/input6 [ 109.828395][ T4614] 0x000000000007-0x000000020000 : "" [ 110.527116][ T4614] ftl_cs: FTL header corrupt! [ 113.753074][ T4647] loop3: detected capacity change from 0 to 512 [ 113.822397][ T4650] lo speed is unknown, defaulting to 1000 [ 113.828620][ T4650] lo speed is unknown, defaulting to 1000 [ 113.836327][ T4650] lo speed is unknown, defaulting to 1000 [ 113.845799][ T4650] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.857705][ T4650] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 113.882900][ T4650] lo speed is unknown, defaulting to 1000 [ 113.889793][ T4650] lo speed is unknown, defaulting to 1000 [ 113.893543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 113.898357][ T4650] lo speed is unknown, defaulting to 1000 [ 113.910406][ T4650] lo speed is unknown, defaulting to 1000 [ 113.917648][ T4650] lo speed is unknown, defaulting to 1000 [ 113.965565][ T4647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.008165][ T4647] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.073565][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.254837][ T14] usb 5-1: device descriptor read/64, error -71 [ 114.266652][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 114.538809][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.727617][ T14] usb 5-1: device descriptor read/64, error -71 [ 114.767947][ T4657] loop1: detected capacity change from 0 to 32768 [ 114.864217][ T14] usb usb5-port1: attempt power cycle [ 115.376623][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.459390][ T14] usb 5-1: device descriptor read/8, error -71 [ 115.495182][ T4657] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.583813][ T4657] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 115.593370][ T4657] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.628780][ T4657] BTRFS info (device loop1): use zstd compression, level 3 [ 115.653498][ T4657] BTRFS info (device loop1): using free space tree [ 115.661785][ T4667] loop2: detected capacity change from 0 to 256 [ 115.690385][ T4667] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 115.753617][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.799340][ T14] usb 5-1: device descriptor read/8, error -71 [ 115.965712][ T14] usb usb5-port1: unable to enumerate USB device [ 116.013585][ T4657] BTRFS info (device loop1): enabling ssd optimizations [ 116.275164][ T4694] loop2: detected capacity change from 0 to 64 [ 116.392304][ T4694] syz.2.59: attempt to access beyond end of device [ 116.392304][ T4694] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 116.406365][ T4694] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 116.415731][ T4694] syz.2.59: attempt to access beyond end of device [ 116.415731][ T4694] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 116.429172][ T4694] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 116.438102][ T4694] syz.2.59: attempt to access beyond end of device [ 116.438102][ T4694] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 116.452444][ T4694] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 116.461481][ T4694] syz.2.59: attempt to access beyond end of device [ 116.461481][ T4694] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 116.474861][ T4694] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 116.483834][ T4694] syz.2.59: attempt to access beyond end of device [ 116.483834][ T4694] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 116.497266][ T4694] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 116.506203][ T4694] syz.2.59: attempt to access beyond end of device [ 116.506203][ T4694] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 116.519721][ T4694] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 116.529709][ T4694] syz.2.59: attempt to access beyond end of device [ 116.529709][ T4694] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 116.544117][ T4694] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 117.636811][ T27] audit: type=1800 audit(1786479640.526:6): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.53" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 117.806573][ T4703] X25: received unknown 00 with LCI 000 [ 118.050110][ T4281] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.378520][ T4669] loop3: detected capacity change from 0 to 32768 [ 118.443559][ T4669] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.57 (4669) [ 118.526790][ T4669] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.582714][ T4669] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 118.613154][ T4669] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.644357][ T4669] BTRFS info (device loop3): use zstd compression, level 3 [ 118.681460][ T4669] BTRFS info (device loop3): using free space tree [ 118.702678][ T4691] loop4: detected capacity change from 0 to 32768 [ 118.767150][ T4718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.839629][ T4669] BTRFS error (device loop3): open_ctree failed: -12 [ 118.892756][ T4691] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 118.925922][ T4691] JBD2: Ignoring recovery information on journal [ 119.001819][ T4691] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.166022][ T4718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.295195][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 119.522930][ T4754] 0x000000000007-0x000000020000 : "" [ 119.545370][ T4754] ftl_cs: FTL header corrupt! [ 120.375500][ T4718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.447463][ T4759] loop4: detected capacity change from 0 to 64 [ 120.631307][ T4718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.912869][ T4718] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.013350][ T4771] loop0: detected capacity change from 0 to 1024 [ 121.016714][ T4718] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.104449][ T4771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.116374][ T4718] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.233153][ T4718] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.496582][ T4787] loop1: detected capacity change from 0 to 128 [ 121.529440][ T4787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.544281][ T4787] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.968882][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 121.975656][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 121.993023][ T4792] loop3: detected capacity change from 0 to 256 [ 122.199732][ T4800] loop1: detected capacity change from 0 to 64 [ 122.466332][ T4804] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 122.550183][ T4804] device bond1 entered promiscuous mode [ 122.563945][ T4804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.615228][ T4813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.623632][ T4813] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 122.638613][ T4813] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 122.651376][ T4813] bond1: (slave ip6gre1): making interface the new active one [ 122.659413][ T4813] device ip6gre1 entered promiscuous mode [ 122.667945][ T4813] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 122.677176][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 123.347241][ T4836] loop2: detected capacity change from 0 to 64 [ 123.690816][ T4844] loop2: detected capacity change from 0 to 128 [ 123.699486][ T4846] loop1: detected capacity change from 0 to 256 [ 123.756108][ T4846] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.778634][ T4844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.835832][ T4844] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.038160][ T4830] loop3: detected capacity change from 0 to 32768 [ 124.101018][ T4830] XFS (loop3): Mounting V5 Filesystem [ 124.279387][ T4830] XFS (loop3): Ending clean mount [ 124.311282][ T4830] XFS (loop3): Quotacheck needed: Please wait. [ 124.340562][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 124.482914][ T4830] XFS (loop3): Quotacheck: Done. [ 124.521684][ T4830] XFS (loop3): Unmounting Filesystem [ 124.717784][ T27] audit: type=1800 audit(1786479647.606:7): pid=4846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.105" name="file1" dev="loop1" ino=1048597 res=0 errno=0 [ 125.398432][ T4889] capability: warning: `syz.0.119' uses deprecated v2 capabilities in a way that may be insecure [ 125.563068][ T4865] loop4: detected capacity change from 0 to 32768 [ 125.613900][ T4865] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.110 (4865) [ 125.692444][ T4865] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.741212][ T4865] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 125.767752][ T4865] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.820916][ T4865] BTRFS info (device loop4): use zstd compression, level 3 [ 125.842167][ T4865] BTRFS info (device loop4): using free space tree [ 126.178109][ T4865] BTRFS info (device loop4): enabling ssd optimizations [ 126.226772][ T27] audit: type=1800 audit(1786479649.116:8): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.110" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 126.501457][ T4284] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 126.630895][ T4942] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.274440][ T5001] use of bytesused == 0 is deprecated and will be removed in the future, [ 128.299741][ T5001] use the actual size instead. [ 128.345800][ T5004] loop4: detected capacity change from 0 to 64 [ 128.636320][ T5017] loop2: detected capacity change from 0 to 2048 [ 128.662784][ T5017] EXT4-fs: Ignoring removed i_version option [ 128.718693][ T5015] loop1: detected capacity change from 0 to 2048 [ 128.757881][ T5017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.786345][ T5017] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.814939][ T5015] loop1: p1 p2 p3 p4 [ 128.814939][ T5015] p1: [ 128.827700][ T5015] loop1: p1 size 67110656 extends beyond EOD, truncated [ 128.871253][ T5015] loop1: p3 size 134217728 extends beyond EOD, truncated [ 128.905920][ T5015] loop1: p4 size 4278190080 extends beyond EOD, truncated [ 128.987310][ T5015] loop1: p5 size 67110656 extends beyond EOD, truncated [ 129.020792][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 129.037115][ T5015] loop1: p6 size 134217728 extends beyond EOD, truncated [ 129.127748][ T3638] loop1: p1 p2 p3 p4 [ 129.127748][ T3638] p1: [ 129.144036][ T3638] loop1: p1 size 67110656 extends beyond EOD, truncated [ 129.173736][ T3638] loop1: p3 size 134217728 extends beyond EOD, truncated [ 129.193186][ T3638] loop1: p4 size 4278190080 extends beyond EOD, truncated [ 129.240756][ T3638] loop1: p5 size 67110656 extends beyond EOD, truncated [ 129.283614][ T3638] loop1: p6 size 134217728 extends beyond EOD, truncated [ 129.370449][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 129.386620][ T4563] udevd[4563]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 129.403206][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 129.418068][ T4621] udevd[4621]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 129.431234][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 129.446935][ T4409] udevd[4409]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 129.576411][ T5044] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.685614][ T5052] loop0: detected capacity change from 0 to 64 [ 129.914458][ T5060] loop2: detected capacity change from 0 to 2048 [ 129.954369][ T5060] EXT4-fs: Ignoring removed i_version option [ 130.055346][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 130.066171][ T5060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.092852][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 130.096358][ T5060] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.127605][ T4563] udevd[4563]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 130.146796][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 130.433295][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 131.019992][ T5103] loop3: detected capacity change from 0 to 64 [ 131.088799][ T5101] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.451365][ T5115] fuse: Unknown parameter 'grou00000000000000000000' [ 131.556499][ T5118] loop0: detected capacity change from 0 to 2048 [ 131.612703][ T5118] EXT4-fs: Ignoring removed i_version option [ 131.724714][ T5118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.738044][ T5118] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.980563][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 132.165039][ T5145] loop4: detected capacity change from 0 to 64 [ 132.362029][ T5152] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.549999][ T5163] fuse: Unknown parameter 'grou00000000000000000000' [ 132.823433][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830437][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.926801][ T5173] loop1: detected capacity change from 0 to 2048 [ 132.965792][ T5173] EXT4-fs: Ignoring removed i_version option [ 133.035961][ T5173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.065367][ T5173] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.120104][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 133.319341][ T5189] loop2: detected capacity change from 0 to 64 [ 133.638581][ T5202] fuse: Unknown parameter 'grou00000000000000000000' [ 133.794221][ T5206] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.941161][ T5212] loop1: detected capacity change from 0 to 2048 [ 133.989028][ T5212] EXT4-fs: Ignoring removed i_version option [ 134.101556][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 134.126691][ T5212] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.321278][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 134.401142][ T5235] loop0: detected capacity change from 0 to 64 [ 134.764559][ T5245] fuse: Unknown parameter 'group_i00000000000000000000' [ 135.330714][ T5263] loop0: detected capacity change from 0 to 2048 [ 135.374397][ T5263] EXT4-fs: Ignoring removed i_version option [ 135.505717][ T5263] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.525923][ T5263] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.611831][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 135.915707][ T5288] fuse: Unknown parameter 'group_i00000000000000000000' [ 136.277210][ T5296] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.590449][ T5312] loop2: detected capacity change from 0 to 2048 [ 136.641230][ T5312] EXT4-fs: Ignoring removed i_version option [ 136.722150][ T5312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.759440][ T5312] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.877231][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 137.213614][ T5329] loop3: detected capacity change from 0 to 2048 [ 137.262002][ T5333] fuse: Unknown parameter 'group_i00000000000000000000' [ 137.317693][ T5329] loop3: p1 p2 p3 p4 [ 137.317693][ T5329] p1: [ 137.348570][ T5329] loop3: p1 size 67110656 extends beyond EOD, truncated [ 137.409156][ T5329] loop3: p3 size 134217728 extends beyond EOD, truncated [ 137.447868][ T5329] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 137.508032][ T5329] loop3: p5 size 67110656 extends beyond EOD, truncated [ 137.530648][ T5329] loop3: p6 size 134217728 extends beyond EOD, truncated [ 138.117673][ T5357] loop1: detected capacity change from 0 to 2048 [ 138.184968][ T5357] EXT4-fs: Ignoring removed i_version option [ 138.283037][ T5357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.318071][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 138.319444][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 138.340743][ T5081] udevd[5081]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 138.352176][ T5080] udevd[5080]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 138.376090][ T5083] udevd[5083]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 138.385219][ T4563] udevd[4563]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 138.396757][ T5357] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.578461][ T5371] fuse: Unknown parameter 'group_id00000000000000000000' [ 138.614235][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 139.228386][ T5388] loop2: detected capacity change from 0 to 2048 [ 139.371904][ T5388] loop2: p1 p2 p3 p4 [ 139.371904][ T5388] p1: [ 139.403931][ T5388] loop2: p1 size 67110656 extends beyond EOD, truncated [ 139.445597][ T5388] loop2: p3 size 134217728 extends beyond EOD, truncated [ 139.493814][ T5388] loop2: p4 size 4278190080 extends beyond EOD, truncated [ 139.507594][ T5388] loop2: p5 size 67110656 extends beyond EOD, truncated [ 139.540375][ T5388] loop2: p6 size 134217728 extends beyond EOD, truncated [ 139.560488][ T5402] loop4: detected capacity change from 0 to 2048 [ 139.654714][ T5402] EXT4-fs: Ignoring removed i_version option [ 139.722714][ T5402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.798081][ T5402] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.009564][ T5417] fuse: Unknown parameter 'group_id00000000000000000000' [ 140.146792][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 140.395204][ T5428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 140.557416][ T5083] udevd[5083]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 140.560509][ T5080] udevd[5080]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 141.042947][ T5450] loop3: detected capacity change from 0 to 2048 [ 141.124516][ T5450] EXT4-fs: Ignoring removed i_version option [ 141.208421][ T5450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.225207][ T5458] fuse: Unknown parameter 'group_id00000000000000000000' [ 141.239890][ T5450] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.416267][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 141.545790][ T5467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 141.635833][ T5469] loop3: detected capacity change from 0 to 512 [ 141.804991][ T5469] EXT4-fs: Ignoring removed bh option [ 141.981167][ T5469] EXT4-fs (loop3): #blocks per group too big: 24576 [ 143.428529][ T5491] loop2: detected capacity change from 0 to 2048 [ 143.444323][ T5491] EXT4-fs: Ignoring removed i_version option [ 143.545521][ T5491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.588821][ T5491] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.645099][ T5499] fuse: Bad value for 'user_id' [ 143.856371][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 143.900015][ T5507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.331'. [ 146.599454][ T5541] fuse: Bad value for 'user_id' [ 147.195469][ T5556] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 147.299557][ T5556] CIFS: Attempting to mount \\127.0.0.1\share,ser=roœº‰jÖàvK~—ot [ 147.320867][ T5553] loop1: detected capacity change from 0 to 32768 [ 147.345763][ T5556] CIFS: VFS: No username specified [ 147.382694][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 147.406881][ T5553] XFS (loop1): Mounting V5 Filesystem [ 147.450801][ T5564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.352'. [ 147.460281][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 147.469205][ T5564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.352'. [ 147.513863][ T5553] XFS (loop1): Ending clean mount [ 147.700344][ T5571] Bluetooth: hci0: invalid len left 7, exp >= 113 [ 148.647391][ T4281] XFS (loop1): Unmounting Filesystem [ 150.462522][ T27] audit: type=1326 audit(1786479673.346:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 150.544244][ T27] audit: type=1326 audit(1786479673.386:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 150.622292][ T27] audit: type=1326 audit(1786479673.386:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 150.747781][ T27] audit: type=1326 audit(1786479673.386:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 150.931523][ T27] audit: type=1326 audit(1786479673.386:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 151.407414][ T27] audit: type=1326 audit(1786479673.386:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 151.640651][ T27] audit: type=1326 audit(1786479673.386:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 151.664760][ T27] audit: type=1326 audit(1786479673.386:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 151.689185][ T27] audit: type=1326 audit(1786479673.386:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 151.713177][ T27] audit: type=1326 audit(1786479673.406:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.0.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2f79e0d9 code=0x7ffc0000 [ 151.988597][ T5624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.374'. [ 152.803810][ T5637] loop3: detected capacity change from 0 to 64 [ 153.769770][ T5636] loop2: detected capacity change from 0 to 1024 [ 157.277345][ T5652] loop1: detected capacity change from 0 to 32768 [ 157.435065][ T5669] loop3: detected capacity change from 0 to 64 [ 157.620306][ T5652] XFS (loop1): Mounting V5 Filesystem [ 157.751481][ T5673] random: crng reseeded on system resumption [ 158.208675][ T5652] XFS (loop1): Ending clean mount [ 159.042552][ T4281] XFS (loop1): Unmounting Filesystem [ 159.552394][ T5684] loop3: detected capacity change from 0 to 1024 [ 161.171971][ T5694] loop2: detected capacity change from 0 to 1024 [ 161.788009][ T5714] loop3: detected capacity change from 0 to 256 [ 164.223153][ T5710] loop2: detected capacity change from 0 to 32768 [ 164.362913][ T5723] loop4: detected capacity change from 0 to 1024 [ 164.533552][ T4349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.558509][ T5710] JBD2: Ignoring recovery information on journal [ 164.753625][ T4349] usb 2-1: Using ep0 maxpacket: 16 [ 164.764120][ T5710] JBD2: recovery failed [ 164.768329][ T5710] (syz.2.406,5710,1):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 164.782889][ T4349] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 164.825591][ T5710] (syz.2.406,5710,1):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 164.845692][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.877251][ T4349] usb 2-1: Product: syz [ 164.881497][ T4349] usb 2-1: Manufacturer: syz [ 164.888176][ T5710] (syz.2.406,5710,1):ocfs2_check_volume:2487 ERROR: status = -5 [ 164.938808][ T4349] usb 2-1: SerialNumber: syz [ 164.947686][ T5710] (syz.2.406,5710,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 164.977118][ T4349] usb 2-1: config 0 descriptor?? [ 165.008595][ T5710] (syz.2.406,5710,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 165.055810][ T4349] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 165.417699][ T5749] loop3: detected capacity change from 0 to 1024 [ 165.618358][ T4349] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 165.700306][ T5758] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 165.707941][ T5758] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 165.714879][ T5758] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 165.721612][ T5758] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 165.728447][ T5758] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 165.735697][ T5758] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 167.091629][ T4349] usb 2-1: USB disconnect, device number 3 [ 167.116613][ T4349] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 167.167461][ T4349] visor 2-1:0.0: device disconnected [ 167.400983][ T5767] loop2: detected capacity change from 0 to 2048 [ 168.187992][ T5778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.331800][ T5767] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 168.427390][ T5767] Remounting filesystem read-only [ 169.510470][ T5803] loop4: detected capacity change from 0 to 1024 [ 169.762023][ T5807] loop2: detected capacity change from 0 to 32768 [ 169.774366][ T5807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.431 (5807) [ 169.792708][ T5807] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.803816][ T5807] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 169.812563][ T5807] BTRFS info (device loop2): using free space tree [ 169.880713][ T5807] BTRFS info (device loop2): enabling ssd optimizations [ 169.933613][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.981090][ T5829] tmpfs: Unknown parameter 'grpquota' [ 172.083510][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 172.393737][ T4349] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.603465][ T4349] usb 4-1: Using ep0 maxpacket: 16 [ 172.624262][ T4349] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 172.674161][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.704188][ T4317] usb 1-1: device descriptor read/all, error -71 [ 172.722649][ T4280] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.733189][ T4349] usb 4-1: Product: syz [ 172.753451][ T4349] usb 4-1: Manufacturer: syz [ 172.783224][ T4349] usb 4-1: SerialNumber: syz [ 172.811815][ T4349] usb 4-1: config 0 descriptor?? [ 172.844575][ T4349] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 172.911232][ T5841] loop0: detected capacity change from 0 to 2048 [ 173.128124][ T5843] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.193711][ T5841] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 173.248384][ T4349] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 173.334444][ T5841] Remounting filesystem read-only [ 173.424520][ T5849] device syzkaller0 entered promiscuous mode [ 173.487997][ T4318] usb 4-1: USB disconnect, device number 4 [ 173.517240][ T4318] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 173.557975][ T4318] visor 4-1:0.0: device disconnected [ 173.769503][ T5856] lo speed is unknown, defaulting to 1000 [ 173.775446][ T5856] lo speed is unknown, defaulting to 1000 [ 173.781752][ T5856] lo speed is unknown, defaulting to 1000 [ 173.792981][ T5856] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 173.810332][ T5856] lo speed is unknown, defaulting to 1000 [ 173.817049][ T5856] lo speed is unknown, defaulting to 1000 [ 173.824958][ T5856] lo speed is unknown, defaulting to 1000 [ 173.831443][ T5856] lo speed is unknown, defaulting to 1000 [ 173.838028][ T5856] lo speed is unknown, defaulting to 1000 [ 174.037165][ T5840] loop1: detected capacity change from 0 to 32768 [ 174.044854][ T5840] XFS (loop1): no-recovery mounts must be read-only. [ 175.466850][ T5882] input: syz0 as /devices/virtual/input/input7 [ 175.652945][ T5880] loop2: detected capacity change from 0 to 1024 [ 177.244168][ T5899] loop3: detected capacity change from 0 to 1024 [ 177.892713][ T5918] loop1: detected capacity change from 0 to 256 [ 178.147813][ T5925] input: syz0 as /devices/virtual/input/input8 [ 179.027556][ T5931] loop2: detected capacity change from 0 to 2048 [ 179.119073][ T5931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.730037][ T5939] loop1: detected capacity change from 0 to 32768 [ 179.795802][ T5939] XFS (loop1): Mounting V5 Filesystem [ 179.898182][ T5939] XFS (loop1): Ending clean mount [ 179.940202][ T5932] loop4: detected capacity change from 0 to 32768 [ 179.968740][ T5932] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.468 (5932) [ 180.160995][ T5952] siw: device registration error -23 [ 180.186726][ T5932] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 180.197147][ T5932] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 180.207208][ T5932] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 180.216979][ T5932] BTRFS info (device loop4): use zstd compression, level 3 [ 180.224587][ T5932] BTRFS info (device loop4): using free space tree [ 180.739005][ T5932] BTRFS info (device loop4): enabling ssd optimizations [ 180.850955][ T5926] loop0: detected capacity change from 0 to 32768 [ 180.861936][ T4281] XFS (loop1): Unmounting Filesystem [ 180.875609][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 180.875627][ T27] audit: type=1800 audit(1786479703.766:37): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.468" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 181.066204][ T5926] read_mapping_page failed! [ 181.072476][ T5926] diRead: read_metapage failed [ 181.072842][ T27] audit: type=1800 audit(1786479703.826:38): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.468" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 181.448033][ T5976] loop3: detected capacity change from 0 to 1024 [ 181.986980][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 182.246141][ T4284] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 182.624970][ T4362] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (4362) [ 182.831489][ T6004] tipc: Started in network mode [ 182.912823][ T6004] tipc: Node identity aa3a, cluster identity 4711 [ 182.969040][ T6008] loop1: detected capacity change from 0 to 256 [ 182.998923][ T6004] tipc: Node number set to 43578 [ 183.870716][ T6019] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 183.878562][ T6019] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 183.885260][ T6019] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 183.891777][ T6019] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 183.898391][ T6019] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 183.905560][ T6019] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 183.915653][ T6019] loop2: detected capacity change from 0 to 3 [ 183.931606][ T6019] Dev loop2: unable to read RDB block 3 [ 183.937418][ T6019] loop2: unable to read partition table [ 183.943264][ T6019] loop2: partition table beyond EOD, truncated [ 183.949602][ T6019] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.481875][ T6030] loop1: detected capacity change from 0 to 1024 [ 185.826016][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 185.896421][ T6040] loop1: detected capacity change from 0 to 512 [ 185.941830][ T6044] loop2: detected capacity change from 0 to 3 [ 185.985584][ T6044] Dev loop2: unable to read RDB block 3 [ 185.991652][ T6044] loop2: unable to read partition table [ 185.998346][ T6044] loop2: partition table beyond EOD, truncated [ 186.004766][ T6044] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.635140][ T6040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.703596][ T6040] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.075184][ T6058] loop2: detected capacity change from 0 to 3 [ 187.088437][ T6058] Dev loop2: unable to read RDB block 3 [ 187.094547][ T6058] loop2: unable to read partition table [ 187.101067][ T6058] loop2: partition table beyond EOD, truncated [ 187.108276][ T6058] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.833467][ T4737] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.005064][ T6045] loop0: detected capacity change from 0 to 1024 [ 188.311047][ T6063] loop3: detected capacity change from 0 to 1024 [ 188.381810][ T4737] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.412205][ T4737] usb 2-1: no configurations [ 188.433464][ T4737] usb 2-1: can't read configurations, error -22 [ 188.612247][ T27] audit: type=1800 audit(1786479711.496:39): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.501" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 189.080905][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 189.118220][ T6065] loop4: detected capacity change from 0 to 32768 [ 189.211704][ T6065] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 189.253869][ T6065] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 189.432714][ T6065] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 189.461070][ T6081] device syzkaller0 entered promiscuous mode [ 189.473628][ T6065] BTRFS info (device loop4): use lzo compression, level 0 [ 189.480920][ T6065] BTRFS info (device loop4): using free space tree [ 190.211997][ T6082] loop2: detected capacity change from 0 to 3 [ 190.655059][ T6065] BTRFS info (device loop4): enabling ssd optimizations [ 190.727380][ T27] audit: type=1800 audit(1786479713.616:40): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.500" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 191.810974][ T4284] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.446693][ T6122] input: syz0 as /devices/virtual/input/input9 [ 193.558440][ T6126] loop4: detected capacity change from 0 to 128 [ 193.630442][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 193.705724][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 193.823690][ T6126] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.256221][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262850][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.651426][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 194.688925][ T6137] siw: device registration error -23 [ 195.143602][ T2122] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.353839][ T2122] usb 1-1: Using ep0 maxpacket: 16 [ 195.383665][ T2122] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 195.393580][ T2122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.402382][ T2122] usb 1-1: Product: syz [ 195.408719][ T2122] usb 1-1: Manufacturer: syz [ 195.414224][ T2122] usb 1-1: SerialNumber: syz [ 195.616931][ T2122] usb 1-1: config 0 descriptor?? [ 195.707344][ T2122] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 195.940658][ T6153] fuse: Bad value for 'fd' [ 196.185763][ T2122] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 196.687745][ T7] usb 1-1: USB disconnect, device number 4 [ 196.704970][ T6153] process 'syz.2.527' launched './file0' with NULL argv: empty string added [ 196.715923][ T7] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 196.735244][ T7] visor 1-1:0.0: device disconnected [ 196.960558][ T6163] input: syz0 as /devices/virtual/input/input10 [ 201.453517][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 201.454671][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 201.454738][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 201.473283][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 201.768710][ T6198] input: syz0 as /devices/virtual/input/input11 [ 201.959229][ T6195] loop4: detected capacity change from 0 to 128 [ 202.523444][ T2122] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 202.743632][ T6195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 203.791760][ T6195] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.894155][ T2122] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.995398][ T2122] usb 4-1: not running at top speed; connect to a high speed hub [ 204.184197][ T2122] usb 4-1: config 10 has an invalid interface number: 3 but max is 0 [ 204.275808][ T6209] overlayfs: failed to clone upperpath [ 204.389054][ T2122] usb 4-1: config 10 has no interface number 0 [ 204.528986][ T2122] usb 4-1: config 10 interface 3 has no altsetting 0 [ 204.671575][ T2122] usb 4-1: New USB device found, idVendor=11ba, idProduct=1050, bcdDevice=14.c2 [ 204.886829][ T2122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.911919][ T2122] usb 4-1: Product: syz [ 204.935668][ T2122] usb 4-1: Manufacturer: syz [ 204.980733][ T2122] usb 4-1: SerialNumber: syz [ 205.216446][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 205.273651][ T4422] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.123763][ T2122] usb 4-1: USB disconnect, device number 5 [ 206.133448][ T4422] usb 2-1: Using ep0 maxpacket: 16 [ 206.145305][ T4422] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 206.225846][ T4422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.252720][ T4422] usb 2-1: Product: syz [ 206.265104][ T4422] usb 2-1: Manufacturer: syz [ 206.289940][ T4422] usb 2-1: SerialNumber: syz [ 206.322160][ T4422] usb 2-1: config 0 descriptor?? [ 206.358273][ T4422] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 206.871997][ T6229] loop3: detected capacity change from 0 to 32768 [ 207.326113][ T4422] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 207.355102][ T6229] XFS (loop3): Mounting V5 Filesystem [ 207.524169][ T4422] usb 2-1: USB disconnect, device number 6 [ 207.563588][ T4741] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.580140][ T4422] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 207.609858][ T6229] XFS (loop3): Ending clean mount [ 207.644282][ T4422] visor 2-1:0.0: device disconnected [ 207.883559][ T4741] usb 1-1: Using ep0 maxpacket: 16 [ 207.896593][ T4741] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 207.950068][ T4741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.002853][ T4741] usb 1-1: Product: syz [ 208.026389][ T4741] usb 1-1: Manufacturer: syz [ 208.052832][ T4741] usb 1-1: SerialNumber: syz [ 208.455008][ T4741] usb 1-1: config 0 descriptor?? [ 208.475727][ T4741] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 208.496976][ T4274] XFS (loop3): Unmounting Filesystem [ 208.886544][ T4741] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 209.096145][ T4741] usb 1-1: USB disconnect, device number 5 [ 209.120504][ T4741] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 209.149818][ T4741] visor 1-1:0.0: device disconnected [ 209.441410][ T6266] loop3: detected capacity change from 0 to 32768 [ 209.566971][ T6266] XFS (loop3): Mounting V5 Filesystem [ 209.881739][ T6274] loop4: detected capacity change from 0 to 1024 [ 210.715873][ T6266] XFS (loop3): Ending clean mount [ 211.753357][ C1] sched: RT throttling activated [ 211.940449][ T4274] XFS (loop3): Unmounting Filesystem [ 212.523935][ T6291] loop0: detected capacity change from 0 to 32768 [ 212.606476][ T6291] XFS (loop0): Mounting V5 Filesystem [ 212.774777][ T6291] XFS (loop0): Ending clean mount [ 212.926105][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.133627][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 213.478187][ T22] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 213.512123][ T4272] XFS (loop0): Unmounting Filesystem [ 213.594545][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.651585][ T22] usb 2-1: Product: syz [ 213.666990][ T22] usb 2-1: Manufacturer: syz [ 213.678896][ T22] usb 2-1: SerialNumber: syz [ 213.731793][ T22] usb 2-1: config 0 descriptor?? [ 213.751679][ T22] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 214.155544][ T22] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 214.213538][ T4732] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.365079][ T22] usb 2-1: USB disconnect, device number 7 [ 214.553459][ T4732] usb 4-1: Using ep0 maxpacket: 32 [ 214.559792][ T22] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 214.562221][ T4732] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 215.302647][ T22] visor 2-1:0.0: device disconnected [ 215.411965][ T4732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.432482][ T4732] usb 4-1: config 0 descriptor?? [ 215.553997][ T4732] as10x_usb: device has been detected [ 215.559986][ T4732] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 215.677573][ T4732] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 215.813099][ T4732] as10x_usb: error during firmware upload part1 [ 215.840238][ T4732] Registered device nBox DVB-T Dongle [ 217.375108][ T4732] usb 4-1: USB disconnect, device number 6 [ 217.422117][ T4732] Unregistered device nBox DVB-T Dongle [ 217.435322][ T4732] as10x_usb: device has been disconnected üÿüÿÿÿ  ¨/dev/fuse€ xfd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)èÜF@sÿÿÿ  [ 220.334892][ T6338] siw: device registration error -23 [ 220.824821][ T6346] loop3: detected capacity change from 0 to 32768 [ 221.102800][ T6342] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 221.109779][ T6342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.149698][ T6342] vhci_hcd vhci_hcd.0: Device attached [ 221.288978][ T6346] XFS (loop3): Mounting V5 Filesystem [ 221.309180][ T6343] vhci_hcd: connection closed [ 221.314869][ T4491] vhci_hcd: stop threads [ 221.342665][ T6346] XFS (loop3): Ending clean mount [ 221.413658][ T22] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 221.555620][ T4491] vhci_hcd: release socket [ 221.561304][ T4491] vhci_hcd: disconnect device [ 222.979412][ T4274] XFS (loop3): Unmounting Filesystem [ 224.395609][ T4313] Process accounting resumed [ 225.549794][ T6386] siw: device registration error -23 [ 226.589029][ T22] vhci_hcd: vhci_device speed not set [ 226.989794][ T6400] fuse: Bad value for 'fd' [ 228.219814][ T6412] device syzkaller0 entered promiscuous mode [ 230.704248][ T6436] fuse: Unknown parameter 'user_id00000000000000000000' [ 230.782993][ T6435] loop0: detected capacity change from 0 to 2048 [ 230.883566][ T6435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.593585][ T4732] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 231.793563][ T4732] usb 1-1: Using ep0 maxpacket: 16 [ 231.926437][ T4732] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 232.383749][ T4732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.463246][ T4732] usb 1-1: Product: syz [ 232.684083][ T4732] usb 1-1: Manufacturer: syz [ 232.688843][ T4732] usb 1-1: SerialNumber: syz [ 232.866826][ T4732] usb 1-1: config 0 descriptor?? [ 232.914642][ T4732] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 233.299979][ T6480] loop4: detected capacity change from 0 to 64 [ 233.354696][ T4732] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 233.371904][ T6480] syz.4.611: attempt to access beyond end of device [ 233.371904][ T6480] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 233.385491][ T6480] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 233.395902][ T6480] syz.4.611: attempt to access beyond end of device [ 233.395902][ T6480] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 233.409447][ T6480] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 233.418351][ T6480] syz.4.611: attempt to access beyond end of device [ 233.418351][ T6480] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 233.432025][ T6480] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 233.440980][ T6480] syz.4.611: attempt to access beyond end of device [ 233.440980][ T6480] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 233.454717][ T6480] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 233.463582][ T6480] syz.4.611: attempt to access beyond end of device [ 233.463582][ T6480] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 233.477128][ T6480] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 233.486047][ T6480] syz.4.611: attempt to access beyond end of device [ 233.486047][ T6480] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 233.500323][ T6480] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 233.509461][ T6480] syz.4.611: attempt to access beyond end of device [ 233.509461][ T6480] loop4: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 233.522926][ T6480] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 234.124065][ T4317] usb 1-1: USB disconnect, device number 6 [ 234.156034][ T4317] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 234.236864][ T4317] visor 1-1:0.0: device disconnected [ 234.573789][ T6490] fuse: Unknown parameter 'user_id00000000000000000000' [ 234.600629][ T6491] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 234.608848][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 236.608718][ T6505] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 236.742255][ T6505] rdma_rxe: rxe_register_device failed with error -23 [ 236.795052][ T6505] rdma_rxe: failed to add wg2 [ 238.107897][ T6522] siw: device registration error -23 [ 239.060688][ T6535] device syzkaller0 entered promiscuous mode [ 239.165154][ T6537] loop3: detected capacity change from 0 to 32768 [ 239.288510][ T6537] XFS (loop3): Mounting V5 Filesystem [ 239.335469][ T6537] XFS (loop3): Ending clean mount [ 240.085628][ T4274] XFS (loop3): Unmounting Filesystem [ 240.372097][ T6560] 0x000000000007-0x000000020000 : "" [ 240.390761][ T6560] ftl_cs: FTL header corrupt! [ 241.586586][ T6568] loop0: detected capacity change from 0 to 128 [ 241.636675][ T6574] fuse: Unknown parameter 'user_id00000000000000000000' [ 241.659627][ T6568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.799708][ T6568] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.487886][ T4317] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 242.702255][ T6585] lo speed is unknown, defaulting to 1000 [ 242.749320][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.768075][ T4317] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 242.790644][ T4317] usb 5-1: can't read configurations, error -71 [ 242.831747][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 242.889362][ T6590] device syzkaller0 entered promiscuous mode [ 243.370352][ T6599] using random self ethernet address [ 243.376374][ T6599] using random host ethernet address [ 243.482549][ T6604] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 243.670555][ T6607] device syzkaller0 entered promiscuous mode [ 244.850730][ T6617] fuse: Bad value for 'fd' [ 245.010031][ T6623] loop4: detected capacity change from 0 to 128 [ 245.882252][ T6623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 245.918173][ T6623] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.981501][ T6634] syz.3.648 uses obsolete (PF_INET,SOCK_PACKET) [ 246.229237][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 247.811964][ T6667] fuse: Bad value for 'fd' [ 249.175418][ T6686] jffs2: notice: (6686) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.251900][ T6688] overlayfs: failed to resolve './file2': -2 [ 249.333033][ T6690] device syzkaller0 entered promiscuous mode [ 249.399782][ T6692] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.670762][ T6694] loop3: detected capacity change from 0 to 1024 [ 250.076088][ T6699] loop0: detected capacity change from 0 to 64 [ 250.115775][ T6699] syz.0.668: attempt to access beyond end of device [ 250.115775][ T6699] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 250.129145][ T6699] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 250.137785][ T6699] syz.0.668: attempt to access beyond end of device [ 250.137785][ T6699] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 250.151046][ T6699] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 250.159689][ T6699] syz.0.668: attempt to access beyond end of device [ 250.159689][ T6699] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 250.172977][ T6699] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 250.182117][ T6699] syz.0.668: attempt to access beyond end of device [ 250.182117][ T6699] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 250.195494][ T6699] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 250.204118][ T6699] syz.0.668: attempt to access beyond end of device [ 250.204118][ T6699] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 250.217394][ T6699] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 250.226069][ T6699] syz.0.668: attempt to access beyond end of device [ 250.226069][ T6699] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 250.239355][ T6699] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 250.247985][ T6699] syz.0.668: attempt to access beyond end of device [ 250.247985][ T6699] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 250.261250][ T6699] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 250.934810][ T6704] 9pnet: Could not find request transport: fdÿÿ [ 251.115786][ T6710] fuse: Bad value for 'fd' [ 251.982674][ T6726] siw: device registration error -23 [ 252.418291][ T6736] device syzkaller0 entered promiscuous mode [ 252.652042][ T6739] loop1: detected capacity change from 0 to 32768 [ 252.703943][ T6739] XFS (loop1): Mounting V5 Filesystem [ 252.772719][ T6739] XFS (loop1): Ending clean mount [ 252.995324][ T6753] loop0: detected capacity change from 0 to 64 [ 253.066377][ T6753] syz.0.683: attempt to access beyond end of device [ 253.066377][ T6753] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 253.079829][ T6753] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 253.088466][ T6753] syz.0.683: attempt to access beyond end of device [ 253.088466][ T6753] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 253.101778][ T6753] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 253.110432][ T6753] syz.0.683: attempt to access beyond end of device [ 253.110432][ T6753] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 253.123777][ T6753] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 253.334951][ T4281] XFS (loop1): Unmounting Filesystem [ 253.493280][ T6764] fuse: Unknown parameter '0x0000000000000003' [ 254.962993][ T6775] device syzkaller0 entered promiscuous mode [ 255.695559][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.702086][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.949348][ T6774] loop4: detected capacity change from 0 to 1024 [ 257.062155][ T6806] loop3: detected capacity change from 0 to 32768 [ 257.125153][ T6811] fuse: Unknown parameter '0x0000000000000003' [ 257.161412][ T6806] XFS (loop3): Mounting V5 Filesystem [ 257.203937][ T6806] XFS (loop3): Ending clean mount [ 257.767209][ T4274] XFS (loop3): Unmounting Filesystem [ 258.192554][ T6835] loop2: detected capacity change from 0 to 3 [ 258.834785][ T6835] Dev loop2: unable to read RDB block 3 [ 258.840433][ T6835] loop2: AHDI p1 p2 p3 [ 258.845772][ T6835] loop2: partition table partially beyond EOD, truncated [ 258.853066][ T6835] loop2: p1 start 1601398130 is beyond EOD, truncated [ 258.859973][ T6835] loop2: p2 start 1702059890 is beyond EOD, truncated [ 259.404433][ T6849] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 259.744139][ T6859] device syzkaller0 entered promiscuous mode [ 260.092703][ T6861] loop1: detected capacity change from 0 to 1024 [ 260.469647][ T6864] fuse: Unknown parameter '0x0000000000000003' [ 260.581624][ T6866] device syzkaller0 entered promiscuous mode [ 261.069075][ T6877] loop2: detected capacity change from 0 to 3 [ 261.334519][ T6877] Dev loop2: unable to read RDB block 3 [ 261.340225][ T6877] loop2: AHDI p1 p2 p3 [ 261.344943][ T6877] loop2: partition table partially beyond EOD, truncated [ 261.352206][ T6877] loop2: p1 start 1601398130 is beyond EOD, truncated [ 261.359224][ T6877] loop2: p2 start 1702059890 is beyond EOD, truncated [ 263.306895][ T6891] 8021q: VLANs not supported on ipvlan0 [ 263.541328][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.550379][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.557967][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.978589][ T6907] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 263.985474][ T6907] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 263.991964][ T6907] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 263.998653][ T6907] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 264.005219][ T6907] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 264.013559][ T6907] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 265.230306][ T6917] 0x000000000007-0x000000020000 : "" [ 265.248285][ T6917] ftl_cs: FTL header corrupt! [ 265.556558][ T6912] loop4: detected capacity change from 0 to 32768 [ 265.972682][ T4286] Bluetooth: hci2: unexpected subevent 0x06 length: 1 < 10 [ 266.057507][ T6927] fuse: Unknown parameter '0x0000000000000003' [ 266.150933][ T6912] XFS (loop4): Mounting V5 Filesystem [ 266.296089][ T6912] XFS (loop4): Ending clean mount [ 267.438207][ T4284] XFS (loop4): Unmounting Filesystem [ 267.489825][ T6952] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 268.301181][ T6960] loop1: detected capacity change from 0 to 1024 [ 268.780959][ T6973] fuse: Unknown parameter '0x0000000000000003' [ 268.964930][ T6975] 0x000000000007-0x000000020000 : "" [ 268.983125][ T6975] ftl_cs: FTL header corrupt! [ 270.055218][ T6984] loop1: detected capacity change from 0 to 32768 [ 270.091065][ T6984] XFS (loop1): Mounting V5 Filesystem [ 270.211140][ T6984] XFS (loop1): Ending clean mount [ 270.761710][ T4281] XFS (loop1): Unmounting Filesystem [ 273.209968][ T7026] fuse: Unknown parameter 'fd0x0000000000000003' [ 273.751620][ T7033] device syzkaller0 entered promiscuous mode [ 276.358234][ T4741] Process accounting resumed [ 280.789666][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.769'. [ 280.936132][ T7064] fuse: Unknown parameter 'fd0x0000000000000003' [ 281.772032][ T7081] loop4: detected capacity change from 0 to 32768 [ 281.867444][ T7081] XFS (loop4): Mounting V5 Filesystem [ 281.944236][ T7081] XFS (loop4): Ending clean mount [ 282.333977][ T7093] loop1: detected capacity change from 0 to 1024 [ 284.145486][ T4284] XFS (loop4): Unmounting Filesystem [ 285.594342][ T7114] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 285.665457][ T7112] loop1: detected capacity change from 0 to 64 [ 285.863040][ T7108] bio_check_eod: 4 callbacks suppressed [ 285.863053][ T7108] syz.1.782: attempt to access beyond end of device [ 285.863053][ T7108] loop1: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 285.904819][ T7108] buffer_io_error: 4 callbacks suppressed [ 285.905925][ T7108] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 285.927017][ T7108] syz.1.782: attempt to access beyond end of device [ 285.927017][ T7108] loop1: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 285.942428][ T7108] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 285.953563][ T7108] syz.1.782: attempt to access beyond end of device [ 285.953563][ T7108] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 285.969073][ T7108] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 285.983041][ T7108] syz.1.782: attempt to access beyond end of device [ 285.983041][ T7108] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 286.000058][ T7108] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 286.009794][ T7108] syz.1.782: attempt to access beyond end of device [ 286.009794][ T7108] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 286.024637][ T7108] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 286.176426][ T7108] syz.1.782: attempt to access beyond end of device [ 286.176426][ T7108] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 286.191656][ T7108] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 286.200600][ T7108] syz.1.782: attempt to access beyond end of device [ 286.200600][ T7108] loop1: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 286.214655][ T7108] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 286.291072][ T7126] loop2: detected capacity change from 0 to 3 [ 286.305187][ T7126] Dev loop2: unable to read RDB block 3 [ 286.310989][ T7126] loop2: unable to read partition table [ 286.317528][ T7126] loop2: partition table beyond EOD, truncated [ 286.323965][ T7126] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.221065][ T7138] 0x000000000007-0x000000020000 : "" [ 287.234268][ T7138] ftl_cs: FTL header corrupt! [ 287.638522][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 290.123442][ T7198] loop4: detected capacity change from 0 to 1024 [ 291.820321][ T7163] loop0: detected capacity change from 0 to 1024 [ 295.418871][ T7163] hfsplus: failed to load extents file [ 295.756311][ T7198] hfsplus: failed to load extents file [ 296.337356][ T7254] loop1: detected capacity change from 0 to 64 [ 296.511350][ T7253] syz.1.802: attempt to access beyond end of device [ 296.511350][ T7253] loop1: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 296.525336][ T7253] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 296.537522][ T7253] syz.1.802: attempt to access beyond end of device [ 296.537522][ T7253] loop1: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 296.554370][ T7253] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 296.567495][ T7256] device syzkaller0 entered promiscuous mode [ 296.576864][ T7253] syz.1.802: attempt to access beyond end of device [ 296.576864][ T7253] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 296.592433][ T7253] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 296.603595][ T7253] syz.1.802: attempt to access beyond end of device [ 296.603595][ T7253] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 296.617977][ T7253] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 296.629390][ T7253] syz.1.802: attempt to access beyond end of device [ 296.629390][ T7253] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 296.645160][ T7253] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 296.656417][ T7253] syz.1.802: attempt to access beyond end of device [ 296.656417][ T7253] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 296.674650][ T7253] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 296.820715][ T7263] 0x000000000007-0x000000020000 : "" [ 296.836737][ T7263] ftl_cs: FTL header corrupt! [ 297.465425][ T7253] syz.1.802: attempt to access beyond end of device [ 297.465425][ T7253] loop1: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 297.485098][ T7253] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 297.516453][ T7261] device syzkaller0 entered promiscuous mode [ 298.947273][ T7301] loop3: detected capacity change from 0 to 64 [ 299.200366][ T7300] syz.3.816: attempt to access beyond end of device [ 299.200366][ T7300] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 299.278343][ T7300] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 299.298526][ T7300] syz.3.816: attempt to access beyond end of device [ 299.298526][ T7300] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 299.328863][ T7300] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 299.344806][ T7300] syz.3.816: attempt to access beyond end of device [ 299.344806][ T7300] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 299.346612][ T7308] device syzkaller0 entered promiscuous mode [ 299.365480][ T7300] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 299.800891][ T7314] loop4: detected capacity change from 0 to 1024 [ 300.292110][ T7328] device vlan2 entered promiscuous mode [ 300.304705][ T7328] device bridge0 entered promiscuous mode [ 300.916657][ T7347] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 300.923565][ T7347] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 300.930193][ T7347] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 300.937086][ T7347] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 300.943916][ T7347] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 300.951186][ T7347] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 300.966418][ T7347] loop2: detected capacity change from 0 to 3 [ 300.986397][ T7347] Dev loop2: unable to read RDB block 3 [ 300.992328][ T7347] loop2: unable to read partition table [ 300.999032][ T7347] loop2: partition table beyond EOD, truncated [ 301.005547][ T7347] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.778251][ T7358] 9pnet_virtio: no channels available for device syz [ 302.085701][ T7367] loop2: detected capacity change from 0 to 3 [ 302.270966][ T7367] Dev loop2: unable to read RDB block 3 [ 302.277121][ T7367] loop2: unable to read partition table [ 302.283844][ T7367] loop2: partition table beyond EOD, truncated [ 302.290299][ T7367] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.359952][ T7396] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 303.366673][ T7396] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 303.373207][ T7396] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 303.379848][ T7396] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 303.386409][ T7396] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 303.393632][ T7396] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 304.187639][ T7417] loop3: detected capacity change from 0 to 256 [ 304.305811][ T7420] loop2: detected capacity change from 0 to 3 [ 304.901609][ T7420] Dev loop2: unable to read RDB block 3 [ 304.907358][ T7420] loop2: unable to read partition table [ 304.913180][ T7420] loop2: partition table beyond EOD, truncated [ 304.919538][ T7420] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 305.600160][ T7435] device syzkaller0 entered promiscuous mode [ 306.767632][ T7469] device syzkaller0 entered promiscuous mode [ 306.966780][ T7479] loop4: detected capacity change from 0 to 256 [ 307.381577][ T7493] loop0: detected capacity change from 0 to 64 [ 307.395097][ T7490] device syzkaller0 entered promiscuous mode [ 307.558716][ T7493] bio_check_eod: 4 callbacks suppressed [ 307.558733][ T7493] syz.0.858: attempt to access beyond end of device [ 307.558733][ T7493] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 307.678525][ T7493] buffer_io_error: 4 callbacks suppressed [ 307.678543][ T7493] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 307.785550][ T7493] syz.0.858: attempt to access beyond end of device [ 307.785550][ T7493] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 307.944815][ T7493] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 309.622052][ T7493] syz.0.858: attempt to access beyond end of device [ 309.622052][ T7493] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 309.664762][ T7493] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 309.726708][ T7496] loop3: detected capacity change from 0 to 1024 [ 309.861980][ T7493] syz.0.858: attempt to access beyond end of device [ 309.861980][ T7493] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 309.962510][ T7493] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 309.971339][ T7493] syz.0.858: attempt to access beyond end of device [ 309.971339][ T7493] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 309.985764][ T7493] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 309.994423][ T7493] syz.0.858: attempt to access beyond end of device [ 309.994423][ T7493] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 310.012548][ T7493] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 310.021402][ T7493] syz.0.858: attempt to access beyond end of device [ 310.021402][ T7493] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 310.035692][ T7493] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 310.529206][ T7505] loop3: detected capacity change from 0 to 32768 [ 310.561161][ T7505] XFS (loop3): Mounting V5 Filesystem [ 310.826827][ T7505] XFS (loop3): Ending clean mount [ 312.307731][ T4274] XFS (loop3): Unmounting Filesystem [ 312.334447][ T7534] device syzkaller0 entered promiscuous mode [ 312.532780][ T7543] loop4: detected capacity change from 0 to 256 [ 312.681533][ T7539] device syzkaller0 entered promiscuous mode [ 314.085017][ T7569] netlink: 'syz.4.875': attribute type 21 has an invalid length. [ 314.172478][ T7570] loop0: detected capacity change from 0 to 64 [ 314.319921][ T7570] syz.0.876: attempt to access beyond end of device [ 314.319921][ T7570] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 314.571171][ T7570] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 314.661105][ T7570] syz.0.876: attempt to access beyond end of device [ 314.661105][ T7570] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 316.468295][ T7570] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 316.477073][ T7570] syz.0.876: attempt to access beyond end of device [ 316.477073][ T7570] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 316.530974][ T7570] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 316.560242][ T7580] fuse: Bad value for 'group_id' [ 316.611635][ T7570] syz.0.876: attempt to access beyond end of device [ 316.611635][ T7570] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 316.692959][ T7570] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 316.702278][ T7570] syz.0.876: attempt to access beyond end of device [ 316.702278][ T7570] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 316.721433][ T7570] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 316.730569][ T7570] syz.0.876: attempt to access beyond end of device [ 316.730569][ T7570] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 316.755455][ T7570] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 316.769509][ T7570] syz.0.876: attempt to access beyond end of device [ 316.769509][ T7570] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 316.794546][ T7570] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 317.146782][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.153421][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.288341][ T7598] loop1: detected capacity change from 0 to 32768 [ 317.314219][ T7598] XFS (loop1): Mounting V5 Filesystem [ 317.374303][ T7598] XFS (loop1): Ending clean mount [ 317.471961][ T4281] XFS (loop1): Unmounting Filesystem [ 318.083645][ T4313] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 318.293490][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 318.304074][ T4313] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.356563][ T4313] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.405371][ T4313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.431546][ T4313] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 318.478397][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.523601][ T4313] usb 5-1: config 0 descriptor?? [ 318.539471][ T7636] device syzkaller0 entered promiscuous mode [ 318.801783][ T7640] loop0: detected capacity change from 0 to 64 [ 320.246657][ T7640] syz.0.893: attempt to access beyond end of device [ 320.246657][ T7640] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 320.260262][ T7640] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 320.269445][ T7640] syz.0.893: attempt to access beyond end of device [ 320.269445][ T7640] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 320.283098][ T7640] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 320.291993][ T7640] syz.0.893: attempt to access beyond end of device [ 320.291993][ T7640] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 320.305482][ T7640] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 320.314393][ T7640] syz.0.893: attempt to access beyond end of device [ 320.314393][ T7640] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 320.327991][ T7640] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 320.336941][ T7640] syz.0.893: attempt to access beyond end of device [ 320.336941][ T7640] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 320.350436][ T7640] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 320.359425][ T7640] syz.0.893: attempt to access beyond end of device [ 320.359425][ T7640] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 320.372935][ T7640] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 320.383237][ T7640] syz.0.893: attempt to access beyond end of device [ 320.383237][ T7640] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 320.438408][ T7640] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 320.514511][ T7641] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 320.693852][ T4313] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 321.674420][ T4313] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 321.681599][ T4313] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 321.726757][ T4313] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 321.734364][ T4313] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 321.742703][ T4313] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 321.940619][ T4313] usb 5-1: USB disconnect, device number 9 [ 322.343851][ T7656] fuse: Bad value for 'fd' [ 323.731305][ T7658] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 324.088373][ T7670] fuse: Bad value for 'fd' [ 325.410866][ T4410] Process accounting resumed [ 328.745698][ T7699] siw: device registration error -23 [ 329.138096][ T7709] loop4: detected capacity change from 0 to 32768 [ 329.206337][ T7712] MTD: Couldn't look up './dev/mtdblock0': -2 [ 329.353537][ T7709] XFS (loop4): Mounting V5 Filesystem [ 329.783270][ T7709] XFS (loop4): Ending clean mount [ 330.182987][ T7725] loop2: detected capacity change from 0 to 3 [ 330.821632][ T7725] Dev loop2: unable to read RDB block 3 [ 330.827429][ T7725] loop2: unable to read partition table [ 330.833379][ T7725] loop2: partition table beyond EOD, truncated [ 330.839605][ T7725] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.930284][ T4284] XFS (loop4): Unmounting Filesystem [ 332.358163][ T7758] siw: device registration error -23 [ 333.481509][ T7770] loop2: detected capacity change from 0 to 3 [ 333.507472][ T7770] Dev loop2: unable to read RDB block 3 [ 333.513360][ T7770] loop2: unable to read partition table [ 333.519930][ T7770] loop2: partition table beyond EOD, truncated [ 333.526291][ T7770] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 334.402837][ T7768] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 334.720902][ T7772] 9pnet: Could not find request transport: fdÿÿ [ 335.184092][ T7780] input: syz0 as /devices/virtual/input/input12 [ 336.072111][ T7774] loop3: detected capacity change from 0 to 1024 [ 338.102919][ T7819] loop2: detected capacity change from 0 to 3 [ 338.748950][ T7819] Dev loop2: unable to read RDB block 3 [ 338.754699][ T7819] loop2: unable to read partition table [ 338.760986][ T7819] loop2: partition table beyond EOD, truncated [ 338.767249][ T7819] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 339.229040][ T4425] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 339.435200][ T4425] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.455099][ T4425] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 339.489168][ T4425] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 339.514053][ T4425] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 339.529823][ T7837] device syzkaller0 entered promiscuous mode [ 339.539455][ T4425] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 339.564851][ T4425] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.585771][ T4425] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.602809][ T4425] usb 5-1: Product: syz [ 339.611761][ T4425] usb 5-1: Manufacturer: syz [ 339.640463][ T4425] cdc_wdm 5-1:1.0: skipping garbage [ 339.667454][ T4425] cdc_wdm 5-1:1.0: skipping garbage [ 339.690769][ T4425] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 339.713142][ T4425] cdc_wdm 5-1:1.0: Unknown control protocol [ 340.031671][ T7838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 340.077746][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 341.147101][ T7840] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.290779][ T7840] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.427136][ T7840] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.538919][ T7840] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.708645][ T7840] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.732141][ T7840] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.751324][ T7840] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.775668][ T7840] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.114848][ T4313] usb 5-1: USB disconnect, device number 10 [ 342.647599][ T7882] loop2: detected capacity change from 0 to 3 [ 342.660449][ T7882] Dev loop2: unable to read RDB block 3 [ 342.666284][ T7882] loop2: unable to read partition table [ 342.672833][ T7882] loop2: partition table beyond EOD, truncated [ 342.679210][ T7882] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.943545][ T4737] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 344.203495][ T4737] usb 5-1: Using ep0 maxpacket: 16 [ 344.214241][ T4737] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 344.241036][ T4737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.355551][ T4737] usb 5-1: Product: syz [ 344.403979][ T4737] usb 5-1: Manufacturer: syz [ 344.448409][ T4737] usb 5-1: SerialNumber: syz [ 344.562944][ T4737] usb 5-1: config 0 descriptor?? [ 344.706591][ T4737] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 345.064058][ T4737] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 345.268533][ T4737] usb 5-1: USB disconnect, device number 11 [ 345.282491][ T4737] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 345.355942][ T4737] visor 5-1:0.0: device disconnected [ 346.274341][ T7911] input: syz0 as /devices/virtual/input/input13 [ 347.196184][ T7900] loop0: detected capacity change from 0 to 1024 [ 348.454212][ T7928] loop2: detected capacity change from 0 to 3 [ 348.464781][ T7928] Dev loop2: unable to read RDB block 3 [ 348.470559][ T7928] loop2: unable to read partition table [ 348.477198][ T7928] loop2: partition table beyond EOD, truncated [ 348.483556][ T7928] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 349.482339][ T7941] 0x000000000007-0x000000020000 : "" [ 349.491123][ T7941] ftl_cs: FTL header corrupt! [ 349.827075][ T7948] 0x000000000007-0x000000020000 : "" [ 349.842987][ T7948] ftl_cs: FTL header corrupt! [ 351.236113][ T7973] loop2: detected capacity change from 0 to 3 [ 351.259021][ T7973] Dev loop2: unable to read RDB block 3 [ 351.264925][ T7973] loop2: unable to read partition table [ 351.271516][ T7973] loop2: partition table beyond EOD, truncated [ 351.277876][ T7973] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 352.071771][ T7981] 0x000000000007-0x000000020000 : "" [ 352.079100][ T7981] ftl_cs: FTL header corrupt! [ 352.411604][ T7990] hub 1-0:1.0: USB hub found [ 352.431774][ T7990] hub 1-0:1.0: 1 port detected [ 352.671107][ T7999] input: syz0 as /devices/virtual/input/input14 [ 352.842594][ T7993] loop1: detected capacity change from 0 to 1024 [ 353.381018][ T8001] loop3: detected capacity change from 0 to 1024 [ 353.663238][ T8004] loop0: detected capacity change from 0 to 256 [ 354.010372][ T8011] 0x000000000007-0x000000020000 : "" [ 354.024998][ T8011] ftl_cs: FTL header corrupt! [ 355.077737][ T8030] siw: device registration error -23 [ 356.102717][ T8038] input: syz0 as /devices/virtual/input/input15 [ 356.263007][ T8040] loop4: detected capacity change from 0 to 2048 [ 356.310202][ T8040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.417630][ T8049] loop1: detected capacity change from 0 to 256 [ 356.483475][ T2122] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 356.673767][ T2122] usb 4-1: Using ep0 maxpacket: 16 [ 356.692517][ T2122] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 356.821390][ T2122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.843858][ T2122] usb 4-1: Product: syz [ 356.848120][ T2122] usb 4-1: Manufacturer: syz [ 356.852775][ T2122] usb 4-1: SerialNumber: syz [ 356.888490][ T2122] usb 4-1: config 0 descriptor?? [ 356.922516][ T2122] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 357.089597][ T8065] comedi comedi3: comedi_config --init_data is deprecated [ 357.321993][ T2122] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 357.551565][ T2122] usb 4-1: USB disconnect, device number 7 [ 357.573096][ T2122] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 357.622589][ T8072] siw: device registration error -23 [ 357.651353][ T2122] visor 4-1:0.0: device disconnected [ 359.795079][ T8106] siw: device registration error -23 [ 361.038066][ T8115] 9pnet: Could not find request transport: fdÿÿ [ 362.693389][ T8139] 0x000000000007-0x000000020000 : "" [ 362.705501][ T8139] ftl_cs: FTL header corrupt! [ 363.358987][ T8143] netlink: 'syz.2.1035': attribute type 21 has an invalid length. [ 363.420205][ T8143] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1035'. [ 365.189615][ T8176] loop2: detected capacity change from 0 to 3 [ 365.529505][ T8176] Dev loop2: unable to read RDB block 3 [ 365.535278][ T8176] loop2: unable to read partition table [ 365.541145][ T8176] loop2: partition table beyond EOD, truncated [ 365.547452][ T8176] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 366.142287][ T8180] siw: device registration error -23 [ 366.210215][ T8170] 0x000000000000-0x000000020000 : "" [ 366.254116][ T8170] ftl_cs: FTL header not found. [ 366.532850][ T8187] loop3: detected capacity change from 0 to 32768 [ 366.744242][ T8187] XFS (loop3): Mounting V5 Filesystem [ 367.435948][ T8187] XFS (loop3): Ending clean mount [ 368.347482][ T4274] XFS (loop3): Unmounting Filesystem [ 368.570486][ T8230] siw: device registration error -23 [ 369.142114][ T8238] loop0: detected capacity change from 0 to 1024 [ 371.534713][ T4286] Bluetooth: hci4: command 0x0405 tx timeout [ 372.694947][ T8260] loop0: detected capacity change from 0 to 64 [ 372.747182][ T8260] syz.0.1066: attempt to access beyond end of device [ 372.747182][ T8260] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 372.761504][ T8260] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 372.770364][ T8260] syz.0.1066: attempt to access beyond end of device [ 372.770364][ T8260] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 372.783720][ T8260] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 372.792284][ T8260] syz.0.1066: attempt to access beyond end of device [ 372.792284][ T8260] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 372.805636][ T8260] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 372.814358][ T8260] syz.0.1066: attempt to access beyond end of device [ 372.814358][ T8260] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 372.827733][ T8260] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 372.836389][ T8260] syz.0.1066: attempt to access beyond end of device [ 372.836389][ T8260] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 372.849752][ T8260] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 372.859077][ T8260] syz.0.1066: attempt to access beyond end of device [ 372.859077][ T8260] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 372.872420][ T8260] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 372.881032][ T8260] syz.0.1066: attempt to access beyond end of device [ 372.881032][ T8260] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 372.894453][ T8260] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 374.351578][ T8291] input: syz0 as /devices/virtual/input/input16 [ 374.565959][ T8254] orangefs_mount: mount request failed with -4 [ 374.809126][ T2122] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 375.128142][ T8310] lo speed is unknown, defaulting to 1000 [ 376.309097][ T2122] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.576948][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.583575][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.957204][ T8312] fido_id[8312]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 379.236240][ T8318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.404883][ T8318] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 379.594680][ T8318] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 379.803649][ T8318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.809739][ T8318] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 380.241399][ T8318] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 380.254486][ T8376] siw: device registration error -23 [ 380.319302][ T8318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.363412][ T8318] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.464331][ T8318] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 380.492117][ T8318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.509855][ T8318] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 380.519216][ T8318] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 380.978377][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 381.006683][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 381.223751][ T8392] input: syz0 as /devices/virtual/input/input17 [ 381.379123][ T7097] udevd[7097]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 381.383939][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 381.413772][ T22] usb 1-1: device descriptor read/all, error -71 [ 381.853466][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.333443][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.493515][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.933556][ T8416] input: syz0 as /devices/virtual/input/input18 [ 383.053590][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 383.462576][ T4713] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 383.527187][ T8432] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 383.534019][ T8432] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 383.540527][ T8432] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 383.547203][ T8432] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 383.553780][ T8432] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 383.560877][ T8432] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 383.572412][ T8432] loop2: detected capacity change from 0 to 3 [ 383.580266][ T8432] Dev loop2: unable to read RDB block 3 [ 383.586653][ T8432] loop2: unable to read partition table [ 383.592527][ T8432] loop2: partition table beyond EOD, truncated [ 383.598930][ T8432] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 383.665353][ T4713] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.714388][ T4713] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.829596][ T4713] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.899971][ T4713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.933394][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 384.201934][ T4713] usb 2-1: GET_CAPABILITIES returned 0 [ 384.234328][ T4713] usbtmc 2-1:16.0: can't read capabilities [ 384.423476][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 384.424461][ T2122] usb 2-1: USB disconnect, device number 8 [ 384.511082][ T8444] 0x000000000007-0x000000020000 : "" [ 384.524843][ T8444] ftl_cs: FTL header corrupt! [ 384.573477][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 386.702624][ T8466] input: syz0 as /devices/virtual/input/input19 [ 387.493363][ T8496] 0x000000000007-0x000000020000 : "" [ 387.508463][ T8496] ftl_cs: FTL header corrupt! [ 391.238996][ T8519] 0x000000000007-0x000000020000 : "" [ 391.246692][ T8519] ftl_cs: FTL header corrupt! [ 391.610455][ T8527] input: syz0 as /devices/virtual/input/input20 [ 391.774133][ T8535] 9pnet_virtio: no channels available for device syz [ 392.117727][ T8549] input: syz0 as /devices/virtual/input/input21 [ 394.476566][ T8568] usbip-vudc usbip-vudc.0: gadget not bound [ 394.493021][ T8567] siw: device registration error -23 [ 394.965751][ T8572] 0x000000000007-0x000000020000 : "" [ 396.702042][ T8572] ftl_cs: FTL header corrupt! [ 397.233425][ T8588] input: syz0 as /devices/virtual/input/input22 [ 397.313370][ T127] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 399.303360][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 399.312087][ T127] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 399.323365][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.331413][ T127] usb 2-1: Product: syz [ 399.338907][ T127] usb 2-1: Manufacturer: syz [ 399.343851][ T127] usb 2-1: SerialNumber: syz [ 399.358128][ T127] usb 2-1: config 0 descriptor?? [ 399.406200][ T127] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 399.809889][ T127] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 400.029634][ T127] usb 2-1: USB disconnect, device number 9 [ 400.088279][ T127] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 400.127834][ T127] visor 2-1:0.0: device disconnected [ 400.153421][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 400.363692][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 400.379123][ T22] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 400.412280][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.430286][ T22] usb 4-1: Product: syz [ 400.445417][ T22] usb 4-1: Manufacturer: syz [ 400.450142][ T22] usb 4-1: SerialNumber: syz [ 400.477334][ T22] usb 4-1: config 0 descriptor?? [ 400.495249][ T22] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 400.688773][ T22] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 400.703862][ T22] visor: probe of 4-1:0.0 failed with error -71 [ 400.738938][ T22] usb 4-1: USB disconnect, device number 8 [ 401.389528][ T8625] siw: device registration error -23 [ 401.504321][ T8627] 0x000000000007-0x000000020000 : "" [ 401.548910][ T8627] ftl_cs: FTL header corrupt! [ 403.116610][ T8637] 0x000000000007-0x000000020000 : "" [ 403.138269][ T8637] ftl_cs: FTL header corrupt! [ 404.233785][ T22] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 404.585734][ T8658] loop2: detected capacity change from 0 to 3 [ 404.593184][ T8658] Dev loop2: unable to read RDB block 3 [ 404.599046][ T8658] loop2: unable to read partition table [ 404.605361][ T8658] loop2: partition table beyond EOD, truncated [ 404.611600][ T8658] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 404.630552][ T22] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 404.649628][ T22] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 404.673847][ T22] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 404.786882][ T22] usb 2-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 404.832612][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.862515][ T22] usb 2-1: Product: syz [ 404.877453][ T22] usb 2-1: Manufacturer: syz [ 404.893632][ T22] usb 2-1: SerialNumber: syz [ 405.742633][ T8667] 9pnet: Could not find request transport: fdÿÿ [ 405.943845][ T8643] CIFS: VFS: Unable to allocate memory for devname [ 405.958677][ T8643] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 405.993756][ T8643] qnx6: wrong signature (magic) in superblock #1. [ 406.000298][ T8643] qnx6: unable to read the first superblock [ 406.486161][ T8690] siw: device registration error -23 [ 407.220885][ T8673] ceph: No mds server is up or the cluster is laggy [ 408.095431][ T22] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 408.122108][ T22] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 408.279849][ T8715] device syzkaller0 entered promiscuous mode [ 408.293592][ T22] snd-usb-audio: probe of 2-1:1.2 failed with error -2 [ 408.322232][ T22] usb 2-1: USB disconnect, device number 10 [ 408.344868][ T7097] udevd[7097]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.402284][ T8756] 0x000000000007-0x000000020000 : "" [ 411.416400][ T8756] ftl_cs: FTL header corrupt! [ 412.237198][ T8747] loop0: detected capacity change from 0 to 1024 [ 412.807561][ T4286] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 413.257745][ T8771] input: syz0 as /devices/virtual/input/input23 [ 413.458448][ T8781] loop0: detected capacity change from 0 to 64 [ 413.505136][ T8781] syz.0.1189: attempt to access beyond end of device [ 413.505136][ T8781] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 413.518941][ T8781] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 413.527562][ T8781] syz.0.1189: attempt to access beyond end of device [ 413.527562][ T8781] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 413.540982][ T8781] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 413.549623][ T8781] syz.0.1189: attempt to access beyond end of device [ 413.549623][ T8781] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 413.562985][ T8781] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 413.571625][ T8781] syz.0.1189: attempt to access beyond end of device [ 413.571625][ T8781] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 413.585001][ T8781] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 413.593681][ T8781] syz.0.1189: attempt to access beyond end of device [ 413.593681][ T8781] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 413.607118][ T8781] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 413.616159][ T8781] syz.0.1189: attempt to access beyond end of device [ 413.616159][ T8781] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 413.629551][ T8781] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 413.638175][ T8781] syz.0.1189: attempt to access beyond end of device [ 413.638175][ T8781] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 413.651526][ T8781] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 413.874646][ T8788] device syzkaller0 entered promiscuous mode [ 414.250552][ T8795] loop2: detected capacity change from 0 to 3 [ 414.379634][ T8794] 0x000000000007-0x000000020000 : "" [ 414.397994][ T8794] ftl_cs: FTL header corrupt! [ 414.885960][ T8795] Dev loop2: unable to read RDB block 3 [ 414.891626][ T8795] loop2: AHDI p1 p2 p3 [ 414.895905][ T8795] loop2: partition table partially beyond EOD, truncated [ 414.903137][ T8795] loop2: p1 start 1601398130 is beyond EOD, truncated [ 414.910056][ T8795] loop2: p2 start 1702059890 is beyond EOD, truncated [ 416.815421][ T4286] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 416.824359][ T4286] Bluetooth: hci2: Injecting HCI hardware error event [ 416.834185][ T4278] Bluetooth: hci2: hardware error 0x00 [ 418.046305][ T8823] loop0: detected capacity change from 0 to 256 [ 418.145212][ T8825] siw: device registration error -23 [ 418.377926][ T8821] input: syz0 as /devices/virtual/input/input24 [ 419.042656][ T8839] loop2: detected capacity change from 0 to 3 [ 419.050143][ T8839] Dev loop2: unable to read RDB block 3 [ 419.055902][ T8839] loop2: AHDI p1 p2 p3 [ 419.060193][ T8839] loop2: partition table partially beyond EOD, truncated [ 419.067567][ T8839] loop2: p1 start 1601398130 is beyond EOD, truncated [ 419.074542][ T8839] loop2: p2 start 1702059890 is beyond EOD, truncated [ 419.373548][ T4278] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 419.450895][ T8845] 0x000000000007-0x000000020000 : "" [ 419.560601][ T8845] ftl_cs: FTL header corrupt! [ 420.552266][ T8849] loop1: detected capacity change from 0 to 32768 [ 422.325501][ T8849] XFS (loop1): Mounting V5 Filesystem [ 422.407896][ T4278] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 422.471205][ T8849] XFS (loop1): Ending clean mount [ 423.289521][ T4281] XFS (loop1): Unmounting Filesystem [ 423.618825][ T8871] input: syz0 as /devices/virtual/input/input25 [ 424.683083][ T8876] siw: device registration error -23 [ 424.688813][ T8874] input: syz0 as /devices/virtual/input/input26 [ 425.633425][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 425.834263][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 425.856922][ T7] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 425.916942][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.938706][ T7] usb 4-1: Product: syz [ 425.950966][ T7] usb 4-1: Manufacturer: syz [ 425.962145][ T4278] Bluetooth: hci4: unexpected event for opcode 0x0028 [ 426.423449][ T4278] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 426.432458][ T4278] Bluetooth: hci1: Injecting HCI hardware error event [ 426.442683][ T4286] Bluetooth: hci1: hardware error 0x00 [ 426.793428][ T7] usb 4-1: SerialNumber: syz [ 426.811661][ T7] usb 4-1: config 0 descriptor?? [ 426.826284][ T7] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 427.465030][ T8913] siw: device registration error -23 [ 427.509548][ T7] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 427.724392][ T4313] usb 4-1: USB disconnect, device number 9 [ 427.735016][ T4313] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 427.767908][ T4313] visor 4-1:0.0: device disconnected [ 428.241536][ T8925] loop0: detected capacity change from 0 to 1024 [ 428.893844][ T4286] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 430.104187][ T8924] loop1: detected capacity change from 0 to 1024 [ 430.653118][ T8935] 0x000000000007-0x000000020000 : "" [ 430.668447][ T8935] ftl_cs: FTL header corrupt! [ 432.227799][ T8957] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 432.234665][ T8957] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 432.241258][ T8957] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 432.248031][ T8957] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 432.255061][ T8957] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 432.262336][ T8957] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 432.285162][ T8957] loop2: detected capacity change from 0 to 3 [ 432.294066][ T8957] Dev loop2: unable to read RDB block 3 [ 432.308505][ T8957] loop2: unable to read partition table [ 432.314427][ T8957] loop2: partition table beyond EOD, truncated [ 432.320634][ T8957] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.039745][ T8962] input: syz0 as /devices/virtual/input/input27 [ 434.230122][ T8965] siw: device registration error -23 [ 434.428354][ T8972] loop2: detected capacity change from 0 to 3 [ 434.436312][ T8972] Dev loop2: unable to read RDB block 3 [ 434.441953][ T8972] loop2: unable to read partition table [ 434.447971][ T8972] loop2: partition table beyond EOD, truncated [ 434.454366][ T8972] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.645863][ T8974] siw: device registration error -23 [ 435.198797][ T3638] Dev loop2: unable to read RDB block 3 [ 435.241554][ T3638] loop2: unable to read partition table [ 435.273691][ T3638] loop2: partition table beyond EOD, truncated [ 436.048188][ T8998] siw: device registration error -23 [ 436.717528][ T9013] loop2: detected capacity change from 0 to 3 [ 436.725265][ T9013] Dev loop2: unable to read RDB block 3 [ 436.730954][ T9013] loop2: unable to read partition table [ 436.736952][ T9013] loop2: partition table beyond EOD, truncated [ 436.743171][ T9013] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.167719][ T3638] Dev loop2: unable to read RDB block 3 [ 437.195213][ T3638] loop2: unable to read partition table [ 437.210514][ T3638] loop2: partition table beyond EOD, truncated [ 437.525125][ T9031] loop3: detected capacity change from 0 to 1024 [ 438.372699][ T9044] loop2: detected capacity change from 0 to 3 [ 438.381435][ T9044] Dev loop2: unable to read RDB block 3 [ 438.387161][ T9044] loop2: AHDI p1 p2 p3 [ 438.391418][ T9044] loop2: partition table partially beyond EOD, truncated [ 438.399580][ T9044] loop2: p1 start 1601398130 is beyond EOD, truncated [ 438.406451][ T9044] loop2: p2 start 1702059890 is beyond EOD, truncated [ 438.890024][ T9050] siw: device registration error -23 [ 439.571821][ T9066] siw: device registration error -23 [ 439.765980][ T9073] loop2: detected capacity change from 0 to 3 [ 439.779424][ T9073] Dev loop2: unable to read RDB block 3 [ 439.785208][ T9073] loop2: unable to read partition table [ 439.790992][ T9073] loop2: partition table beyond EOD, truncated [ 439.797308][ T9073] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.016489][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.022928][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.190804][ T3638] Dev loop2: unable to read RDB block 3 [ 440.196553][ T3638] loop2: unable to read partition table [ 440.203798][ T3638] loop2: partition table beyond EOD, truncated [ 440.702282][ T9089] loop2: detected capacity change from 0 to 3 [ 440.709365][ T9089] Dev loop2: unable to read RDB block 3 [ 440.715143][ T9089] loop2: unable to read partition table [ 440.720997][ T9089] loop2: partition table beyond EOD, truncated [ 440.727264][ T9089] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 441.080833][ T9087] loop3: detected capacity change from 0 to 1024 [ 441.410140][ T3638] Dev loop2: unable to read RDB block 3 [ 441.473693][ T3638] loop2: unable to read partition table [ 441.485681][ T3638] loop2: partition table beyond EOD, truncated [ 441.744307][ T9098] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 441.750988][ T9098] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 441.757680][ T9098] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 441.764431][ T9098] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 441.771001][ T9098] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 441.778239][ T9098] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 441.788932][ T9098] loop2: detected capacity change from 0 to 3 [ 441.808809][ T9098] Dev loop2: unable to read RDB block 3 [ 441.814700][ T9098] loop2: unable to read partition table [ 441.820630][ T9098] loop2: partition table beyond EOD, truncated [ 441.826992][ T9098] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 442.280797][ T3638] Dev loop2: unable to read RDB block 3 [ 442.297906][ T3638] loop2: unable to read partition table [ 442.306288][ T9100] siw: device registration error -23 [ 442.329017][ T3638] loop2: partition table beyond EOD, truncated [ 444.423881][ T9129] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 444.433498][ T9133] loop0: detected capacity change from 0 to 64 [ 445.488843][ T9149] loop0: detected capacity change from 0 to 1024 [ 446.012304][ T9156] loop2: detected capacity change from 0 to 3 [ 446.024282][ T9156] Dev loop2: unable to read RDB block 3 [ 446.029956][ T9156] loop2: unable to read partition table [ 446.036581][ T9156] loop2: partition table beyond EOD, truncated [ 446.042815][ T9156] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.570295][ T3638] Dev loop2: unable to read RDB block 3 [ 446.584182][ T3638] loop2: unable to read partition table [ 446.628231][ T3638] loop2: partition table beyond EOD, truncated [ 447.093115][ T9168] siw: device registration error -23 [ 447.273374][ T4315] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 447.443436][ T4315] usb 1-1: device descriptor read/64, error -71 [ 447.713829][ T4315] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 447.883337][ T4315] usb 1-1: device descriptor read/64, error -71 [ 448.023003][ T4315] usb usb1-port1: attempt power cycle [ 448.443368][ T4315] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 448.474063][ T4315] usb 1-1: device descriptor read/8, error -71 [ 448.753532][ T4315] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 448.808768][ T4315] usb 1-1: device descriptor read/8, error -71 [ 449.705767][ T9197] loop3: detected capacity change from 0 to 32768 [ 449.763698][ T4315] usb usb1-port1: unable to enumerate USB device [ 449.851021][ T9197] XFS (loop3): Mounting V5 Filesystem [ 450.146880][ T9197] XFS (loop3): Ending clean mount [ 450.326719][ T9216] ================================================================== [ 450.334919][ T9216] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 450.342371][ T9216] Read of size 8 at addr ffff888029279418 by task syz.1.1313/9216 [ 450.350328][ T9216] [ 450.352734][ T9216] CPU: 1 PID: 9216 Comm: syz.1.1313 Not tainted syzkaller #0 [ 450.360223][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.370345][ T9216] Call Trace: [ 450.373745][ T9216] [ 450.376811][ T9216] dump_stack_lvl+0x188/0x24e [ 450.381700][ T9216] ? read_lock_is_recursive+0x10/0x10 [ 450.387161][ T9216] ? show_regs_print_info+0x12/0x12 [ 450.392418][ T9216] ? load_image+0x410/0x410 [ 450.397005][ T9216] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 450.402589][ T9216] ? __virt_addr_valid+0x188/0x540 [ 450.407796][ T9216] ? __virt_addr_valid+0x467/0x540 [ 450.412978][ T9216] ? dvb_device_open+0xc5/0x360 [ 450.417893][ T9216] print_report+0xa8/0x210 [ 450.422373][ T9216] kasan_report+0x10b/0x140 [ 450.426980][ T9216] ? dvb_device_open+0xc5/0x360 [ 450.431894][ T9216] dvb_device_open+0xc5/0x360 [ 450.436659][ T9216] chrdev_open+0x585/0x5f0 [ 450.441237][ T9216] ? cd_forget+0x160/0x160 [ 450.445714][ T9216] ? fsnotify_perm+0x39b/0x550 [ 450.450631][ T9216] ? cd_forget+0x160/0x160 [ 450.455107][ T9216] do_dentry_open+0x7dd/0x10b0 [ 450.460021][ T9216] path_openat+0x2674/0x2f10 [ 450.464752][ T9216] ? verify_lock_unused+0x140/0x140 [ 450.470021][ T9216] ? do_sys_openat2+0xdd/0x4f0 [ 450.474846][ T9216] ? do_filp_open+0x420/0x420 [ 450.479585][ T9216] do_filp_open+0x1ee/0x420 [ 450.484161][ T9216] ? vfs_tmpfile+0x470/0x470 [ 450.488810][ T9216] ? _raw_spin_unlock+0x24/0x40 [ 450.493702][ T9216] ? alloc_fd+0x590/0x640 [ 450.498140][ T9216] do_sys_openat2+0x14b/0x4f0 [ 450.502878][ T9216] ? do_sys_open+0xe0/0xe0 [ 450.507349][ T9216] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.513386][ T9216] ? lock_chain_count+0x20/0x20 [ 450.518300][ T9216] __x64_sys_openat+0x135/0x160 [ 450.523210][ T9216] do_syscall_64+0x4c/0xa0 [ 450.527687][ T9216] ? clear_bhb_loop+0x60/0xb0 [ 450.532520][ T9216] ? clear_bhb_loop+0x60/0xb0 [ 450.537268][ T9216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.543237][ T9216] RIP: 0033:0x7fdb5d75e90e [ 450.547782][ T9216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.567510][ T9216] RSP: 002b:00007fdb5e688b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.576055][ T9216] RAX: ffffffffffffffda RBX: 00007fdb5e6896c0 RCX: 00007fdb5d75e90e [ 450.584085][ T9216] RDX: 0000000000000002 RSI: 00007fdb5e688c00 RDI: ffffffffffffff9c [ 450.592149][ T9216] RBP: 00007fdb5e688c00 R08: 0000000000000000 R09: 0000000000000000 [ 450.600178][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 450.608208][ T9216] R13: 00007fdb5da26038 R14: 00007fdb5da25fa0 R15: 00007ffc10f1b488 [ 450.616246][ T9216] [ 450.619304][ T9216] [ 450.621662][ T9216] Allocated by task 1: [ 450.625861][ T9216] kasan_set_track+0x4b/0x70 [ 450.630509][ T9216] __kasan_kmalloc+0x8e/0xa0 [ 450.635155][ T9216] dvb_register_device+0x305/0x1dc0 [ 450.640461][ T9216] dvb_register_frontend+0x629/0x900 [ 450.645807][ T9216] vidtv_bridge_probe+0x9cf/0xf50 [ 450.650955][ T9216] platform_probe+0x137/0x1c0 [ 450.655797][ T9216] really_probe+0x24a/0xb40 [ 450.660341][ T9216] __driver_probe_device+0x1f5/0x390 [ 450.665668][ T9216] driver_probe_device+0x4f/0x420 [ 450.670728][ T9216] __driver_attach+0x43d/0x6c0 [ 450.675541][ T9216] bus_for_each_dev+0x182/0x1f0 [ 450.680464][ T9216] bus_add_driver+0x324/0x5d0 [ 450.685215][ T9216] driver_register+0x32d/0x430 [ 450.690028][ T9216] vidtv_bridge_init+0x39/0x67 [ 450.695026][ T9216] do_one_initcall+0x257/0x800 [ 450.699880][ T9216] do_initcall_level+0x13d/0x1ed [ 450.704954][ T9216] do_initcalls+0x4b/0x8a [ 450.709334][ T9216] kernel_init_freeable+0x401/0x5ab [ 450.714591][ T9216] kernel_init+0x19/0x1b0 [ 450.718967][ T9216] ret_from_fork+0x1f/0x30 [ 450.723428][ T9216] [ 450.725807][ T9216] Freed by task 9129: [ 450.729826][ T9216] kasan_set_track+0x4b/0x70 [ 450.734474][ T9216] kasan_save_free_info+0x27/0x40 [ 450.739627][ T9216] ____kasan_slab_free+0x126/0x1f0 [ 450.744802][ T9216] slab_free_freelist_hook+0x133/0x1b0 [ 450.750319][ T9216] __kmem_cache_free+0xb6/0x200 [ 450.755262][ T9216] dvb_device_open+0x2d2/0x360 [ 450.760082][ T9216] chrdev_open+0x585/0x5f0 [ 450.764550][ T9216] do_dentry_open+0x7dd/0x10b0 [ 450.769367][ T9216] path_openat+0x2674/0x2f10 [ 450.774010][ T9216] do_filp_open+0x1ee/0x420 [ 450.778555][ T9216] do_sys_openat2+0x14b/0x4f0 [ 450.783280][ T9216] __x64_sys_openat+0x135/0x160 [ 450.788184][ T9216] do_syscall_64+0x4c/0xa0 [ 450.792654][ T9216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.798610][ T9216] [ 450.800972][ T9216] The buggy address belongs to the object at ffff888029279400 [ 450.800972][ T9216] which belongs to the cache kmalloc-256 of size 256 [ 450.815203][ T9216] The buggy address is located 24 bytes inside of [ 450.815203][ T9216] 256-byte region [ffff888029279400, ffff888029279500) [ 450.828448][ T9216] [ 450.830824][ T9216] The buggy address belongs to the physical page: [ 450.837370][ T9216] page:ffffea0000a49e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29278 [ 450.847576][ T9216] head:ffffea0000a49e00 order:1 compound_mapcount:0 compound_pincount:0 [ 450.855954][ T9216] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 450.864036][ T9216] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 450.872676][ T9216] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 450.881301][ T9216] page dumped because: kasan: bad access detected [ 450.887772][ T9216] page_owner tracks the page as allocated [ 450.893531][ T9216] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18677365733, free_ts 0 [ 450.913296][ T9216] post_alloc_hook+0x173/0x1a0 [ 450.918215][ T9216] get_page_from_freelist+0x206b/0x2180 [ 450.923834][ T9216] __alloc_pages+0x1ec/0x4f0 [ 450.928479][ T9216] alloc_page_interleave+0x24/0x1e0 [ 450.933817][ T9216] alloc_slab_page+0x5d/0x180 [ 450.938550][ T9216] new_slab+0x87/0x2d0 [ 450.942678][ T9216] ___slab_alloc+0xbc5/0x1240 [ 450.947406][ T9216] __kmem_cache_alloc_node+0x126/0x270 [ 450.952916][ T9216] kmalloc_trace+0x26/0xe0 [ 450.957543][ T9216] bus_add_driver+0xdc/0x5d0 [ 450.962178][ T9216] driver_register+0x32d/0x430 [ 450.966986][ T9216] usb_register_driver+0x201/0x3c0 [ 450.972214][ T9216] do_one_initcall+0x257/0x800 [ 450.977020][ T9216] do_initcall_level+0x13d/0x1ed [ 450.982020][ T9216] do_initcalls+0x4b/0x8a [ 450.986417][ T9216] kernel_init_freeable+0x401/0x5ab [ 450.991671][ T9216] page_owner free stack trace missing [ 450.997092][ T9216] [ 450.999451][ T9216] Memory state around the buggy address: [ 451.005191][ T9216] ffff888029279300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.013291][ T9216] ffff888029279380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.021398][ T9216] >ffff888029279400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.029505][ T9216] ^ [ 451.034392][ T9216] ffff888029279480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.042501][ T9216] ffff888029279500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.050606][ T9216] ================================================================== [ 451.096398][ T9216] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 451.103724][ T9216] CPU: 1 PID: 9216 Comm: syz.1.1313 Not tainted syzkaller #0 [ 451.111143][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.121244][ T9216] Call Trace: [ 451.124711][ T9216] [ 451.127724][ T9216] dump_stack_lvl+0x188/0x24e [ 451.132481][ T9216] ? memcpy+0x3c/0x60 [ 451.136521][ T9216] ? show_regs_print_info+0x12/0x12 [ 451.141795][ T9216] ? load_image+0x410/0x410 [ 451.146348][ T9216] panic+0x2d3/0x710 [ 451.150319][ T9216] ? bpf_jit_dump+0xd0/0xd0 [ 451.154867][ T9216] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 451.160871][ T9216] ? _raw_spin_unlock+0x40/0x40 [ 451.165802][ T9216] check_panic_on_warn+0x80/0xa0 [ 451.170859][ T9216] ? dvb_device_open+0xc5/0x360 [ 451.175753][ T9216] end_report+0x66/0x110 [ 451.180037][ T9216] kasan_report+0x118/0x140 [ 451.184576][ T9216] ? dvb_device_open+0xc5/0x360 [ 451.189463][ T9216] dvb_device_open+0xc5/0x360 [ 451.194179][ T9216] chrdev_open+0x585/0x5f0 [ 451.198640][ T9216] ? cd_forget+0x160/0x160 [ 451.203090][ T9216] ? fsnotify_perm+0x39b/0x550 [ 451.207897][ T9216] ? cd_forget+0x160/0x160 [ 451.212355][ T9216] do_dentry_open+0x7dd/0x10b0 [ 451.217155][ T9216] path_openat+0x2674/0x2f10 [ 451.221779][ T9216] ? verify_lock_unused+0x140/0x140 [ 451.227012][ T9216] ? do_sys_openat2+0xdd/0x4f0 [ 451.231813][ T9216] ? do_filp_open+0x420/0x420 [ 451.236525][ T9216] do_filp_open+0x1ee/0x420 [ 451.241057][ T9216] ? vfs_tmpfile+0x470/0x470 [ 451.245681][ T9216] ? _raw_spin_unlock+0x24/0x40 [ 451.250568][ T9216] ? alloc_fd+0x590/0x640 [ 451.254927][ T9216] do_sys_openat2+0x14b/0x4f0 [ 451.259637][ T9216] ? do_sys_open+0xe0/0xe0 [ 451.264084][ T9216] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 451.270098][ T9216] ? lock_chain_count+0x20/0x20 [ 451.274998][ T9216] __x64_sys_openat+0x135/0x160 [ 451.279901][ T9216] do_syscall_64+0x4c/0xa0 [ 451.284350][ T9216] ? clear_bhb_loop+0x60/0xb0 [ 451.289054][ T9216] ? clear_bhb_loop+0x60/0xb0 [ 451.293763][ T9216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.299692][ T9216] RIP: 0033:0x7fdb5d75e90e [ 451.304134][ T9216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.323772][ T9216] RSP: 002b:00007fdb5e688b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.332212][ T9216] RAX: ffffffffffffffda RBX: 00007fdb5e6896c0 RCX: 00007fdb5d75e90e [ 451.340207][ T9216] RDX: 0000000000000002 RSI: 00007fdb5e688c00 RDI: ffffffffffffff9c [ 451.348212][ T9216] RBP: 00007fdb5e688c00 R08: 0000000000000000 R09: 0000000000000000 [ 451.356212][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 451.364227][ T9216] R13: 00007fdb5da26038 R14: 00007fdb5da25fa0 R15: 00007ffc10f1b488 [ 451.372249][ T9216] [ 451.375897][ T9216] Kernel Offset: disabled [ 451.380232][ T9216] Rebooting in 86400 seconds..