last executing test programs: 6m7.235479004s ago: executing program 0 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4463, &(0x7f0000004480)="$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") 6m3.194185434s ago: executing program 0 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = fsopen(&(0x7f0000000040)='v7\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) socket$inet_udp(0x2, 0x2, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) unshare(0x26020480) r5 = socket(0x10, 0x80002, 0x2) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "8763c1e5966c6af2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a0400b9", "12772541f8eb02bb"}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r7, 0x0, 0x20000000002) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x7fc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec08}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6m1.252151442s ago: executing program 0 (id=21): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000003, 0x204031, 0xffffffffffffffff, 0x29d1f000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x4, 0x0, 0x0, {{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x8, 0x3, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x8, 0x3000000000002}, 0x844) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x1]) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f907864010100000000002480655800000000000000001000"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc6010aa00000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5m59.609308438s ago: executing program 0 (id=24): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltaction={0x54, 0x31, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8051}, 0x4000000) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) getpeername$unix(r0, &(0x7f0000000440), &(0x7f0000000380)=0x6e) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x12) waitid(0x1, r1, 0x0, 0x1000009, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 5m59.222518326s ago: executing program 0 (id=27): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, 0x0, 0x0, 0x40000101, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004d40)={r5, &(0x7f0000004cc0), &(0x7f0000004d00), 0x12}, 0x20) mkdirat(r4, &(0x7f0000000340)='./file1\x00', 0x2e) setpriority(0x2, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 5m57.561324441s ago: executing program 0 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x222, 0x3ff, 0x9, 0x10, 0x602, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 5m56.897941605s ago: executing program 32 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x222, 0x3ff, 0x9, 0x10, 0x602, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 3m16.983344837s ago: executing program 5 (id=344): r0 = getpid() r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0xa4, 0x9}}, @in_dx={0x69, 0x20, {0xc562, 0x5}}, @wr_drn={0x68, 0x20, {0x6, 0x8001}}, @out_dx={0x6a, 0x28, {0x35f8, 0xc, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0xbed}}], 0xc8}) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r10 = socket(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4ea0, 0x401, @mcast2, 0x6}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e507da93883e8c628a600b17c9e584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x2, 0x4046040) kcmp(r6, r7, 0x6, r8, r9) 3m14.50157638s ago: executing program 5 (id=346): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)=0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 3m12.117476194s ago: executing program 5 (id=371): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = fanotify_init(0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40001029, r1, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) 3m8.001017993s ago: executing program 5 (id=385): ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4002}, {0xffffffffffffffff, 0x4000}], 0x2, 0x6) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000017c0)=r2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x4, 0x8, 0x4}, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000900", @ANYBLOB="040027bd7000fddbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x8000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000b40), r3) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14, r5, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r6, 0x10, 0x4000, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x207a120, 0x100, {0x763039aa, 0x116}, 0x50, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xc0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000080)={0x9, 0x5c8, 0x5, 0x82, 0x1, 0x0, [{0xa100, 0x1ff, 0x6, '\x00', 0xa00}]}) sendto$inet6(r7, &(0x7f0000000640)="ce8fe2184e6be43f0b904eb953a6e7b96baf8abdc153e49c791702b4e4a3e3d99e669f92f91150855a5a4c261b677e5e0a230a695c29f1962757a9c91d18c2bfbf5880dbe5013b7674d4a4991e5dfb22085795f4c9f75bced51a2be3f05bc2627086c72c9ea203a0580795191476ac8cf73a0bbce0ea3807a5141b9d683b911a41ae6cc0800c96ef18d4bc86c7d9b84d83349ef3e8defe04a8b2f58d741953dfad317c9b2f3f82c8689d5898688d451bf6f6d49503e0699c9b956e8c5d1376c1976310b64f6edbe1ddf8b07845dde9da", 0xd0, 0x20000081, 0x0, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 3m6.963511977s ago: executing program 5 (id=391): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x414, &(0x7f0000000340)=ANY=[], 0x1, 0x67d, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xa04254, &(0x7f0000000080)=ANY=[], 0x5, 0x31f, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setresuid(0x0, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 3m4.267182571s ago: executing program 5 (id=406): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000002680)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32], 0x1, 0xa08, &(0x7f0000008280)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) msgget(0x3, 0x693) msgctl$IPC_RMID(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) 3m3.271947063s ago: executing program 33 (id=406): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000002680)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32], 0x1, 0xa08, &(0x7f0000008280)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) msgget(0x3, 0x693) msgctl$IPC_RMID(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) 1m23.452556673s ago: executing program 1 (id=620): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000c40), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000d00)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r5, 0x1) 1m21.686020225s ago: executing program 1 (id=621): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fallocate(0xffffffffffffffff, 0x3, 0xa48b, 0x8000c60) fanotify_init(0x8, 0x800) fanotify_init(0x200, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x28c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x240, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd007d966a3e947635e76e1c560ead3e7e55a142dfcdafd3f6ac3b234a726cc"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1872d826626968b73a849aae5d589e2685ef573d06ed67a39441e0c0e4599f00"}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3099ace9f33b89487dd6902e2affad7fcfdf1fa9cd361539fd39689b86522f04"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x4}]}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 1m13.863025704s ago: executing program 1 (id=635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000078c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000005fc0)=ANY=[], 0x248, 0x1}], 0x1, 0x40800) 1m10.098573606s ago: executing program 1 (id=643): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000c40), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000d00)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r5, 0x1) 1m8.255508439s ago: executing program 1 (id=646): openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x8) 1m5.194266908s ago: executing program 2 (id=658): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 1m3.369575962s ago: executing program 1 (id=661): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/notes', 0x0, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe11, r0, 0x0, 0x300, 0x4, 0x0, 0x0, r0}]) 1m3.295772128s ago: executing program 2 (id=662): syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005baa7f2058046e7064350000000109021a00010000000009040000000e010000082402010202"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x4000400) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @private, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000440)='./file2\x00', 0x200804, &(0x7f0000000000)={[{@nouuid}, {}, {@noquota}, {@noattr2}, {@lazytime}]}, 0x0, 0x974b, &(0x7f000001c500)="$eJzs3QnYpXPhuPHzjhn7MoZKSk01okXWLFHNDGYoJEu0I0vKUlLRKiWljRbti2RJWQqFsrST7C2UECpZIi22Yf7XO/MOY9wmfv1+f3Lf93W97znnOc953u/5fp7vc94Zc122nrL55MFg/sHMxg/m7PRLp04be/EmNxy23eJHrnz8LQfde8cJE0duJ43cTh4MBqNGnh6auW3c4IQTRw1Gz9h+TwstsODQIoPBKiMPR44zWGPmzSIXzNpv+hzNOdChe74dMPNrRosN/4jhO189aL9DB4PB2NlePzQYDO1znzcqbetJU6fcY3W327DVmJH7s3/NO/NrkbMHg0VOGvD5Mfu+Qw/BWxr+mfs8/bQxmzwEP/u/rq0nTd1wDv/htTjPyLY1htf4nGvQ2Jzn+XXLbrPWyBTOON8Gg+FL3L3Wyn9FW0+astHg/q/zg8PWPvOA6TOvm/MNZn5QLDAYDBYcub4u/FC71H/WpMmrzvjMnvV4hH3WubwPnRfffNWxdw1/SA8GgyUGg3EbzPosqKqqqv+OJk1edV34/J9/bp//xx239El9/ldVVf33tuGkyasOf9bP8fm/8Nw+//dY+qx9Z/7d/8Q1Zr7qrof2TVRVVdWDasqG+Pk/dm6f/2use95Gff5XVVX997bZxjM+/xee4/N/ybl9/r/82LWXGdlv1u8Nd852yKHZ/nvCHbNtn2e27bfPtn3MbMeZff95Z9t+62zb5xt+DvYfPxiMm/XvBafds3nc+OHnRrbfNtv2iff8O50J6822fdJs26fMtn3yyFiHt0+dbfvU2fbfYC5TXVVV9bBps1WnrDuY7d/Zj2xeatbz9Pn/g5MvW+GhGm9VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX9d3bXDaecNhgMhgaDwajBYNpg5P7st4Pp06dPH3583Bnnn/+QDfTh0dDpl06dNvbiTW44bLvFj1z5+FsOumeW/mv7738H9Z807D//UeMHg922fKiHUg9BrX93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIXd9cNp5w2cg6MGgymDUbu7zPr9uQDX/aKkV3X2ur4mw6+55UTJu48cu/0S6dO2/khGPtD0NDwex178SY3HLbd4keufPwtBz0CVs9//zuo/6QZ/jsPDQYj63vs8FreZNJmWyw/GAwOvun4rVYf3P3cmsPPrT1unsE8M166/Izv60/gA++zwczbicPflrz7GMfNOP6G0w+ZZ2iOQczWc0+/8rDXbn3LanPeLnf/72PUrDuHXv6dm6dPnz79XhtHmv9+Xjzr+LPey5zrfGTsyw+PfcU9d33Dim/a+20r7LzrtjvtsNMOu6286pqrrb7Kyquv9ewVd9x5lx1Wmvn9fuZs/Izv6z6QOVt4zjm7YdLsczbne7u/ORs/9zmbccRpbxvaYtacjX6Qc7bu3Ods/M4jP2jCxDGDbWZMzdBgMGG9MYO9hh+sPN9gMGH9kX2XGt53nXGjBoMD73mjw/fmu/scHNpneJ+tp2w++Z6R3fcd3uc6fa8dJ0wcuZ00cjt55hDHD+45FccNTjhx1PBc3GuaF1pgwaFFBoNVRh6OHGew1sizX5m13/Q5mnOgQ/d8O2Dm14wWGz7I8J3XrXTKJcNrcY7X/1/0P7r+38drzaG7J2po5Gtkn5lek6ZueM/PmjENw3M3z8i2NYZN5pyz/83uM97xowdj5zLeKRtOXnV48xzzP+sleH7duOyZb595bk1cY+ar7vofo9B4F57LeDechONdeG7jPeod554481D/a+Od41q30YzvEx/ItW4w92vdPHSAHc5ZZs5r3Qvvf4j3Wsez5mi+OXa6v2vdXp9eZZ/h40+c+7Vuo+Gxj7nXtW7UYDBh3VnXuuEL35QxgwOHH6wy/GDqmMGRww9WnfFggcEZww+e9Zrdd9l+eMMGs+ZkpeHjThw3NMP9zDWuXW76J6ZPX29kLBPH3XusI+fH+Nk/zyeNmzmZs14767jDu8467jWPmfnclJHjTnoQx531WhrvTYvNfG7qyHEnz3HcMXM57qzX3mc9LD9094Xrfq43U+a43oz8GWfWj7vX17wzvxY5ezBY5CTynWPff3vNpPU7/1zGO2nyqusOj2+O9Xv36Ujr99ypFw9/ViwyGAyWGAzGbTBr7A+yofsb7+i5j3cyjHf03MZ74dd33fh/YbyD2cZ7r/Ns681mnisbjJxnUx/E+TvrtXNex8bMeHbmZX+DB3IdG3+f69h75hk1x2TP1v39zrY97D/z/lL3/J576TFHzJr7MXMc99/9zjbbexmC69jYOf48P2qDKwZDNOf7HLXOeUOfnPucjxnc+88Ws+Z81mvnNudTH8icP37ucz5qjom5vzlf/ikzdxkzlznf9MOP+9CsOZ/3Qc751Ll/dtx3zicOxtCcr3T7zHmb2/X0/uZ81mtnzfnwW1x73OjB+sOfWSNzPuWBzPlS/zvn+YKw/8z7O9y96dTDjn/JrDmfc47/3ZxPebBzPv7u83zCjOeePGow77yDvbbdc889Vp75fdbDVWZ+52vRrZfOnOe5fZben9Gs185tXaz3QIzGPiCjoX9ntPTo+zO6Z2l9bfc9Hv0/vRat92CNBnwtuviImfM2t9+L7m/OZ72WPgeXnO31c/45dLONZ/zevfAcn4OzXoKfg6eevNH+sw458rI75xjmrM/VO2bbPs9s22+fbfuY2Y4z+/7zzrb91tm2D7+FeWfbfxbr+OE/845sn3bP7uOGf3kaP7L9ttm2T7zntRPWm237pNm2T5lt++R7To0JU2fbPnW2/TcYPMhm/Z30znP+ZUg90Pr7X3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e9uhv/t9/7/V5Sn1r+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7q4bTjlt5BwYNRhMG8y8PzRyO9hnaNPrnz98OxgMxqxx9PRNH+rxPsQNnX7p1GljL97khsO2W/zIlY+/5aBHwOr5738H9Z80w3/nocFgZH2P3XkwGGwyabMtlh8MBptOP3qNUYO7n1tq+Ll1xo0aDA4cutcB5rt7n6F9hvfZesrmkweD+Uf2GH+fH3qfdXSvHSdMHLmdNHI7eeb1afzgnvN13OCEE0cNRs/Yfk8LLbDg0CKDwSojD0eOM1hj5s0iF8zab/oczTnQoXu+HTDza0aLDf+I4Tt77TT1CcNzNcfrHzbNulbvPOrf7tr6d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bt7cP6dLY+0EnWXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yVzc08//uWtZa/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/+5/5tG/68OpB6SWv/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cXTecctrIOTBqMJg2mHl/aJ+R28HQsSc8beQUGbP3RYcf8lCP9yFu6PRLp04be/EmNxy23eJHrnz8LQc9AlbPf/87qP+kGf47Dw0GI+t77M6DwWCTSZttsfxgMDjk8Iv2HjW4+7mlhp9bZ9yoweDAoXsdYL679xnaZ3ifradsPnkwmH9kj/H3+aH3WUf32nHCxJHbSSO3k2den8YP7jlfxw1OOHHUYPSM7fe00AILDi0yGKwy8nDkOIM1Zt4scsGs/abP0ZwDHbrn2wEzv2a02PCPGL6z38KXHjs8V3O8/mHTrGv1zqP+7a6tf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hd31w2nnDZyDowaDKYNZt4fNXI7tM/VV71ri+Hb4ceLb7D/pQ/1eB/ihk6/dOq0sRdvcsNh2y1+5MrH33LQI2D1/Pe/g/pPGvaf/6jxg8FuWz7UQ6mHoNa/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i7vrhlNOG7k76p6to/bpvMCGTr906rSxF29yw2HbLX7kysffctBDPaD/tPvxf0/+mMV/3/wxi/9788cs/u/LH7P475c/ZvF/f/6YxX///DGL/wfyxyz+H8wfs/gfkD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjF/8D8MYv/QfljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv+D88cs/p/OH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOJ/SP6Yxf+r+WMW/0Pzxyz+X8sfs/gflj9m8T88f8zif0T+mMX/yPwxi//X88cs/kflj1n8v5E/ZvH/Zv6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/L+VP2bx/3b+mMX/+Pwxi/8J+WMW/xPzxyz+38kfs/h/N3/M4n9S/pjF/+T8MYv/KfljFv/v5Y9Z/L+fP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8f9Z/pjF/8z8MYv/WfljFv+f549Z/M/OH7P4/yJ/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/Zf6Yxf9X+WMW/1/nj1n8f5M/ZvG/OH/M4n9J/pjF/7f5Yxb/3+WPWfwvzR+z+P8+f8zif1n+mMX/8vwxi/8V+WMW/z/kj1n8r8wfs/hflT9m8b86f8zi/8f8MYv/n/LHLP5/zh+z+F+TP2bx/0v+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfz/mj9m8b8xf8zif1P+mMX/b/ljFv+b88cs/n/PH7P4/yN/zOL/z/wxi/+/8scs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMV/Wv6Yxf/O/DGL/135Yxb/6fljEv95BvljFv+h/DGL/6j8MYv/PPljFv/R+WMW/zH5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8x+aPWfwXzx+z+I/LH7P4L5E/ZvFfMn/M4v+o/DGL/6Pzxyz+j8kfs/gvlT9m8X9s/pjFf+n8MYv/4/LHLP6Pzx+z+C+TP2bxf0L+mMX/ifljFv/x+WMW/yflj1n8n5z/fRo9cmvwf0r+mGX9T8gfs/gvmz9m8X9q/pjFf7n8MYv/8vljFv+n5Y9Z/J+eP2bxf0b+mMX/mfljFv8V8scs/s/KH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/s/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/c/LHLP5r549Z/NfJH7P4Pzd/zOL/vPwxi//z88cs/hPzxyz+k/LHLP6T88cs/uvmj1n818sfs/ivnz9m8Z+SP2bxn6ryn+cB72nx30Dl/8Cz+G+YP2bxf0H+mMX/hfljFv+N8scs/hvnj1n8N8kfs/i/KH/M4r9p/pjF/8X5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvF/Sf6YxX+r/DGL/9b5Yxb/l+aPWfxflj9m8X95/pjF/xX5Yxb/V+aPWfxflT9m8X91/pjFf5v8MYv/tvljFv/t8scs/q/JH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/a/PHLP47549Z/F+XP2bxf33+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfzfkD9m8X9j/pjFf4/8MYv/m/LHLP575o9Z/N+cP2bxf0v+mMX/rfljFv+98scs/nvnj1n835Y/ZvF/e/6Yxf8d+WMW/3fmj1n835U/ZvF/d/6YxX+f/DGL/3vyxyz+++aPWfzfmz9m8X9f/pjFf7/8MYv/+/PHLP77549Z/D+QP2bx/2D+mMX/gPwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi//H8scs/gfmj1n8D8ofs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/gfnD9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/Q/LHLP5fzR+z+B+aP2bx/1r+mMX/sNn9913gIRjYwzOL/+Gtf8zif0T+mMX/yPwxi//X88cs/kflP9z0+ebYYPH/Rv6Yxf+b+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/2/ljFv/j88cs/ifkj1n8T8wfs/h/J3/M4v/d/DGL/0n5Yxb/k/PHLP6n5I9Z/L+XP2bx/37+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/2f5Yxb/M/PHLP5n5Y9Z/H+eP2bxPzt/zOL/i/wxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf+X+WMW/1/lj1n8f50/ZvH/Tf6Yxf/i/DGL/yX5Yxb/3+aPWfx/lz9m8b80f8zi//v8MYv/ZfljFv/L88cs/lfkj1n8/5A/ZvG/Mn/M4n9V/pjF/+r8MYv/H/PHLP5/yh+z+P85f8zif03+mMX/L/ljFv9r88cs/tflj1n8r88fs/jfkD9m8f9r/pjF/8b8MYv/TfljFv+/5Y9Z/G/OH7P4/z1/zOL/j/wxi/8/88cs/v/KH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv9p+WMW/zvzxyz+d+WPWfyn549J/EcP8scs/kP5Yxb/UfljFv958scs/qPzxyz+Y/LHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/iPzR+z+C+eP2bxH5c/ZvFfIn/M4r9k/pjF/1H5Yxb/R+ePWfwfkz9m8V8qf8zi/9j8MYv/0vljFv/H5Y9Z/B+fP2bxXyZ/zOL/hPwxi/8T88cs/uPzxyz+T8ofe4T7rzFyd/ST88ce4f6zGv2U/DGL/4T8MYv/svljFv+n5o9Z/JfLH7P4L58/ZvF/Wv6Yxf/p+WMW/2fkj1n8n5k/ZvFfIX/M4v+s/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/s/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4Pyd/zOK/dv6YxX+d/DGL/3Pzxyz+z8sfs/g/P3/M4j8xf8ziPyl/zOI/OX/M4r9u/pjFf738MYv/+vljFv8p+WMW/6n5Yxb/DfLHLP4b5o9Z/F+QP2bxf2H+mMV/o/wxi//G+WMW/03yxyz+L8ofs/hvmj9m8X/x4Pz8IYv/Zq1/zOK/ef6YxX+L/DGL/5b5Yxb/l+SPWfy3yh+z+G+dP2bxf2n+mMX/ZfljFv+X549Z/F+RP2bxf2X+mMX/VfljFv9X549Z/LfJH7P4b5s/ZvHfLn/M4v+a/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P4vzZ/zOK/c/6Yxf91+WMW/9fnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMX/DfljFv835o9Z/PfIH7P4vyl/7JHqf8wc/nvmjz1S/Qdz+L85f8zi/5b8MYv/W/PHLP575Y9Z/PfOH7P4vy1/zOL/9vwxi/878scs/u/MH7P4vyt/zOL/7vwxi/8++WMW//fkj1n8980fs/i/N3/M4v++/DGL/375Yxb/9+ePWfz3zx+z+H8gf8zi/8H8MYv/AfljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/A/MH7P4H5Q/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvE/OH/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+h+SPWfy/mj9m8T80f8zi/7X8MYv/YfljFv/D88cs/kfkj1n8j8wfs/h/PX/M4n9U/pjF/xv5Yxb/b+aPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf9b+WMW/2/nj1n8j88fs/ifkD9m8T8xf8zi/538MYv/d/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/Xv6Yxf/7+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv+f5Y9Z/M/MH7P4n5U/ZvH/ef6Yxf/s/KFbR24f+f6/yB+zrP9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi/8v88cs/r/KH7P4/zp/zOL/m/wxi//F+WMW/0vyxyz+v80fs/j/Ln/M4n9p/sNNn2eODRb/3+ePWfwvyx+z+F+eP2bxvyJ/zOL/h/wxi/+V+WMW/6vyxyz+V+ePWfz/mD9m8f9T/pjF/8/5Yxb/a/LHLP5/yR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/1/zxyz+N+aPWfxvyh+z+P8tf8zif3P+mMX/7/ljFv9/5I9Z/P+ZP2bx/1f+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+E/LH7P435k/ZvG/K3/M4j89f0ziP2aQP2bxH8ofs/iPyh+z+M+TP2bxH50/ZvEfkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX9s/pjFf/H8MYv/uPwxi/8S+WOPYP99Zts6Zsn8sUew/73W/6Pyxyz+j84fs/g/Jn/M4r9U/pjF/7H5Yxb/pfPHLP6Pyx+z+D8+f8ziv0z+mMX/CfljFv8n5o9Z/Mfnj1n8n5Q/ZvF/cv6Yxf8p+WMW/wn5Yxb/ZfPHLP5PzR+z+C+XP2bxXz5/zOL/tPwxi//T88cs/s/IH7P4PzN/zOK/Qv6Yxf9Z+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/Z+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxf07+mMV/7fwxi/86+WMW/+fmj1n8n5c/ZvF/fv6YxX9i/pjFf1L+mMV/cv6YxX/d/DGL/3r5Yxb/9fPHLP5T8scs/lPzxyz+G+SPWfw3zB+z+L8gf8zi/8L8MYv/RvljFv+N88cs/pvkj1n8X5Q/ZvHfNH/M4v/i/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4vyR/zOK/Vf6YxX/r/DGL/0vzxyz+L8sfs/i/PH/M4v+K/DGL/yvzxyz+r8ofs/i/On/M4r9N/pjFf9v8MYv/dvljFv/X5I9Z/LfPH7P475A/ZvHfMX/M4r9T/pjF/7X5Yxb/nfPHLP6vyx+z+L8+f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+b8gfs/i/MX/M4r9H/pjF/035Yxb/PfPHLP5vzn9mc0yCxf8t+WMW/7fmj1n898ofs/jvnT9m8X9b/pjF/+35Yxb/d+SPWfzfmT9m8X/XXP3n+78f18M0i/+7W/+YxX+f/DGL/3vyxyz+++aPWfzfmz9m8X9f/pjFf7/8MYv/+/PHLP77549Z/D+QP2bx/2D+mMX/gPwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi//H8scs/gfmj1n8D8ofs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/gfnD9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/Q/LHLP5fzR+z+B+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfy/nj9m8T8qf8zi/438MYv/N/PHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4v+t/DGL/7fzxyz+x+ePWfxPyB+z+J+YP2bx/07+mMX/u/ljFv+T8scs/ifnj1n8T8kfs/h/L3/M4v/9/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOL/0/wxi//P8scs/mfmj1n8z8ofs/j/PH/M4n92/pjF/xf5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/L/PHLP6/yh+z+P86f8zi/5v8MYv/xfljFv9L8scs/r/NH7P4/y5/zOJ/af6Yxf/3+WMW/8vyxyz+l+ePWfyvyB+z+P8hf8zif2X+mMX/qvwxi//V+WMW/z/mj1n8/5Q/ZvH/c/6Yxf+a/DGL/1/yxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOL/1/wxi/+N+WMW/5vyxyz+f8sfs/jfnD9m8f97/pjF/x/5Yxb/f+aPWfz/lT9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+0/LHLP535o9Z/O/KH7P4T88fk/jPO8gfs/gP5Y9Z/Eflj1n858kfs/iPzh+z+I/JH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziPzZ/zOK/eP6YxX9c/pjFf4n8MYv/kvljFv9H5Y9Z/B+dP2bxf0z+mMV/qfwxi/9j88cs/kvnj1n8H5c/ZvF/fP6YxX+Z/DGL/xPyxyz+T8wfs/iPzx+z+D8pf8zi/+T8MYv/U/LHLP4T8scs/svmj1n8n5o/ZvFfLn/M4r98/pjF/2n5Yxb/p+ePWfyfkT9m8X9m/pjFf4X8MYv/s/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/s/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4v+c/DGL/9r5Yxb/dfLHLP7PzR+z+D8vf8zi//z8MYv/xPwxi/+k/DGL/+T8MYv/uvljFv/18scs/uvnj1n8p+SPWfyn5o9Z/DfIH7P4b5g/ZvF/Qf6Yxf+F+WMW/43yxyz+G+ePWfw3yR+z+L8of8ziv2n+mMX/xfljFv/N8scs/pvnj1n8t8gfs/hvmT9m8X9J/pjFf6v8MYv/1vljFv+X5o9Z/F+WP2bxf3n+mMX/FfljFv9X5o9Z/F+VP2bxf3X+mMV/m/wxi/+2+WMW/+3yxyz+r8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9r88cs/jvnj1n8X5c/ZvF/ff6YxX+X/DGL/675Yxb/3fLHLP67549Z/N+QP2bxf2P+mMV/j/wxi/+b8scs/nvmj1n835w/ZvF/S/6Yxf+t+WMW/73yxyz+e+ePWfzflj9m8X97/pjF/x35Yxb/d+aPWfzflT9m8X93/pjFf5/8MYv/e/LHLP775o9Z/N+bP2bxf1/+mMV/v/wxi//788cs/vvnj1n8P5A/ZvH/YP6Yxf+A/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+B+aPWfwPeoD+8/1fjethmsX/461/zOL/ifwxi/8n88cs/p/KH7P4H5w/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/0Pyxyz+X80fs/gfmj9m8f9a/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8v54/ZvE/Kn/M4v+N/DGL/zfzxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi/+388cs/sfnj1n8T8gfs/ifmD9m8f9O/pjF/7v5Yxb/k/LHLP4n549Z/E/JH7P4fy9/zOL//fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv/z/LHLP5n5o9Z/M/KH7P4/zx/bDb/+R/J/mfnj1nW/y/yxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/X+aPWfx/lT9m8f91/pjF/zf5Yxb/i/PHLP6X5I9Z/H+bP2bx/13+mMX/0vwxi//v88cs/pflj1n8L88fs/hfkT9m8f9D/pjF/8r8MYv/VfljFv+r88cs/n9U+Y95wHta/P+k8n/gWfz/nD9m8b8mf8zi/5f8MYv/tfljFv/r8scs/tfnj1n8b8gfs/j/NX/M4n9j/pjF/6b8MYv/3/LHLP43549Z/P+eP2bx/0f+mMX/n/ljFv9/5Y9Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/tPwxi/+d+WMW/7vyxyz+0/PHJP7zDfLHLP5D+WMW/1H5Yxb/efLHLP6j88cs/mPyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4j80fs/gvnj9m8R+XP2bxXyJ/zOK/ZP6Yxf9R+WMW/0fnj1n8H5M/ZvFfKn/M4v/Y/DGL/9L5Yxb/x+WPWfwfnz9m8V8mf8zi/4T8MYv/E/PHLP7j88cs/k/KH7P4Pzl/zOL/lPwxi/+E/DGL/7L5Yxb/p+aPWfyXyx+z+C+fP2bxf1r+mMX/6fljFv9n5I9Z/J+ZP6bwnzCYb4X8MYX/YDDfs/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/s/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4v+c/DGL/9r5Yxb/dfLHLP7PzR+z+D8vf8zi//z8MYv/xPwxi/+k/DGL/+T8MYv/uvljFv/18scs/uvnj1n8p+SPWfyn5o9Z/DfIH7P4b5g/ZvF/Qf6Yxf+F+WMW/43yxyz+G+ePWfw3yR+z+L8of8ziv2n+mMX/xfljFv/N8scs/pvnj1n8t8gfs/hvmT9m8X9J/pjFf6v8MYv/1vljFv+X5o9Z/F+WP2bxf3n+mMX/FfljFv9X5o9Z/F+VP2bxf3X+mMV/m/wxi/+2+WMW/+3yxyz+r8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9r88cs/jvnj1n8X5c/ZvF/ff6YxX+X/DGL/675Yxb/3fLHLP67549Z/N+QP2bxf2P+mMV/j/wxi/+b8scs/nvmj1n835w/ZvF/S/6Yxf+t+WMW/73yxyz+e+ePWfzflj9m8X97/pjF/x35Yxb/d+aPWfzflT9m8X93/pjFf5/8MYv/e/LHLP775o9Z/N+bP2bxf1/+mMV/v/wxi//788cs/vvnj1n8P5A/ZvH/YP6Yxf+A/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+B+aPWfwPyh+z+H88f8zi/4n8MYv/J/PHLP6fyh+z+B+cP2bx/3T+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv9D8scs/l/NH7P4H5o/ZvH/Wv6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/L+eP2bxPyp/zOL/jfwxi/8388cs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/t/PHLP7H549Z/E/IH7P4n5g/ZvH/Tv6Yxf+7+WMW/5Pyxyz+J+ePWfxPyR+z+H8vf8zi//38MYv/qfljFv/T8scs/qfnj1n8z8gfs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4v/T/DGL/8/yxyz+Z+aPWfzPyh+z+P88f8zif3b+mMX/F/ljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi/8v88cs/r/KH7P4/zp/zOL/m/wxi//F+WMW/0vyxyz+v80fs/j/Ln/M4n9p/pjF//f5Yxb/y/LHLP6X549Z/K/IH7P4/yF/zOJ/Zf6Yxf+q/DGL/9X5Yxb/P+aPWfz/lD9m8f9z/pjF/5r8MYv/X/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4v/X/DGL/435Yxb/m/LHLP5/yx+z+N+cP2bx/3v+mMX/H/ljFv9/5o9Z/P+VP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP7T8scs/nfmj1n878ofs/hPzx+T+M8/yB+z+A/lj1n8R+WPWfznyR+z+I/OH7P4j8kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOI/Nn/M4r94/pjFf1z+mMV/ifwxi/+S+WMW/0flj1n8H50/ZvF/TP6YxX+p/DGL/2Pzxyz+S+ePWfwflz9m8X98/pjFf5n8MYv/E/LHLP5PzB+z+I/PH7P4Pyl/zOL/5Pwxi/9T8scs/hPyxyz+y+aPWfyfmj9m8V8uf8ziv3z+mMX/afljFv+n549Z/J+RP2bxf2b+mMV/hfwxi/+z8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/+z88cs/qvnj1n818gfs/ivmT9m8V8rf8zi/5z8MYv/2vljFv918scs/s/NH7P4Py9/zOL//Pwxi//E/DGL/6T8MYv/5Pwxi/+6+WMW//Xyxyz+6+ePWfyn5I9Z/Kfmj1n8N8gfs/hvmD9m8X9B/pjF/4X5Yxb/jfLHLP4b549Z/DfJH7P4vyh/zOK/af6Yxf/F+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bxf0n+mMV/q/wxi//W+WMW/5fmj1n8X5Y/ZvF/ef6Yxf8V+WMW/1fmj1n8X5U/ZvF/df6YxX+b/DGL/7b5Yxb/7fLHLP6vyR+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/2vzxyz+O+ePWfxflz9m8X99/pjFf5f8MYv/rvljFv/d8scs/rvnj1n835A/ZvF/Y/6YxX+P/DGL/5vyxyz+e+aPWfzfnD9m8X9L/pjF/635Yxb/vfLHLP57549Z/N+WP2bxf3v+mMX/HfljFv935o9Z/N+VP2bxf3f+mMV/H4//g3qbFv/3ePwfVBb/ffPHLP7vzR+z+L8vf8ziv1/+mMX//fljFv/988cs/h/IH7P4fzB/zOJ/QP6Yxf9D+WMW/w+L/cfM5TmL/0fE/nPL4v/R/DGL/8fyxyz+B+aPWfwPyh+z+H88f8zi/4n8MYv/J/PHLP6fyh+z+B+cP2bx/3T+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L80uOihGtHDOov/l1v/mMX/K/ljFv9D8scs/l/NH7P4H5o/ZvH/Wv6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/L+eP2bxPyp/zOL/jfwxi/8388cs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/t/PHLP7H549Z/E/IH7P4n5g/ZvH/Tv6Yxf+7+WMW/5Pyxyz+J+ePWfxPyR+z+H8vf8zi//38MYv/qfljFv/T8scs/qfnj1n8z8gfs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4v/T/DGL/8/yxyz+Z+aPWfzPegD+Fy/6fzmwh2cW/5+3/jGL/9n5Yxb/X+SPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP6/zB+z+P8qf8zi/+v8MYv/b/LHLP4X549Z/C/JH7P4/zZ/zOL/u/wxi/+l+WMW/9/nj1n8L8sfs/hfnj9m8b8if8zi/4f8MYv/lfljFv+r8scs/lfnj1n8/5g/ZvH/U/6Yxf/P+WMW/2vyxyz+f8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/9f88cs/jfmj1n8b8ofs/j/LX/M4n9z/pjF/+/5Yxb/f+SPWfz/mT9m8f9X/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/hPyx+z+N+ZP2bxvyt/zOI/PX9M4r/AIH/M4j+UP2bxH5U/ZvGfJ3/M4j86f8ziPyZ/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/2Pwxi//i+WMW/3H5Yxb/JfLHLP5L5o9Z/B+VP2bxf3T+mMX/MfljFv+l8scs/o/NH7P4L50/ZvF/XP6Yxf/x+WMW/2Xyxyz+T8gfs/g/MX/M4j8+f8zi/6T8MYv/k/PHLP5PyR+z+E/IH7P4L5s/ZvF/av6YxX+5/DGL//L5Yxb/p+WPWfyfnj9m8X9G/pjF/5n5Yxb/FfLHLP7Pyh+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP7Pzh+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/3Pyxyz+a+ePWfzXyR+z+D83f8zi/7z8MYv/8/PHLP4T88cs/pPyxyz+k/PHLP7r5o9Z/NfLH7P4r58/ZvGfkj9m8Z+aP2bx3yB/zOK/Yf6Yxf8F+WMW/xfmj1n8N8ofs/hvnD9m8d8kf8zi/6L8MYv/pvljFv8X549Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/yX5Yxb/rfLHLP5b549Z/F+aP2bxf1n+mMX/5fljFv9XDAaDax+qMT2Ms/i/svWPWfxflT9m8X91/pjFf5v8MYv/tvljFv/t8scs/q/JH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/a/PHLP47549Z/F+XP2bxf33+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfzfkD9m8X9j/pjFf4/8MYv/m/LHLP575o9Z/N+cP2bxf0v+mMX/rfljFv+98scs/nvnj1n835Y/ZvF/e/6Yxf8d+WMW/3fmj1n835U/ZvF/d/6YxX+f/DGL/3vyxyz+++aPWfzfmz9m8X9f/pjFf7/8MYv/+/PHLP77549Z/D+QP2bx/2D+mMX/gPwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi//H8scs/gfmj1n8D8ofs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/gfnD9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/Q/LHLP5fzR+z+B+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfy/nj9m8T8qf8zi/438MYv/N/PHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4v+t/DGL/7fzxyz+x+ePWfxPyB+z+J+YP2bx/07+mMX/u/ljFv+T8scs/ifnj1n8T8kfs/h/L3/M4v/9/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOL/0/wxi//P8scs/mfmj1n8z8ofs/j/PH/M4n92/pjF/xf5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/L/PHLP6/yh+z+P86f8zi/5v8MYv/xfljFv9L8scs/r/NH7P4/y5/zOJ/af6Yxf/3+WP39h/zUA/nP+9+/C/LH7Os/8vzxyz+V+SPWfz/kD9m8b8yf8zif1X+mMX/6vwxi/8f88cs/n/KH7P4/zl/zOJ/Tf6Yxf8v+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bx/2v+mMX/xvwxi/9N+WMW/7/lj1n8b84fs/j/PX/M4v+P/DGL/z/zxyz+/8ofs/jfkj9m8b81f8zif1v+mMX/9gfmf+b/2bgepln872j9Yxb/afljFv8788cs/nflj1n8p+ePSfwXHOSPWfyH8scs/qPyxyz+8+SPWfxH549Z/Mfkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfyxR77//Hc/lf99e+T7z2jBhfPHLP6L5I9Z/BfNH7P4L5Y/ZvEfmz9m8V88f8ziPy5/zOK/RP6YxX/J/DGL/6Pyxyz+j84fs/g/Jn/M4r9U/pjF/7H5Yxb/pfPHLP6Pyx+z+D8+f8ziv0z+mMX/CfljFv8n5o9Z/Mfnj1n8n5Q/ZvF/cv6Yxf8p+WMW/wn5Yxb/ZfPHLP5PzR+z+C+XP2bxXz5/zOL/tPwxi//T88cs/s/IH7P4PzN/zOK/Qv6Yxf9Z+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/Z+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxf07+mMV/7fwxi/86+WMW/+fmj1n8n5c/ZvF/fv6YxX9i/pjFf1L+mMV/cv6YxX/d/DGL/3r5Yxb/9fPHLP5T8scs/lPzxyz+G+SPWfw3zB+z+L8gf8zi/8L8MYv/RvljFv+N88cs/pvkj1n8X5Q/ZvHfNH/M4v/i/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4vyR/zOK/Vf6YxX/r/DGL/0vzxyz+L8sfs/i/PH/M4v+K/DGL/yvzxyz+r8ofs/i/On/M4r9N/pjFf9v8MYv/dvljFv/X5I9Z/LfPH7P475A/ZvHfMX/M4r9T/pjF/7X5Yxb/nfPHLP6vyx+z+L8+f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+b8gfs/i/MX/M4r9H/pjF/035Yxb/PfPHLP5vzh+z+L8lf8zi/9b8MYv/XvljFv+988cs/m/LH7P4vz1/zOL/jvwxi/8788cs/u/KH7P4vzt/zOK/T/6Yxf89+WMW/33zxyz+780fs/i/L3/M4r9f/pjF//35Yxb//fPHLP4fyB+z+H8wf8zif0D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv8D88cs/gflj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8D84fs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/skei/+cjd2f2/kD/2SPSn9f/F/DGL/5fyxyz+X84fs/h/JX/M4n9I/pjF/6v5Yxb/Q/PHLP5fyx+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/9fzxyz+R+WPWfy/kT9m8f9m/pjF/+j8MYv/MfljFv9j88cs/sflj1n8v5U/ZvH/dv6Yxf/4/DGL/wn5Yxb/E/PHLP7fmd3/jIdgXA/TLP7fbf1jFv+T8scs/ifnj1n8T8kfs/h/L3/M4v/9/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOL/0/wxi//P8scs/mfmj1n8z8ofs/j/PH/M4n92/pjF/xf5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/L/PHLP6/yh+z+P86f8zi/5v8MYv/xfljFv9L8scs/r/NH7P4/y5/zOJ/af6Yxf/3+WMW/8vyxyz+l+ePWfyvyB+z+P8hf8zif2X+mMX/qvwxi//V+WMW/z/mj1n8/5Q/ZvH/c/6Yxf+a/DGL/1/yxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOL/1/wxi/+N+WMW/5vyxyz+f8sfs/jfnD9m8f97/pjF/x/5Yxb/f87hv/ur/38P7OGZxf9frX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8p+WPWfzvzB+z+N+VP2bxn54/JvFfaJA/ZvEfyh+z+I/KH7P4z5M/ZvEfnT9m8R+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf2z+mMV/8fwxi/+4/DGL/xL5Yxb/JfPHLP6Pyh+z+D86f8zi/5j8MYv/UvljFv/H5o9Z/JfOH7P4Py5/zOL/+Pwxi/8y+WMW/yfkj1n8n5g/ZvEfnz9m8X9S/pjF/8n5Yxb/p+SPWfwn5I9Z/JfNH7P4PzV/zOK/XP6YxX/5/DGL/9Pyxyz+T88fs/g/I3/M4v/M/DGL/wr5Yxb/Z+WPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/Z+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf85+WMW/7Xzxyz+6+SPWfyfmz9m8X9e/pjF//n5Yxb/ifljFv9J+WMW/8n5Yxb/dfPHLP7r5Y9Z/NfPH7P4T8kfs/hPzR+z+G+QP2bx3zB/zOL/gvwxi/8L88cs/hvlj1n8N84fs/hvkj9m8X9R/pjFf9P8MYv/i/PHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v+S/DGL/1b5Yxb/rfPHLP4vzR+z+L8sf8zi//L8MYv/K/LHLP6vzB+z+L8qf8zi/+r8MYv/NvljFv9t88cs/tvlj1n8X5M/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv/X5o9Z/HfOH7P4vy5/zOL/+vwxi/8u+WMW/13zxyz+u+WPWfx3zx+z+L8hf8zi/8b8MYv/HvljFv835Y9Z/PfMH7P4vzl/zOL/lvwxi/9b88cs/nvlj1n8984fs/i/LX/M4v/2/DGL/zvyxyz+78wfs/i/K3/M4v/u/DGL/z75Yxb/9+SPWfz3zR+z+L83f8zi/778MYv/fvljFv/3549Z/PfPH7P4fyB/zOL/wfwxi/8B+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8D8wfs/gflD9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8T84f8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP6H5I9Z/L+aP2bxPzR/zOL/tfwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+H89f8zif1T+mMX/G/ljFv9v5o9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF/1v5Yxb/b+ePWfyPzx+z+J+QP2bxPzF/zOL/nfwxi/932X++/2/jephm8T+p9Y9Z/E/OH7P4n5I/ZvH/Xv6Yxf/7+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv+f5Y9Z/M/MH7P4n5U/ZvH/ef6Yxf/s/DGL/y/yxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/X+aPWfx/lT9m8f91/pjF/zf5Yxb/i/PHLP6X5I9Z/H+bP2bx/13+mMX/0vwxi//v88cs/pflj1n8L88fs/hfkT9m8f9D/pjF/8r8MYv/VfljFv+r88cs/n/MH7P4/yl/zOL/5/wxi/81+WMW/7/kj1n8r80fs/hflz9m8b8+f8zif0P+mMX/r/ljFv8b88cs/jflj1n8/5Y/ZvG/OX/M4v/3/DGL/z/yxyz+/8wfs/j/K3/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8p+WPWfzvzB+z+N+VP2bxn54/JvFfeJA/ZvEfyh+z+I/KH7P4z5M/ZvEfnT9m8R+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf2z+mMV/8fwxi/+4/DGL/xL5Yxb/JfPHLP6Pyh+z+D86f8zi/5j8MYv/UvljFv/H5o9Z/JfOH7P4Py5/zOL/+Pwxi/8y+WMW/yfkj1n8n5g/ZvEfnz9m8X9S/pjF/8n5Yxb/p+SPWfwn5I9Z/JfNH7P4PzV/zOK/XP6YxX/5/DGL/9Pyxyz+T88fs/g/I3/M4v/M/DGL/wr5Yxb/Z+WPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/Z+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf85+WMW/7Xzxyz+6+SPWfyfmz9m8X9e/pjF//n5Yxb/ifljFv9J+WMW/8n5Yxb/dfPHLP7r5Y9Z/NfPH7P4T8kfs/hPzR+z+G+QP2bx3zB/zOL/gvwxi/8L88cs/hvlj1n8N84fs/hvkj9m8X9R/pjFf9P8MYv/i/PHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v+S/DGL/1b5Yxb/rfPHLP4vzR+z+L8sf8zi//L8MYv/K/LHLP6vzB+z+L8qf8zi/+r8MYv/NvljFv9t88cs/tvlj1n8X5M/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv/X5o9Z/HfOH7P4vy5/zOL/+vwxi/8u+WMW/13zxyz+u+WPWfx3zx+723/HYx/R/m/IH7Os/zfmj1n898gfs/i/KX/M4r9n/pjF/835Yxb/t+SPWfzfmj9m8d8rf8ziv3f+mMX/bfljFv+3549Z/N+RP2bxf2f+mMX/XfljFv93549Z/PfJH7P4vyd/zOK/b/6Yxf+9+WMW//flj1n898sfs/i/P3/M4r9//pjF/wP5Yxb/D+aPWfwPyB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zif2D+mMX/oPwxi//H88cs/p/IH7P4fzJ/zOL/qfwxi//B+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvE/JH/M4v/V/DGL/6H5Yxb/r+WPWfwPyx+z+B+u9J/33+5h8T9C6f/vs/gfmT9m8f96/pjF/6j8MYv/N/LHLP7fzB+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL/7fyxyz+384fs/gfnz9m8T8hf8zif2L+mMX/O/ljFv/v5o9Z/E/KH7P4n5w/ZvE/JX/M4v+9/DGL//fzxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/j/LH7P4n5k/ZvE/K3/M4v/z/DGL/9n5Yxb/X+SPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP6/zB+z+P8qf8zi/+v8MYv/b/LHLP4X549Z/C/JH7P4/zZ/zOL/u/wxi/+l+WMW/9/nj1n8L8sfs/hfnj9m8b8if8zi/4f8MYv/lfljFv+r8scs/lfnj1n8/5g/ZvH/U/6Yxf/P+WMW/2vyxyz+f8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/9f88cs/jfmj1n8b8ofs/j/LX/M4n9z/pjF/+/5Yxb/f+SPWfz/mT9m8f9X/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/hPyx+z+N+ZP2bxvyt/zOI/PX9M4r/IYC7+7/7/MKyHaxb/odY/ZvEflT9m8Z8nf8ziPzp/zOI/Jn/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//Y/DGL/+L5Yxb/cfljFv8l8scs/kvmj1n8H5U/ZvF/dP6Yxf8x+WMW/6Xyxyz+j80fs/gvnT9m8X9c/pjF//H5Yxb/ZfLHLP5PyB+z+D8xf8ziPz5/zOL/pPwxi/+T88cs/k/JH7P4T8gfs/gvmz9m8X9q/pjFf7n8MYv/8vljFv+n5Y9Z/J+eP2bxf0b+mMX/mfljFv8V8scs/s/KH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/s/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/c/LHLP5r549Z/NfJH7P4Pzd/zOL/vPwxi//z88cs/hPzxyz+k/LHLP6T88cs/uvmj1n818sfs/ivnz9m8Z+SP2bxn5o/ZvHfIH/M4r9h/pjF/wX5Yxb/F+aPWfw3yh+z+G+cP2bx3yR/zOL/ovwxi/+m+WMW/xfnj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/JfljFv+t8scs/lvnj1n8X5o/ZvF/Wf6Yxf/l+WMW/1fkj1n8X5k/ZvF/Vf6Yxf/V+WMW/23yxyz+2+aPWfy3yx+z+L8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+r80fs/jvnD9m8X9d/pjF//X5Yxb/XfLHLP675o9Z/HfLH7P47y71H/1vnrf4v0Hq/++y+L8xf8ziv0f+mMX/TfljFv8988cs/m/OH7P4vyV/zOL/1vwxi/9e+WMW/73zxyz+b8sfs/i/PX/M4v+O/DGL/zvzxyz+78ofs/i/O3/M4r9P/pjF/z35Yxb/ffPHLP7vzR+z+L8vf8ziv1/+mMX//fljFv/988cs/h/IH7P4fzB/zOJ/QP6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/wPzxyz+B+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwPzh+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/IfljFv+v5o9Z/A/NH7P4fy1/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5fzx+z+B+VP2bx/0b+mMX/m/ljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF/9v5Yxb/4/PHLP4n5I9Z/E/MH7P4fyd/zOL/3fwxi/9J+WMW/5Pzxyz+p+SPWfy/lz9m8f9+/pjF/9T8MYv/afljFv/T88cs/mfkj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvH/af6Yxf9n+WMW/zPzxyz+Z+WPWfx/nj9m8T87f8zi/4v8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/l/ljFv9f5Y9Z/H+dP2bx/03+mMX/4vwxi/8l+WMW/9/mj1n8f5c/ZvG/NH/M4v/7/DGL/2X5Yxb/y/PHLP5X5I9Z/P+QP2bxvzJ/zOJ/Vf6Yxf/q/DGL/x/zxyz+f8ofs/j/OX/M4n9N/pjF/y/5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvH/a/6Yxf/G/DGL/035Yxb/v+WPWfxvzh+z+P89f8zi/4/8MYv/P/PHLP7/yh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/afljFv8788cs/nflj1n8p+ePSfwXHeSPWfyH8scs/qPyxyz+8+SPWfxH549Z/Mfkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxH5s/ZvFfPH/M4j8uf8ziv0T+mMV/yfwxi/+j8scs/o/OH7P4PyZ/zOK/VP6Yxf+x+WMW/6Xzxyz+j8sfs/g/Pn/M4r9M/pjF/wn5Yxb/J+aPWfzH549Z/J+UP2bxf3L+mMX/KfljFv8J+WMW/2Xzxyz+T80fs/gvlz9m8V8+f8zi/7T8MYv/0/PHLP7PyB+z+D8zf8ziv0L+mMX/WfljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/2fljFv/V88cs/mvkj1n818wfs/ivlT9m8X9O/pjFf+38MYv/OvljFv/n5o9Z/J+XP2bxf37+mMV/Yv6YxX9S/pjFf3L+mMV/3fwxi/96Iv/5H8S+Fv/1Rf4PJov/lPwxi//U/DGL/wb5Yxb/DfPHLP4vyB+z+L8wf8ziv1H+mMV/4/wxi/8m+WMW/xflj1n8N80fs/i/OH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/i/JH7P4b5U/ZvHfOn/M4v/S/DGL/8vyxyz+L88fs/i/In/M4v/K/DGL/6vyxyz+r84fs/hvkz9m8d82f8ziv13+mMX/NfljFv/t88cs/jvkj1n8d8wfs/jvlD9m8X9t/pjFf+f8MYv/6/LHLP6vzx+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/xvyxyz+b8wfs/jvkT9m8X9T/pjFf8/8MYv/m/PHLP5vyR+z+L81f8ziv1f+mMV/7/wxi//b8scs/m/PH7P4vyN/zOL/zvwxi/+78scs/u/OH7P475M/ZvF/T/6YxX/f/DGL/3vzxyz+78sfs/jvlz9m8X9//pjFf//8MYv/B/LHLP4fzB+z+B+QP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMX/wPwxi/9B+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW/4Pzxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4n9I/pjF/6v5Yxb/Q/PHLP5fyx+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/9fzxyz+R+WPWfy/kT9m8f9m/pjF/+j8MYv/MfljFv9jdf4P7N1a/I/T+T+wLP7fyh+z+H87f8zif3z+mMX/hPwxi/+J+WMW/+/kj1n8v5s/ZvE/KX/M4n9y/pjF/5T8MYv/9/LHLP7fzx+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/j/LH/M4n9m/pjF/6z8MYv/z/PHLP5n549Z/H+RP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5j+jMXM8tvhflD9m8f9l/pjF/1f5Yxb/X+ePWfx/kz9m8b84f8zif0n+mMX/t/ljFv/f5Y9Z/C/NH7P4/z5/zOJ/Wf6Yxf/y/DGL/xX5Yxb/P+SPWfyvzB+z+F+VP2bxvzp/zOL/x/wxi/+f8scs/n/OH7P4X5M/ZvH/S/6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/P+aP2bxvzF/zOJ/U/6Yxf9v+WMW/5vzxyz+f88fs/j/I3/M4v/P/DGL/7/yxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6YxX9a/pjF/878MYv/XfljFv/p+WMS/8UG+WMW/6H8MYv/qPwxi/88+WMW/9H536t5Rm4t/mPyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4j80fs/gvnj9m8R+XP2bxXyJ/zOK/ZP6Yxf9R+WMW/0fnj1n8H5M/ZvFfKn/M4v/Y/DGL/9L5Yxb/x+WPWfwfnz9m8V8mf8zi/4T8MYv/E/PHLP7j88cs/k/KH7P4Pzl/zOL/lPwxi/+E/DGL/7L5Yxb/p+aPWfyXyx+z+C+fP2bxf1r+mMX/6fljFv9n5I9Z/J+ZP2bxXyF/zOL/rPwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/7Pwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+D8nf8ziv3b+mMV/nfwxi/9z88cs/s/LH7P4Pz9/zOI/MX/M4j8pf8ziPzl/zOK/bv6YxX+9/DGL//r5Yxb/KfljFv+p+WMW/w3yxyz+G+aPWfxfkD9m8X9h/pjFf6P8MYv/xvljFv9N8scs/i/KH7P4b5o/ZvF/cf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/F+SP2bx3yp/zOK/df6Yxf+l+WMW/5flj1n8X54/ZvF/Rf6Yxf+V+WMW/1flj1n8X50/ZvHfJn/M4r9t/pjFf7v8MYv/a/LHLP7b549Z/HfIH7P475g/ZvHfKX/M4v/a/DGL/875Yxb/1+WPWfxfnz9m8d8lf8ziv2v+mMV/t/wxi//u+WMW///HHj20gWEgUBSdydgZ27brprZt27FR27Zt27Zt227TNv0D7/uadd8567u7g/2PWv4P8T9q+T/U/6jl/zD/o5b/w/2PWv6P8D9q+T/S/6jl/yj/o5b/o/2PWv6P8T9q+T/W/6jl/zj/o5b/4/2PWv5P8D9q+T/R/6jl/yT/o5b/m/oftfzfzP+o5f/m/kct/7fwP2r5v6X/Ucv/rfyPWv5v7X/U8n8b/6OW/9v6H7X8387/qOX/9v5HLf938D9q+b+j/1HL/538j1r+7+x/1PJ/F/+jlv+7+h+1/N/N/6jl/+7+Ry3/9/A/avm/p/9Ry/+9/I9a/u/tf9Tyfx//o5b/+/oftfzfz/+o5f/+/kct/w/wP2r5f6D/Ucv/g/yPWv4f7H/U8v8Q/6OW/4f6H7X8P8z/qOX/4f5HLf+P8D9q+X+k/1HL/6P8j1r+H+1/1PL/GP+jlv/H+h+1/D/O/6jl//H+Ry3/T/A/avl/ov9Ry/+T/I9a/p/sf9Ty/xT/o5b/p/oftfw/zf+o5f/p/kct/8/wP2r5f6b/Ucv/s/yPWv6f7X/U8v8c/6OW/+f6H7X8P8//qOX/+f5HLf8v8D9q+X+h/1HL/4v8j1r+X+x/1PL/Ev+jlv+X+h+1/L/M/6jl/+X+Ry3/r/A/avl/pf9Ry/+r/I9a/l/tf9Ty/xr/o5b/1/oftfy/zv+o5f/1/kct/2/wP2r5f6P/Ucv/m/yPWv7f7H/U8v8W/6OW/7f6H7X8v83/qOX/7f5HLf/v8D9q+X+n/1HL/7v8j1r+3+1/1PL/Hv+jlv/3+h+1/L/P/6jl//3+Ry3/H/A/avn/oP9Ry/+H/I9a/j/sf9Ty/xH/o5b/j/oftfx/zP+o5f/j/kct/5/wP2r5/6T/Ucv/p/yPWv4/7X/U8v8Z/6OW/8/6H7X8f87/qOX/8/5HLf9f8D9q+f+i/1HL/5f8j1r+v1z4f/KUT25a/r9S+H9qtPx/1f+o5f9r/kct/1/3P2r5/4b/Ucv/N/2PWv6/5X/U8v9t/6OW/+/4H7X8f9f/qOX/e/5HLf/f9z9q+T/Z/6jl/wf+Ry3/P/Q/avn/kf9Ry/8p/kcl/wd+xv+o5f9n/Y9a/g/wP2r5/zn/o5b/n/c/avn/Bf+jlv9f9D9q+f8l/6OW/1/2P2r5/xX/o5b/X/U/avn/Nf+jlv9f9z9q+f8N/6OW/9/0P2r5/y3/o5b/A/2PWv5/2/+o5f93/I9a/n/X/6jl//f8j1r+f9//qOX/D/yPWv7/0P+o5f+P/I9a/v/Y/6jl/0/8j1r+/9T/qOX/z/yPWv7/3P+o5f8v/I9a/v/S/6jl/6/8j1r+/9r/qOX/b/yPWv7/1v+o5f/v/I9a/v/e/6jl/x/8j1r+/9H/qOX/n/yPWv7/2f+o5f9f/I9a/v/V/6jl/9/8j1r+/93/qOX/P/yPWv7/0/+o5f+//I9a/v/b/6jl/3/8j1r+/9f/qOX///yPWv7/3/+o5f80/kct/6f1P2r5P53/Ucv/6f2PWv7P4H/U8n9G/6OW/zP5H7X8n9n/qOX/IP+jlv+z+B+1/J/V/6jl/2z+Ry3/Z/c/avk/h/9Ry/85/Y9a/s/lf9Tyf27/o5b/8/gftfyf1/+o5f98/kct/+f3P2r5v4D/Ucv/Bf2PWv4v5H/U8n9h/6OW/4v4H7X8X9T/qOX/Yv5HLf8X9z9q+b+E/1HL/yX9j1r+L+V/1PJ/af+jlv/L+B+1/F/W/6jl/3L+Ry3/l/c/avm/gv9Ry/8V/Y9a/q/kf9Tyf2X/o5b/q3T9HzRgKsOW/6t2/Z9qLf9X8z9q+b+6/1HL/zX8j1r+r+l/1PJ/Lf+jlv9r+x+1/F/H/6jl/7r+Ry3/1/M/avm/vv9Ry/8N/I9a/m/of9TyfyP/o5b/G/sftfzfxP+o5f9g/6OW/0P8j1r+D/U/avk/zP+o5f9w/6OW/yP8j1r+j/Q/avk/yv+o5f9o/6OW/2P8j1r+j/U/avk/zv+o5f94/6OW/xP8j1r+T/Q/avk/yf/oU/cfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Jh9u4+tqyzgOH66rduYmIy44DI02eRBIRFmu5eMPwibjG110I33McDRrd3YaLfZddgVcC9/TCKEF0kmWaJE2TKUMBMaiYFgBRENuqiJBl8AUYiicSIE3RIXa257W9pr29CnPs+ifD5/9N5z7n5nW5PvzllgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+76uoXHR1fNejU+IEHHz7S1PM699iqmw7+vuuCvtfyx8uHuOS4gQfd3d3dc5+ds7N8OKkoitLPtqt8PLlyXLr+rtovtfcehYVdLy49MfWX9UcPrj3t4ZrOY/dV95ytLm5cv7G56RPjiiJcVF20lw5qqooiLKku7i0d1JYOllYXD5cO5vQcnFJ8t3Rw3rotzY2lE8uiv2fw/6KuflcxflCxxaA/DQb2v6v2O3f0vY5wyb6rTSjK/V/e8cM3Kz7rM0z/fdcPiyr7H/VvEBjW6Pp/fmHf6wiX/I/7/5QnV7881GfD9993/fBJ/UM6Qzz/D2q08rm/4vl/5hCX7N9fWdVxotT/Jbc+M6t8asK7ef5/5/rhosr+xw16/i89xy/ue/6fVBTh4jF+O+A9pa5+99GR7v8j9z9hRsWmamD/p7duOVDq/7GlP3i8fKp6lP0vHuH+P25Zxa8VGJ26+q92V9z/B/c/qSiK4e//Hxvikv39v/X4bx8q9f/oH+8/Y8Bno+n/4sr+Z7e1bJ29bUfHuRtbGjY0bWjaXDNnwdz5tTXzz583u+eRoPfrGL8r8N4wtvt/MaViU1UUTf37qzsPPlXqf94DD8wtn5o8yv6XjHj/n+n+D0P6yLhi4sSivaGtrbWm92vfYW3v194fNkT/o/j7/5lnl39Ydfm1qiim9+/vPOOulaX+3z78zJ7yqYmj7H/piP0v7P95gQhjvP83VmwG9X/o8Is9z//L7zl0evnUaP/+v2zE/l9x/4exqKuv+B9+/stK/e8uLo3sNNT573+QTo7+H337+q64dfiU/iGdHP3/4QvHzolbh+X6h3Ry9D9h0/3Pxa3DJfqHdHL0v2LagpVx63Cp/iGdHP2ve+Wcv8atQ73+IZ0c/Z/9lT3tceuwQv+QTo7+H2yduz1uHVbqH9LJ0f/PT33w1bh1uEz/kE6O/o8fv/uGuHW4XP+QTo7+O/ee9aO4dbhC/5BOjv4vW78oxK3DlfqHdHL0P2P6nx+LW4er9A/p5Oh//l/+eWrcOlytf0gnR/+3f3Hl/rh1uEb/kE6O/sdf9/ILceuwSv+QTo7+l521fVHcOlyrf0gnR/+NP2vsjluH1fqHdHL0P/ubP9kYtw7X6R/SydH/kRWP7I1bh+v1D+nk6H9vTTE1bh1u0D+kk6P/b3z/tMNx6/Bp/UM6Ofr/3ZNPLIhbhzX6h3Ry9P/sh277Vtw63Kh/SCdH//esfeHMuHVo0D+kk6P/h/Y99+W4dVirf0gnR/+vv97yvrh1WKd/SCdH/1Mmn/Ja3Do06h/SydH/olu+1hq3Dk36h3Ry9N+yp/PHceuwXv+QTo7+P3pi+uq4ddigf0gnR/+r5u37YNw63KR/SCdH/x9YfsHuuHXYqH9IJ0f/F3Z9/MK4ddikf0gnR/9tT3/+63HrcLP+IZ0c/e+b9eqSuHVo1j+kk6P/l9Ys+2ncOrToH9LJ0f+bj1y7OW4dNusf0snR/xO/eOt43Dps0T+kk6P/95+/+O/vfjF5wPuwVf+QTo7+lyx9Y13cOnxG/5BOjv43df7rpbh1aNU/pJOj/1lHrloetw7b9A/p5Oj/e+fWHIhbhzb9Qzo5+r/jiv21ceuwXf+QTo7+Dxy68664dbhF/5BOjv7f+NXMGXHr8Fn9Qzo5+r9v6uFr4tahXf+QTo7+f725+um4ddihf0gnR///2D9tZ9w6dOgf0snR/1Ovdf0pbh1u1T+kk6P/NRN+MzFuHW7TP6STo/9pHVvvjVuH2/UP6ZT7r0p1/VL/C+5uOC9uHT6nf0gnx/1/29+e/3bcOuzUP6SzbUfHzQ3NzU2t3njjjTf9b072n0xAau9Ef7J/JQAAAAAAAAAAAAAAwHBy/HOik/17BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4NztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1kH0bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfAUAAP//pgTwfg==") r1 = open(&(0x7f0000000300)='./file2\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000002000000"], 0x513300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', r0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300200000000000000800000008000300", @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x20) getsockname$unix(r9, &(0x7f0000000180), &(0x7f0000000200)=0x6e) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x800005}]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7f, 0x9, 0x4, 0x1f31996701009a58, r1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0xc, @value=r9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) 1m0.007513468s ago: executing program 2 (id=668): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = fanotify_init(0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40001029, r1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) 57.105024002s ago: executing program 2 (id=672): openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(r0, 0x0) setpgid(0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x8) 56.870741347s ago: executing program 2 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6c733d63703835322c6e6f626172726965722c63726561746f723dbd3c66f52c626172726965722c706172743d3078303030303030303030303030303030322c756d61736b3d30303030303030303030303030303030303030363734352c00b08558549e3fb3af8feff2a5c10c825cef8ec0f1ddcd940f6058a48f0cc0887456a5b70061a195d3ed592d"], 0x3, 0x6a4, &(0x7f0000000100)="$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") syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002466c3940841706002fbb0102030109022d00013003b008090400620394982fd7090504030000000e060d0508"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r6, r7, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x66, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0x1, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x3}, 0x60002000) 56.318130827s ago: executing program 2 (id=676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000078c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000005fc0)=ANY=[@ANYBLOB], 0x248, 0x1}], 0x1, 0x40800) 55.559498651s ago: executing program 34 (id=676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000078c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000005fc0)=ANY=[@ANYBLOB], 0x248, 0x1}], 0x1, 0x40800) 48.282356483s ago: executing program 35 (id=661): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/notes', 0x0, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe11, r0, 0x0, 0x300, 0x4, 0x0, 0x0, r0}]) 25.024607487s ago: executing program 3 (id=717): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$kcm(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x5, 0x2002) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r8}, 0x18) 22.132753643s ago: executing program 3 (id=722): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) fanotify_init(0x0, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r1, r2, 0x3, 0x0) 18.473520646s ago: executing program 3 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000080)={0x8, 0x0, [{0x0, 0x1, 0xfffffff7, 0x2}, {0x40000001, 0x7, 0xffffa8e6, 0x7, 0x2}, {0xc0000000, 0x4, 0x80000000, 0x1, 0x4}, {0x0, 0x800, 0xb6, 0x1000, 0x3}, {0x80000019, 0x5, 0x7, 0x8, 0x6}, {0x80000008, 0x7ff, 0x5, 0x5, 0x3}, {0x2, 0x5, 0x2, 0x200, 0x6}, {0x80000001, 0x7fffffff, 0x7, 0x6729, 0xe2}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}, {@size={'size', 0x3d, [0x25]}}]}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6}) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000200)) 17.596799597s ago: executing program 3 (id=728): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 15.33799046s ago: executing program 3 (id=731): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xae) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/228, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x5, 0x2002) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e1df0000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000100000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) 12.159593365s ago: executing program 3 (id=741): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000000280)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x10, 0x101000) fanotify_mark(r2, 0x221, 0x10, r1, 0x0) fanotify_mark(r2, 0x441, 0x8000001, r1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xb, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4000003e, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$notify(r5, 0x402, 0x80000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 9.387604327s ago: executing program 36 (id=741): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000000280)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x10, 0x101000) fanotify_mark(r2, 0x221, 0x10, r1, 0x0) fanotify_mark(r2, 0x441, 0x8000001, r1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xb, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4000003e, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$notify(r5, 0x402, 0x80000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 9.377005791s ago: executing program 6 (id=743): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x8200) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/138, 0x8a}], 0x1) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001000000090400000103000000092105000001220500090581030002000007000000000000"], 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file\x00', 0x4000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x480000000000000}}]}, 0xd, 0x5ed, &(0x7f0000000600)="$eJzs3c1vFVUbAPBnbm9LS3nfFmJUXEgTYyBRWlrAEOMCtoY0+BE3bqy0IFKgoTVaNKEY3JgYN8aYuHIh/hdKZMtKVy7cuDIkRA1LEq+Z2xnox9yW3n5Mw/x+yaVnzrnDOdN7n86Zc8+ZG0BlDaT/1CL2RsRUEtGXzD0oq0dWODD/vHv/fHI6fSTRaLzxVxJJlpc/P8l+9mY7d0fELz8nsadjeb3Ts1fOj01OTlzOtodmLkwNTc9eOXjuwtjZibMTF0deGjl29MjRY8OH2jquqwV5J6+//2Hf56Nvf//t/WT4h99Hkzger2ZPXHgcG2UgBpq/k2R5Ue+xja6sJB3Z+2ThS5zUS2wQa5K/fp0R8VT0RUc8fPH64rPXSm0csKkaSUQDqKhE/ENF5f2A/Np+6XVwrZReCbAV7p6YHwCYj/00J4//+vzYYHQ3xwZ23kti4bBOEhHtjcwttisibt8avX7m1uj12KRxOKDY3LWIeLro/J80478/uqO/Gf+1RfGf9gtOZT/T/NfbrH/pULH4h60zH//dK8Z/tIj/dxbE/7tt1j/wMPlez6L472n3kAAAAAAAAKCybp6IiBeLPv+vPZj/EwXzf3oj4vgG1D+wZHv55/+1OxtQDVDg7omIVwrn/9by2b/9HVnqf835AJ3JmXOTE4ci4v8RcSA6d6TbwyvUcfCLPd+0KhvI5v/lj7T+29lcwKwdd+o7Fu8zPjYztt7jBiLuXot4pt56/l96/k8Kzv/p34OpR6xjz/M3TrUqWz3+gc3S+C5if+H5/+FdK5KV788x1OwPDOW9guWe/fjLH1vV3278u8UErF96/t+5cvz3Jwvv1zO99joOz9Ybrcra7f93JW82b13SleV9NDYzc3k4ois52RHRFYvyR9beZngc5fGQx0sa/weeW3n8r6j/3xMRc0v+7+TvxWuKc0/+2/tHq/bo/0N50vgfX9P5f+2JkRv9P7Wq/9HO/0eat5c7kOUY/4N5X+dh2rU4vyAc60VFW91eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgc1CJiVyS1wQfpWm1wMKI3Ip6InbXJS9MzL5y59MHF8bSs+f3/tfybfvvmt5P8+//7F2yPLNk+HBG7I+Krjp7m9uDpS5PjZR88AAAAAAAAAAAAAAAAAAAAbBO9Ldb/p/7sKLt1wKarl90AoDQF8f9rGe0Atp7zP1SX+IfqEv9QXeIfqkv8Q3WJf6gu8Q/VJf4BAAAAAOCxsnvfzd+SiJh7uaf5SHVlZZ2ltgzYbLWyGwCUxi1+oLpM/YHqco0PJKuUd7fcabU9VzJ1eh07AwAAAAAAAAAAAEDl7N9r/T9UlfX/UF3W/0N15ev/95XcDmDrucYHYpWV/IXr/1fdCwAAAAAAAAAAAADYSNOzV86PTU5OXG4n0eiLWMfu2yzx1vZoxlYmGo3G1fRd0Mz59P4GvCUqncinwm+X9ixJ5Gv9Hm2vkv4gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAy/wXAAD//8jfH2A=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000400)='P') ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 5.148312769s ago: executing program 4 (id=748): openat$comedi(0xffffffffffffff9c, 0x0, 0x321400, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(r1, 0x21, &(0x7f00000002c0)=0x3ff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x20400) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) 4.584528074s ago: executing program 6 (id=749): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) preadv(r5, &(0x7f0000000540), 0x1000000000000084, 0x8, 0x400000) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f003, 0x5}) 4.14042086s ago: executing program 4 (id=750): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r2, 0x0, 0xdeff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=@random={'security.', '&(:\f).((\'\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) fcntl$dupfd(r0, 0x0, r0) setreuid(0xee01, 0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3.175168477s ago: executing program 6 (id=751): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) inotify_init() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x88}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x7, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) syz_open_dev$audion(0x0, 0x2, 0x8200) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40106e80, &(0x7f0000000000)={0x1, 0x100000000, 0x9, 0x7fffffff, 0x4000040c, 0x4fe4, 0x2401}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x468641, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x200) 2.287412934s ago: executing program 4 (id=752): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) (async) shutdown(r2, 0x1) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x3212}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x22040, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r6, 0x40096101, &(0x7f0000000640)={{}, 0x40}) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r7, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000001140)={0x48, 0x1, r7, 0x0, 0x4, 0x4}) (async) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) (async) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file1\x00', 0x20) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x2, 0x101000) fanotify_mark(r9, 0x1, 0x5000003a, r8, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x4f, 0x1) (async) r10 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r10, 0x4008941a, &(0x7f0000000080)=0x2) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$BTRFS_IOC_SEND(r10, 0x40489426, &(0x7f0000000640)={{r11}, 0x1, &(0x7f0000000000)=[0x800005], 0x1ff, 0x3}) 2.260313078s ago: executing program 7 (id=677): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, r7, 0x211, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x100000000000000, 0x0, 0x4000059}, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) 2.170847639s ago: executing program 6 (id=753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x10) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2014890, &(0x7f0000000880)=ANY=[@ANYBLOB="696f636861727365743d63703733372c756d61736b3d30000000000000004030383030643d9333356727a0d99c2175be1e5077c1d857fc45ae7a2d33cd32a9822a664d5bdc9d47199fc279c582e07751d451ec04450c4fca1aac77eb671e42d25e8808d99a10b81901545b1f719454bc5e7fb2f3e4e7d8dfadeecf8ab85354966e5d2c27db9bac825a34c66d86ca73501a44dd77a3a825f940f2a85b804ae9452609", @ANYRES8, @ANYBLOB=',quota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,e\trors=continue,discard,noquota\x00iochazset=cp850,grpquota,usrquota,uid=', @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="7b237355b4d1e791f66bd33bf0dbf679a0897d95ea333c059c60d6965ade9ca00754fa38b119d807c1bae66ea7b03dc51eaa567a467bf9f56f73398007377efb2e2e3f7c8a41e88968f9a4730c50424895a2ea3b3f1bac810636bf", @ANYRES8, @ANYRESDEC, @ANYRES32], 0x5, 0x619d, &(0x7f0000006a40)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x9, 0x5, {{0x5, 0x4, 0x2, 0x37, 0x14, 0x65, 0x0, 0xcf, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}}}}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x62}, 0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.048248143s ago: executing program 4 (id=754): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) lsm_get_self_attr(0x69, 0xffffffffffffffff, &(0x7f0000000000), 0x1) 1.699625213s ago: executing program 4 (id=755): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfbU\x00\x00\x00\x00\x00\x00\x00\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r5, &(0x7f0000000040), &(0x7f0000000080), 0x0) bind$unix(r4, &(0x7f0000000140)=@abs={0x1}, 0x6e) r6 = socket(0x2, 0x3, 0xff) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x1) setsockopt$inet_int(r6, 0x0, 0x4, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getpid() 1.16995824s ago: executing program 7 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) ppoll(&(0x7f0000000100)=[{r3, 0x120}, {r0, 0x8080}, {r1, 0x2001}, {r0, 0xe258}, {r3, 0x20c}, {r1}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)={[0x246]}, 0x8) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000100)=[{r3, 0x120}, {r0, 0x8080}, {r1, 0x2001}, {r0, 0xe258}, {r3, 0x20c}, {r1}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)={[0x246]}, 0x8) (async) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) (async) 663.60517ms ago: executing program 6 (id=757): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2077) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000000300)='!', 0x1, 0x0, 0x0, 0x2}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r2, r0, 0x0) 510.332125ms ago: executing program 7 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250a00000008000300fc1d75f8420a5b131d79739ec3d5911bc3968de950684bf7789df3657d803609341d079d49aa5c485e1249708c25c1bff7fd8d88f1359e7a69ac3cb5d4f527eeca0917d38317abf107c42ba2a08e1fa4843e524994717d39b9cd15d31bd1707d6625e2b14ff5ac18150a17efbbd853d44e83168cfb29bc69bc09b8c6dcde7c44e08ec56be9725b4a580019263772df00bd5b", @ANYRES32=r2, @ANYBLOB="04000b0008006e80040002000500080000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000c891}, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x800003, 0x0, 0x3, 0x1}, 0x8) r5 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c51, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000000240)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)) r7 = socket(0x22, 0x2, 0x3) recvfrom$phonet(r7, 0x0, 0x0, 0x3, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x80000000, 0xfffffffd}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x80c0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[], 0xf5, 0x1213, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f00000001c0)='./bus/file0\x00', 0x22) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 497.876538ms ago: executing program 4 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006a8000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x3a0012fb, 0x2759, 0x1f, 0x3, 0x0, r5, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 6 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffec2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresuid(0xee01, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x801}, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed00efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6342103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033df58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28defa300"}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x70}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x2b, 0x1, 0x0) listen(r6, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="160a000000000000000000000500000800000000000000000000002276cb4f961afc3eeb74073fb1d3cd72dab36a29584e11c43d922b52dd78262f49e69c9fd5b826399cf9db2d46d00758df9ecce819a5e90d069e040e1f32acfd0dd1e384185a245e8582b1269f47f4a3a6b4a5e694003e10d9c8bb9bc3cbce7738e6cdc487b8e1ac06a8050aa27fc0c259d5d00e9139266e2ae93a4ae36e00af517bd1839af2751742d6e3f2"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xce, &(0x7f0000000580)=""/206, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) kernel console output (not intermixed with test programs): to the software demuxer [ 170.980279][ T5834] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 171.009459][ T5834] usb 3-1: media controller created [ 171.086312][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.390255][ T5834] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 171.504025][ T6656] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.538231][ T6675] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.119: inode has both inline data and extents flags [ 171.592044][ T6656] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 171.620471][ T6662] loop5: detected capacity change from 0 to 262144 [ 171.629764][ T6675] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.119: couldn't read orphan inode 15 (err -117) [ 171.629767][ T6662] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.117 (6662) [ 171.662071][ T6662] BTRFS info (device loop5): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 171.662668][ T5834] usb 3-1: USB disconnect, device number 3 [ 171.672353][ T6662] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 171.717972][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 171.744411][ T6675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.775562][ T6689] mmap: syz.4.120 (6689) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.788883][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 171.817957][ T6695] fuse: Bad value for 'fd' [ 171.860528][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 171.886691][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 171.910621][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 172.074608][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 172.089166][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 172.379012][ T6662] BTRFS error (device loop5): open_ctree failed: -4 [ 172.566500][ T6656] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 172.691095][ T6656] BTRFS error (device loop1): open_ctree failed: -12 [ 172.742856][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.383467][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 174.134864][ T6747] kAFS: No cell specified [ 175.738293][ T6750] 9p: Could not find request transport: fd0x0000000000000004 [ 176.294519][ T6761] add_ndev_hash(wlan0) on ffff8880119d0000 done [ 176.304768][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 176.311616][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 176.326587][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 176.351808][ T6761] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.381638][ T6761] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.469545][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 176.642096][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 176.677775][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 176.918159][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 177.330424][ T6761] wlan0 speed is unknown, defaulting to 1000 [ 177.923761][ T6772] loop1: detected capacity change from 0 to 8192 [ 179.349936][ T30] audit: type=1804 audit(1765582556.578:4): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.133" name="/newroot/23/file2/file2" dev="loop1" ino=1048615 res=1 errno=0 [ 179.439147][ T30] audit: type=1804 audit(1765582556.608:5): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.133" name="/newroot/23/file2/file2" dev="loop1" ino=1048615 res=1 errno=0 [ 180.059186][ T6782] input: syz1 as /devices/virtual/input/input6 [ 182.571827][ T6787] kAFS: No cell specified [ 183.890754][ T6791] tipc: Started in network mode [ 183.896593][ T6791] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 183.956007][ T6791] tipc: Enabling of bearer rejected, failed to enable media [ 183.992184][ T6794] loop1: detected capacity change from 0 to 128 [ 184.065887][ T6794] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.180797][ T6794] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.803790][ T6803] syz_tun: entered allmulticast mode [ 185.523908][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.138013][ T6811] 9p: Could not find request transport: fd0x0000000000000004 [ 187.294415][ T6822] loop1: detected capacity change from 0 to 256 [ 187.477910][ T6822] loop1: detected capacity change from 0 to 1024 [ 187.539789][ T6822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.620165][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.852991][ T30] audit: type=1800 audit(1765582565.088:6): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.148" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 189.638274][ T6834] kAFS: No cell specified [ 190.726583][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.011678][ T6842] loop5: detected capacity change from 0 to 256 [ 191.032162][ T6842] exfat: Unknown parameter 'ÿÿ0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 191.221781][ T6844] loop4: detected capacity change from 0 to 512 [ 191.260574][ T6844] EXT4-fs: Ignoring removed oldalloc option [ 191.339429][ T6844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.426238][ T6844] EXT4-fs (loop4): 1 truncate cleaned up [ 191.465433][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.542170][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.687808][ T6840] loop1: detected capacity change from 0 to 32768 [ 192.747501][ T128] IPVS: starting estimator thread 0... [ 192.824035][ T6840] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.899463][ T6855] IPVS: using max 26 ests per chain, 62400 per kthread [ 193.033234][ T6840] XFS (loop1): Ending clean mount [ 193.037711][ T6864] loop4: detected capacity change from 0 to 128 [ 193.097115][ T6864] hpfs: Unknown parameter 'uid<18446744073709551615' [ 193.174243][ T6866] loop3: detected capacity change from 0 to 1024 [ 193.219581][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.244838][ T6866] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 193.266097][ T6866] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 193.279889][ T6866] EXT4-fs (loop3): This should not happen!! Data will be lost [ 193.279889][ T6866] [ 193.290612][ T6866] EXT4-fs (loop3): Total free blocks count 0 [ 193.297881][ T6866] EXT4-fs (loop3): Free/Dirty block details [ 193.308121][ T6866] EXT4-fs (loop3): free_blocks=68451041280 [ 193.314835][ T6866] EXT4-fs (loop3): dirty_blocks=32 [ 193.342698][ T5822] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.371106][ T6866] EXT4-fs (loop3): Block reservation details [ 193.918658][ T6866] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 196.162360][ T6882] bond_slave_0: entered promiscuous mode [ 196.168498][ T6882] bond_slave_1: entered promiscuous mode [ 196.812927][ T6882] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 196.897260][ T6147] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 196.946755][ T6882] bond_slave_0: left promiscuous mode [ 196.952618][ T6882] bond_slave_1: left promiscuous mode [ 197.085559][ T6897] loop1: detected capacity change from 0 to 256 [ 197.126071][ T6897] exfat: Deprecated parameter 'utf8' [ 197.126103][ T6897] exfat: Bad value for 'umask' [ 197.148277][ T6891] 9p: Could not find request transport: fd0x0000000000000004 [ 197.159926][ T6894] Illegal XDP return value 4294967274 on prog (id 33) dev N/A, expect packet loss! [ 197.374844][ T6903] loop1: detected capacity change from 0 to 2048 [ 199.032239][ T6903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.695721][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.702524][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.940141][ T6909] loop1: detected capacity change from 0 to 32768 [ 199.957705][ T6911] loop5: detected capacity change from 0 to 512 [ 199.981865][ T6900] loop3: detected capacity change from 0 to 40427 [ 200.034747][ T6900] f2fs: Unknown parameter 'reserver_root' [ 200.042811][ T6909] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.226254][ T6909] XFS (loop1): Ending clean mount [ 200.347995][ T5822] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.369820][ T6389] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.563921][ T6389] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 200.614983][ T6389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 200.664013][ T6389] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 200.789273][ T6389] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 200.921268][ T6389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.337879][ T6389] usb 6-1: config 0 descriptor?? [ 201.667314][ T6911] loop5: detected capacity change from 0 to 256 [ 201.678784][ T6836] wlan0 speed is unknown, defaulting to 1000 [ 201.697378][ T6836] syz1: Port: 1 Link DOWN [ 201.723494][ T128] wlan0 speed is unknown, defaulting to 1000 [ 201.732655][ T6911] FAT-fs (loop5): Directory bread(block 64) failed [ 201.739498][ T6566] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.743066][ T128] syz1: Port: 1 Link ACTIVE [ 201.763201][ T6911] FAT-fs (loop5): Directory bread(block 65) failed [ 201.795268][ T6911] FAT-fs (loop5): Directory bread(block 66) failed [ 201.824411][ T6911] FAT-fs (loop5): Directory bread(block 67) failed [ 201.831271][ T6936] comedi comedi3: comedi_config --init_data is deprecated [ 201.848642][ T6911] FAT-fs (loop5): Directory bread(block 68) failed [ 201.897821][ T6911] FAT-fs (loop5): Directory bread(block 69) failed [ 201.909881][ T6911] FAT-fs (loop5): Directory bread(block 70) failed [ 201.916531][ T6911] FAT-fs (loop5): Directory bread(block 71) failed [ 201.936713][ T6911] FAT-fs (loop5): Directory bread(block 72) failed [ 201.947161][ T6566] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.977949][ T6939] loop3: detected capacity change from 0 to 1024 [ 201.984680][ T6566] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.998605][ T6911] FAT-fs (loop5): Directory bread(block 73) failed [ 202.140876][ T6566] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.192527][ T6566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.224851][ T6145] hfsplus: b-tree write err: -5, ino 4 [ 202.244455][ T30] audit: type=1800 audit(1765582579.478:7): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.162" name="file1" dev="loop5" ino=1048616 res=0 errno=0 [ 202.287751][ T6566] usb 2-1: Product: syz [ 202.297705][ T6566] usb 2-1: Manufacturer: syz [ 202.312232][ T6389] usbhid 6-1:0.0: can't add hid device: -71 [ 202.324033][ T6389] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 202.362420][ T6566] usb 2-1: SerialNumber: syz [ 202.389941][ T6945] comedi comedi1: dac02: I/O port conflict (0x2,8) [ 202.403942][ T6389] usb 6-1: USB disconnect, device number 2 [ 202.858302][ T6950] loop3: detected capacity change from 0 to 2048 [ 202.910400][ T6950] /dev/loop3: Can't open blockdev [ 203.131645][ T6955] 9p: Could not find request transport: fd0x0000000000000004 [ 203.517794][ T6566] cdc_ncm 2-1:1.0: bind() failure [ 203.593290][ T6566] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 203.667456][ T6566] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 203.728528][ T6566] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 203.836594][ T6566] usb 2-1: USB disconnect, device number 7 [ 204.454451][ T6566] IPVS: starting estimator thread 0... [ 204.484193][ T6971] loop1: detected capacity change from 0 to 2048 [ 204.533807][ T6971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.574462][ T6972] IPVS: using max 26 ests per chain, 62400 per kthread [ 204.655620][ T6971] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 204.674882][ T6953] loop4: detected capacity change from 0 to 32768 [ 204.692995][ T6971] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 204.798755][ T6953] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.991703][ T6566] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 205.018525][ T6953] XFS (loop4): Ending clean mount [ 205.057498][ T6953] XFS (loop4): Quotacheck needed: Please wait. [ 205.108698][ T6953] XFS (loop4): Quotacheck: Done. [ 205.191564][ T5826] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.202893][ T6566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.269457][ T6566] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.291349][ T6566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.321930][ T6566] usb 2-1: config 0 descriptor?? [ 205.592681][ T6566] usbhid 2-1:0.0: can't add hid device: -71 [ 205.609597][ T6566] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 205.640339][ T6566] usb 2-1: USB disconnect, device number 8 [ 206.079334][ T6566] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 206.262373][ T6566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.299652][ T6566] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 206.328812][ T6566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.367341][ T6566] usb 2-1: config 0 descriptor?? [ 206.416862][ T6566] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 207.099899][ T6985] loop3: detected capacity change from 0 to 262144 [ 209.035638][ C1] usb 2-1: unknown answer from device [ 209.041738][ C1] input input7: Pen battery low [ 209.152962][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.160828][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.169070][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.178066][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.188271][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.197003][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.205846][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.213810][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.219890][ T5181] usb 2-1: control msg error: -71 [ 209.222928][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.235248][ C1] usb 2-1: pegasus_irq - usb_submit_urb failed with result -1 [ 209.457836][ T6997] Invalid logical block size (22187) [ 209.571779][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.579321][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.587153][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.594725][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.602350][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.609769][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.617368][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.625269][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.632728][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.641413][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.649813][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.657370][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.664935][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.672770][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.680646][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.688694][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.696214][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.703620][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.711279][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.718607][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.725994][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.733510][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.742552][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.750243][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.757619][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.765170][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.772562][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.780050][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.787680][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.795096][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.802569][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.809925][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.817555][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.824949][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.832391][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.839983][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.847517][ T5181] usb 2-1: control msg error: -71 [ 209.853986][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.862135][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.869601][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.876845][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.884275][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.891645][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.899010][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.906436][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.913815][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.921238][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.928486][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.937317][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.944888][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.952227][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.961755][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.969118][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.976383][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.984158][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.991414][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 209.998890][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.006246][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.013720][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.021025][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.028249][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.035774][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.043139][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.050489][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.059709][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.067099][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.074685][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.082480][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.089999][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.097742][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.105706][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.113130][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.120443][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.127865][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.135289][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.142742][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.151666][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.163195][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.171242][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.179220][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.186654][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.194598][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.202427][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.210160][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.217576][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.225659][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.233202][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.240608][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.248516][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.260148][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.268406][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.276121][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.283554][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.291057][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.298573][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.306176][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.314161][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.321630][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.329361][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.337164][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.344500][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.352029][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.370129][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.378754][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.387109][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.394574][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.402496][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.411088][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.419949][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.429111][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.437178][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.444691][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.454124][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.470175][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.479591][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.487363][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.495598][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.503655][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.511107][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.518537][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.526136][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.534077][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.541978][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.559308][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.570530][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.578667][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.586140][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.593486][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.600915][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.610236][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.618169][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.625774][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.634003][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.641691][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.649184][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.658781][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.670048][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.678875][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.689351][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.696902][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.704690][ C0] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 210.705984][ T6566] usb 2-1: USB disconnect, device number 9 [ 210.712018][ C0] usb 2-1: pegasus_irq - usb_submit_urb failed with result -19 [ 210.953533][ T7002] loop1: detected capacity change from 0 to 2048 [ 210.961402][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 211.041523][ T7002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.835243][ T5834] usb 3-1: device descriptor read/all, error -71 [ 214.527109][ T7026] netlink: 556 bytes leftover after parsing attributes in process `syz.4.199'. [ 214.673552][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 218.365596][ T7053] tipc: Started in network mode [ 218.398074][ T7053] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 218.427763][ T7053] tipc: Enabled bearer , priority 10 [ 218.442861][ T7055] loop5: detected capacity change from 0 to 2048 [ 218.505025][ T7055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.275014][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 219.284153][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.292074][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.880458][ T7060] loop1: detected capacity change from 0 to 512 [ 219.902522][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.910075][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.939440][ T7060] EXT4-fs (loop1): Invalid log block size: 4294967295 [ 220.162223][ T7057] loop5: detected capacity change from 0 to 8192 [ 220.193774][ T5995] tipc: Node number set to 4269801514 [ 220.273902][ T7057] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 220.299865][ T7057] UDF-fs: Scanning with blocksize 512 failed [ 220.477958][ T7071] loop4: detected capacity change from 0 to 512 [ 220.911848][ T7057] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 220.940681][ T7071] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 221.280058][ T7057] UDF-fs: Scanning with blocksize 1024 failed [ 221.321961][ T7071] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.340848][ T7057] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 221.348658][ T7057] UDF-fs: Scanning with blocksize 2048 failed [ 221.368832][ T7057] UDF-fs: error (device loop5): udf_read_inode: (ino 784) failed !bh [ 221.379695][ T7057] UDF-fs: Scanning with blocksize 4096 failed [ 221.405461][ T7071] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.211: bad orphan inode 15 [ 221.519117][ T7085] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20001 [ 221.551059][ T7071] ext4_test_bit(bit=14, block=18) = 1 [ 221.557048][ T7071] is_bad_inode(inode)=0 [ 221.593256][ T7079] /dev/loop2: Can't open blockdev [ 221.626902][ T7071] NEXT_ORPHAN(inode)=1023 [ 221.649472][ T7071] max_ino=32 [ 221.678761][ T7071] i_nlink=0 [ 221.702502][ T7071] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #15: comm syz.4.211: corrupted xattr block 19: e_value size too large [ 223.744429][ T7071] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 223.812697][ T7071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 223.819412][ T6306] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 223.913948][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.139349][ T6306] usb 6-1: Using ep0 maxpacket: 32 [ 224.157305][ T6306] usb 6-1: config 0 has no interfaces? [ 224.169449][ T6306] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 224.209305][ T6306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.230492][ T6306] usb 6-1: config 0 descriptor?? [ 224.426430][ T7101] loop4: detected capacity change from 0 to 2048 [ 224.445005][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.481806][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.522056][ T6306] usb 6-1: USB disconnect, device number 3 [ 225.200897][ T7098] loop1: detected capacity change from 0 to 40427 [ 225.239598][ T7098] f2fs: Unknown parameter '' [ 225.693686][ T7101] loop4: detected capacity change from 0 to 32768 [ 225.702135][ T7114] loop5: detected capacity change from 0 to 512 [ 225.913264][ T7114] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 226.340536][ T7118] fuse: Unknown parameter 'f' [ 226.500187][ T7114] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 226.932962][ T7114] loop5: detected capacity change from 0 to 1764 [ 227.005811][ T7114] iso9660: Unknown parameter 'ext3' [ 229.033336][ T7138] input: syz0 as /devices/virtual/input/input8 [ 231.318159][ T7143] loop4: detected capacity change from 0 to 262144 [ 231.346429][ T7143] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.230 (7143) [ 231.429993][ T7143] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 231.446090][ T7143] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 231.935281][ T7143] BTRFS info (device loop4): enabling ssd optimizations [ 231.942508][ T7143] BTRFS info (device loop4): enabling free space tree [ 233.581230][ T7176] loop3: detected capacity change from 0 to 512 [ 234.240240][ T7176] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.234: iget: bad i_size value: 38620345925642 [ 234.251580][ T5826] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 234.263591][ T7176] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.234: couldn't read orphan inode 15 (err -117) [ 234.293680][ T7176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.631043][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.185137][ T7172] loop1: detected capacity change from 0 to 32768 [ 235.280391][ T7172] (syz.1.233,7172,1):ocfs2_verify_volume:2316 ERROR: bad system_dir_blkno: 0 [ 235.832509][ T7183] netlink: 'syz.3.236': attribute type 13 has an invalid length. [ 235.854309][ T7172] (syz.1.233,7172,0):ocfs2_verify_volume:2331 ERROR: status = -22 [ 235.898261][ T7172] (syz.1.233,7172,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 235.904691][ T7188] loop3: detected capacity change from 0 to 512 [ 235.932054][ T7183] gretap0: refused to change device tx_queue_len [ 235.945807][ T7172] (syz.1.233,7172,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 236.000748][ T7183] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 236.171522][ T7188] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 236.194514][ T7190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.297438][ T7188] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 236.420562][ T7196] capability: warning: `syz.2.238' uses 32-bit capabilities (legacy support in use) [ 236.431315][ T7197] syz.2.238 (7197): /proc/7196/oom_adj is deprecated, please use /proc/7196/oom_score_adj instead. [ 236.449928][ T7188] EXT4-fs (loop3): mount failed [ 239.948132][ T7227] loop5: detected capacity change from 0 to 256 [ 240.232505][ T7227] exfat: Deprecated parameter 'utf8' [ 240.237882][ T7227] exfat: Deprecated parameter 'utf8' [ 240.464052][ T7227] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 241.332529][ T7227] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 242.087112][ T30] audit: type=1326 audit(1765582619.118:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.112285][ T30] audit: type=1326 audit(1765582619.118:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.138764][ T30] audit: type=1326 audit(1765582619.118:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.199448][ T30] audit: type=1326 audit(1765582619.118:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.319427][ T30] audit: type=1326 audit(1765582619.118:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.354983][ T30] audit: type=1326 audit(1765582619.118:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.439286][ T30] audit: type=1326 audit(1765582619.118:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.511064][ T30] audit: type=1326 audit(1765582619.118:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.634999][ T30] audit: type=1326 audit(1765582619.118:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 242.757537][ T30] audit: type=1326 audit(1765582619.118:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.5.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0718f749 code=0x7ffc0000 [ 244.298223][ T7264] loop3: detected capacity change from 0 to 64 [ 244.651292][ T7246] loop5: detected capacity change from 0 to 262144 [ 244.663391][ T7246] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.255 (7246) [ 244.686308][ T7246] BTRFS info (device loop5): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 244.697549][ T7246] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 244.801199][ T7246] BTRFS info (device loop5): enabling ssd optimizations [ 244.808274][ T7246] BTRFS info (device loop5): enabling free space tree [ 245.252978][ T7286] raw_sendmsg: syz.2.261 forgot to set AF_INET. Fix it! [ 245.288405][ T7286] Bluetooth: hci0: load_link_keys: too big key_count value 8192 [ 246.038627][ T6092] BTRFS info (device loop5): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 246.339326][ T6566] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 246.529291][ T6566] usb 4-1: Using ep0 maxpacket: 8 [ 246.543947][ T6566] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 246.576450][ T6566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.606267][ T6566] usb 4-1: Product: syz [ 246.619354][ T6566] usb 4-1: Manufacturer: syz [ 246.624066][ T6566] usb 4-1: SerialNumber: syz [ 246.652028][ T7302] warning: `syz.1.267' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 246.695354][ T6566] usb 4-1: config 0 descriptor?? [ 246.918083][ T6566] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.260813][ T6566] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 249.033925][ T6566] usb 4-1: USB disconnect, device number 4 [ 249.073077][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 249.073095][ T30] audit: type=1326 audit(1765582626.308:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e35d8f749 code=0x0 [ 249.255930][ T7311] loop4: detected capacity change from 0 to 262144 [ 249.264250][ T7311] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.270 (7311) [ 249.281725][ T7311] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 249.291987][ T7311] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 249.396503][ T7341] loop3: detected capacity change from 0 to 16 [ 249.408221][ T7341] erofs (device loop3): mounted with root inode @ nid 36. [ 249.420137][ T7311] BTRFS info (device loop4): enabling ssd optimizations [ 249.427128][ T7311] BTRFS info (device loop4): enabling free space tree [ 249.521062][ T5951] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.689563][ T5951] usb 2-1: device descriptor read/64, error -71 [ 249.729476][ T7346] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.012189][ T5951] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.272743][ T5951] usb 2-1: device descriptor read/64, error -71 [ 250.420098][ T5951] usb usb2-port1: attempt power cycle [ 250.426259][ T5826] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 250.442666][ T7358] loop5: detected capacity change from 0 to 512 [ 250.470270][ T7358] EXT4-fs: quotafile must be on filesystem root [ 250.712020][ T7362] loop5: detected capacity change from 0 to 512 [ 250.742978][ T7362] ext4: Unknown parameter 'context' [ 250.790233][ T5951] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.828142][ T5951] usb 2-1: device descriptor read/8, error -71 [ 250.890256][ T7366] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 251.529638][ T5951] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.570438][ T5951] usb 2-1: device descriptor read/8, error -71 [ 251.689831][ T5951] usb usb2-port1: unable to enumerate USB device [ 253.087806][ T7386] loop3: detected capacity change from 0 to 128 [ 253.151143][ T7386] affs: No valid root block on device loop3 [ 255.199504][ T5951] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 255.416634][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 255.451278][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 255.485806][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.528247][ T5951] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 255.528270][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.528285][ T5951] usb 2-1: Product: syz [ 255.528296][ T5951] usb 2-1: Manufacturer: syz [ 255.528307][ T5951] usb 2-1: SerialNumber: syz [ 255.595684][ T5951] usb 2-1: config 0 descriptor?? [ 255.622623][ T5951] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 256.845998][ T30] audit: type=1326 audit(1765582634.028:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 256.884571][ T30] audit: type=1326 audit(1765582634.028:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 256.969581][ T30] audit: type=1326 audit(1765582634.078:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.102423][ T30] audit: type=1326 audit(1765582634.078:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.139882][ T30] audit: type=1326 audit(1765582634.078:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.165876][ T30] audit: type=1326 audit(1765582634.158:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.241393][ T30] audit: type=1326 audit(1765582634.168:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.269651][ T7422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.299'. [ 257.310178][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'. [ 257.322617][ T30] audit: type=1326 audit(1765582634.168:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.345204][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 257.355375][ T30] audit: type=1326 audit(1765582634.228:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.457614][ T30] audit: type=1326 audit(1765582634.228:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 257.598112][ T6389] usb 2-1: USB disconnect, device number 14 [ 257.886296][ T7445] loop4: detected capacity change from 0 to 512 [ 258.198565][ T7451] loop5: detected capacity change from 0 to 32768 [ 258.235972][ T7445] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.307: error while reading EA inode 32 err=-116 [ 258.266372][ T7445] EXT4-fs (loop4): Remounting filesystem read-only [ 258.274908][ T7451] (syz.5.303,7451,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 258.289795][ T7451] (syz.5.303,7451,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 258.298631][ T7445] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 258.310838][ T7445] EXT4-fs (loop4): 1 orphan inode deleted [ 258.321086][ T7445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.821209][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.524517][ T7463] loop1: detected capacity change from 0 to 64 [ 261.157197][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.163834][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.579940][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'. [ 262.729344][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'. [ 263.185703][ T7475] loop1: detected capacity change from 0 to 262144 [ 263.198969][ T7475] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.314 (7475) [ 263.223873][ T7475] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 263.234315][ T7475] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 263.362825][ T7475] BTRFS info (device loop1): enabling ssd optimizations [ 263.369941][ T7475] BTRFS info (device loop1): enabling free space tree [ 263.402833][ T7491] loop5: detected capacity change from 0 to 512 [ 263.694599][ T7504] loop3: detected capacity change from 0 to 256 [ 263.702012][ T7504] vfat: Unknown parameter 'shortnRme' [ 263.787046][ T7491] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.145393][ T7491] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 264.287022][ T7491] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 264.354285][ T7491] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 264.372550][ T7491] System zones: 0-2, 18-18, 34-35 [ 264.395399][ T7491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.434430][ T128] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 264.462771][ T5822] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 264.494529][ T7491] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.319: bg 0: block 353: padding at end of block bitmap is not set [ 264.543477][ T7491] cifs: Unknown parameter 'norecovery' [ 264.549141][ T7491] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 264.573322][ T128] usb 5-1: device descriptor read/64, error -71 [ 264.576216][ T7491] CIFS mount error: No usable UNC path provided in device string! [ 264.576216][ T7491] [ 264.592352][ T7491] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 264.790997][ T6092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.885344][ T128] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 264.960128][ T7526] loop3: detected capacity change from 0 to 512 [ 265.039625][ T128] usb 5-1: device descriptor read/64, error -71 [ 265.459741][ T7526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.609804][ T128] usb usb5-port1: attempt power cycle [ 265.668495][ T7526] EXT4-fs (loop3): 1 truncate cleaned up [ 265.707655][ T7526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.810325][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 265.810343][ T30] audit: type=1800 audit(1765582643.048:73): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.325" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 265.849951][ T7526] EXT4-fs error (device loop3): __ext4_iget:5426: inode #12: block 2: comm syz.3.325: invalid block [ 265.889497][ T6789] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 265.894704][ T7536] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 265.945677][ T7536] bond1: entered promiscuous mode [ 265.959828][ T128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 265.989702][ T7536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.010466][ T128] usb 5-1: device descriptor read/8, error -71 [ 266.062717][ T7538] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 266.099406][ T6789] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 266.108511][ T6789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.139426][ T6789] usb 6-1: Product: syz [ 266.139499][ T7538] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 266.143662][ T6789] usb 6-1: Manufacturer: syz [ 266.143686][ T6789] usb 6-1: SerialNumber: syz [ 266.165948][ T6789] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 266.209563][ T7538] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 266.237829][ T7531] loop1: detected capacity change from 0 to 32768 [ 266.244227][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 266.259410][ T128] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 266.300375][ T128] usb 5-1: device descriptor read/8, error -71 [ 266.333181][ T7531] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: 1 clusters [ 266.349492][ T7531] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 266.379288][ T7531] OCFS2: File system is now read-only. [ 266.384902][ T7531] (syz.1.321,7531,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 266.413033][ T128] usb usb5-port1: unable to enumerate USB device [ 266.429640][ T7531] (syz.1.321,7531,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 266.438548][ T7531] (syz.1.321,7531,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 266.511678][ T7531] (syz.1.321,7531,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs? [ 266.511770][ T7531] (syz.1.321,7531,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 266.582076][ T7531] (syz.1.321,7531,0):ocfs2_initialize_super:2198 ERROR: status = -30 [ 266.629549][ T7531] (syz.1.321,7531,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 266.699437][ T6789] usb 6-1: USB disconnect, device number 4 [ 266.869667][ T6566] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 267.019379][ T6566] usb 3-1: device descriptor read/64, error -71 [ 267.259401][ T6566] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 267.406339][ T7554] loop5: detected capacity change from 0 to 1024 [ 267.441761][ T7554] EXT4-fs: Ignoring removed nobh option [ 267.480397][ T7554] EXT4-fs: Ignoring removed bh option [ 267.513466][ T7554] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 267.547669][ T9] usb 6-1: Service connection timeout for: 256 [ 267.575750][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 267.616391][ T9] ath9k_htc: Failed to initialize the device [ 267.641841][ T7554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.704228][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.727077][ T6789] usb 6-1: ath9k_htc: USB layer deinitialized [ 267.901297][ T30] audit: type=1326 audit(1765582645.128:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dbf98f749 code=0x0 [ 267.955718][ T6092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.339413][ T6566] usb 3-1: device descriptor read/64, error -71 [ 269.091065][ T7555] loop1: detected capacity change from 0 to 262144 [ 269.099699][ T6566] usb usb3-port1: attempt power cycle [ 269.114119][ T7555] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.331 (7555) [ 269.140725][ T7555] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 269.150986][ T7555] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 269.270051][ T7555] BTRFS info (device loop1): enabling ssd optimizations [ 269.277147][ T7555] BTRFS info (device loop1): enabling free space tree [ 269.459364][ T6566] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 270.699117][ T6566] usb 3-1: device descriptor read/8, error -71 [ 270.853542][ T5822] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 274.636092][ T7613] loop3: detected capacity change from 0 to 2048 [ 274.747340][ T7613] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.055476][ T7620] loop3: detected capacity change from 0 to 128 [ 275.179586][ T7620] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 275.603263][ T7637] loop3: detected capacity change from 0 to 1024 [ 275.635632][ T7637] EXT4-fs: Ignoring removed orlov option [ 275.665755][ T7637] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 275.748527][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.036044][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.310660][ T7656] loop1: detected capacity change from 0 to 256 [ 276.385528][ T7654] wlan0 speed is unknown, defaulting to 1000 [ 276.754191][ T7669] loop4: detected capacity change from 0 to 512 [ 276.767744][ T7663] wlan0 speed is unknown, defaulting to 1000 [ 278.061563][ T7685] loop1: detected capacity change from 0 to 256 [ 278.069151][ T7687] loop4: detected capacity change from 0 to 512 [ 278.075784][ T7685] exfat: Deprecated parameter 'namecase' [ 278.082153][ T7685] exfat: Deprecated parameter 'namecase' [ 278.113765][ T7685] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 278.128778][ T7687] EXT4-fs: Ignoring removed nobh option [ 278.231678][ T7687] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.374: corrupted inode contents [ 278.374115][ T7687] EXT4-fs (loop4): Remounting filesystem read-only [ 278.443459][ T7687] Quota error (device loop4): write_blk: dquota write failed [ 278.496067][ T7687] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 278.522377][ T7687] EXT4-fs (loop4): 1 truncate cleaned up [ 278.544196][ T7687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.629591][ T7687] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.802532][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.818471][ T7716] loop1: detected capacity change from 0 to 2048 [ 280.825577][ T7704] loop4: detected capacity change from 0 to 8192 [ 280.826602][ T7716] udf: Unknown parameter 'utf8*noadinicb' [ 281.006137][ T7704] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 281.217605][ T7704] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 281.228546][ T7723] tracefs: Unknown parameter '' [ 281.254059][ T7724] loop5: detected capacity change from 0 to 256 [ 281.432890][ T7724] syz.5.385: attempt to access beyond end of device [ 281.432890][ T7724] loop5: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 282.104845][ T6092] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 282.114957][ T6092] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 282.363880][ T7742] loop3: detected capacity change from 0 to 256 [ 282.471446][ T7742] syz.3.394: attempt to access beyond end of device [ 282.471446][ T7742] loop3: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 282.527475][ T7742] syz.3.394: attempt to access beyond end of device [ 282.527475][ T7742] loop3: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 282.596790][ T7748] syz.3.394: attempt to access beyond end of device [ 282.596790][ T7748] loop3: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 282.654496][ T6139] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.668965][ T7748] syz.3.394: attempt to access beyond end of device [ 282.668965][ T7748] loop3: rw=8423425, sector=352, nr_sectors = 5 limit=256 [ 282.805903][ T6139] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.988823][ T6139] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.052756][ T7755] loop3: detected capacity change from 0 to 1024 [ 283.081433][ T7755] EXT4-fs: Ignoring removed nobh option [ 283.117899][ T7755] EXT4-fs: Ignoring removed bh option [ 283.136279][ T6139] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.210960][ T7755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.422679][ T7760] loop4: detected capacity change from 0 to 1024 [ 283.470708][ T7760] EXT4-fs: Ignoring removed oldalloc option [ 283.479952][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.489952][ T6139] bridge_slave_1: left allmulticast mode [ 283.495647][ T6139] bridge_slave_1: left promiscuous mode [ 283.504454][ T7760] EXT4-fs: Ignoring removed orlov option [ 283.519283][ T7760] EXT4-fs: Ignoring removed oldalloc option [ 283.531389][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.582571][ T7760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.677138][ T6139] bridge_slave_0: left allmulticast mode [ 283.687372][ T7760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.721078][ T6139] bridge_slave_0: left promiscuous mode [ 283.728818][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.892072][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.141701][ T7776] loop3: detected capacity change from 0 to 16 [ 284.175417][ T7776] erofs (device loop3): mounted with root inode @ nid 36. [ 284.334779][ T7777] loop4: detected capacity change from 0 to 2048 [ 284.413776][ T7777] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 284.444371][ T7777] UDF-fs: Scanning with blocksize 512 failed [ 284.529582][ T7777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.676360][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.687506][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.696561][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.705052][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.718877][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.730434][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.737805][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.745290][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.753523][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.763243][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.005909][ T52] Bluetooth: hci3: command tx timeout [ 290.335511][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.362826][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.392738][ T6139] bond0 (unregistering): Released all slaves [ 291.003978][ T6139] tipc: Left network mode [ 291.011961][ T7804] wlan0 speed is unknown, defaulting to 1000 [ 292.094767][ T52] Bluetooth: hci3: command tx timeout [ 293.651765][ T7847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.140384][ T7853] loop1: detected capacity change from 0 to 1024 [ 294.173270][ T7853] EXT4-fs: inline encryption not supported [ 294.209604][ T52] Bluetooth: hci3: command tx timeout [ 294.368348][ T7853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.982735][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.269385][ T52] Bluetooth: hci3: command tx timeout [ 296.334228][ T7875] loop1: detected capacity change from 0 to 1024 [ 296.341490][ T6139] hsr_slave_0: left promiscuous mode [ 296.349137][ T6139] hsr_slave_1: left promiscuous mode [ 296.350679][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.350705][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.441380][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 296.515148][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.515244][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.947640][ T7875] EXT4-fs: inline encryption not supported [ 297.017938][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.020441][ T30] audit: type=1326 audit(1765582674.258:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 297.026338][ T30] audit: type=1326 audit(1765582674.258:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 297.032193][ T6139] veth1_macvtap: left promiscuous mode [ 297.032283][ T6139] veth0_macvtap: left promiscuous mode [ 297.033293][ T6139] veth1_vlan: left promiscuous mode [ 297.033472][ T6139] veth0_vlan: left promiscuous mode [ 297.037188][ T30] audit: type=1326 audit(1765582674.268:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 297.038489][ T30] audit: type=1326 audit(1765582674.268:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 297.155264][ T7875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.697218][ T7886] loop3: detected capacity change from 0 to 1024 [ 297.727810][ T7886] EXT4-fs: Ignoring removed oldalloc option [ 297.766973][ T912] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 297.771568][ T7886] EXT4-fs: Ignoring removed bh option [ 297.835532][ T7886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.951033][ T912] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 297.971750][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.993948][ T912] usb 2-1: config 0 descriptor?? [ 298.030531][ T7886] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.424: Allocating blocks 497-513 which overlap fs metadata [ 298.062740][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.433'. [ 298.133975][ T7886] EXT4-fs (loop3): pa ffff8880324e3658: logic 256, phys. 385, len 8 [ 298.145240][ T7886] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 298.219691][ T912] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 298.228424][ T912] [drm:udl_init] *ERROR* Selecting channel failed [ 298.275272][ T912] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 298.282459][ T912] [drm] Initialized udl on minor 2 [ 298.301164][ T912] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 298.310642][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 298.329938][ T912] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 298.361103][ T912] usb 2-1: USB disconnect, device number 15 [ 298.367186][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.367805][ T6566] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 298.438599][ T6566] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 298.480478][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 298.899431][ T5995] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 299.067743][ T5995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.078336][ T5995] usb 4-1: config 0 has no interfaces? [ 299.084223][ T5995] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.093927][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.105545][ T5995] usb 4-1: config 0 descriptor?? [ 299.136785][ T7804] chnl_net:caif_netlink_parms(): no params data found [ 299.364616][ T912] usb 4-1: USB disconnect, device number 5 [ 299.444041][ T7917] binder: 7916:7917 ioctl c018620b 200000000640 returned -14 [ 299.479689][ T7896] wlan0 speed is unknown, defaulting to 1000 [ 301.125386][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.141023][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.148290][ T7804] bridge_slave_0: entered allmulticast mode [ 301.187194][ T7804] bridge_slave_0: entered promiscuous mode [ 301.251172][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.258455][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.316606][ T7804] bridge_slave_1: entered allmulticast mode [ 301.335367][ T7804] bridge_slave_1: entered promiscuous mode [ 301.615049][ T6139] IPVS: stop unused estimator thread 0... [ 301.643740][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.725955][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.553285][ T7804] team0: Port device team_slave_0 added [ 302.573847][ T7804] team0: Port device team_slave_1 added [ 302.677169][ T7938] netlink: 68 bytes leftover after parsing attributes in process `syz.2.443'. [ 302.811148][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.509249][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.541733][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.589530][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.596609][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.674507][ T7949] loop3: detected capacity change from 0 to 128 [ 303.703325][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.787767][ T7948] lo: entered promiscuous mode [ 303.830395][ T7950] lo: entered allmulticast mode [ 304.042985][ T30] audit: type=1326 audit(1765582681.278:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.119903][ T7804] hsr_slave_0: entered promiscuous mode [ 304.140646][ T7804] hsr_slave_1: entered promiscuous mode [ 304.144812][ T30] audit: type=1326 audit(1765582681.308:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.162638][ T7804] debugfs: 'hsr0' already exists in 'hsr' [ 304.214293][ T7804] Cannot create hsr debugfs directory [ 304.235987][ T30] audit: type=1326 audit(1765582681.308:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.259570][ T912] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 304.304708][ T30] audit: type=1326 audit(1765582681.308:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.337910][ T30] audit: type=1326 audit(1765582681.308:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.439454][ T912] usb 4-1: Using ep0 maxpacket: 8 [ 304.447352][ T912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 304.467905][ T912] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 304.494651][ T912] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 304.515906][ T30] audit: type=1326 audit(1765582681.318:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.543988][ T912] usb 4-1: language id specifier not provided by device, defaulting to English [ 304.585837][ T912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.596448][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.609805][ T30] audit: type=1326 audit(1765582681.318:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.699739][ T912] usb 4-1: Product: syz [ 304.704122][ T912] usb 4-1: Manufacturer: ë¿¥ [ 304.709058][ T912] usb 4-1: SerialNumber: syz [ 304.732513][ T30] audit: type=1326 audit(1765582681.318:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 304.839114][ T7970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.882343][ T7970] batadv_slave_0: entered promiscuous mode [ 305.171879][ T912] cdc_ncm 4-1:1.0: bind() failure [ 305.207095][ T912] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 305.221528][ T912] cdc_ncm 4-1:1.1: bind() failure [ 305.256983][ T912] usb 4-1: USB disconnect, device number 6 [ 306.258980][ T7973] input: syz0 as /devices/virtual/input/input9 [ 306.473393][ T7990] loop1: detected capacity change from 0 to 1024 [ 306.499313][ T5995] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 306.542964][ T7990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.617202][ T30] audit: type=1800 audit(1765582683.848:87): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.457" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 306.683512][ T7804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.694234][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 306.694288][ T5995] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 306.694313][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.702103][ T5995] usb 3-1: config 0 descriptor?? [ 306.702941][ T7985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 306.709543][ T8000] netlink: 68 bytes leftover after parsing attributes in process `syz.1.457'. [ 306.753362][ T7804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.881163][ T8006] loop3: detected capacity change from 0 to 8 [ 306.882493][ T7804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.914235][ T8006] unable to read inode lookup table [ 306.948514][ T7804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.003170][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.170621][ T5995] hid-rmi 0003:17EF:6085.0001: item fetching failed at offset 1/4 [ 307.195829][ T8018] loop3: detected capacity change from 0 to 512 [ 307.198207][ T5995] hid-rmi 0003:17EF:6085.0001: parse failed [ 307.238024][ T8018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.250191][ T5995] hid-rmi 0003:17EF:6085.0001: probe with driver hid-rmi failed with error -22 [ 307.331730][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.348142][ T8018] EXT4-fs (loop3): 1 truncate cleaned up [ 307.363162][ T6019] usb 3-1: USB disconnect, device number 10 [ 307.411769][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.447533][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.477599][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.485066][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.733320][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.740633][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.921590][ T8034] EXT4-fs error (device loop3): __ext4_iget:5426: inode #16: block 538: comm syz.3.462: invalid block [ 308.006928][ T8034] EXT4-fs (loop3): Remounting filesystem read-only [ 310.058050][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.158860][ T8040] IPv6: sit1: Disabled Multicast RS [ 310.171372][ T8040] sit1: entered allmulticast mode [ 310.587381][ T8056] loop3: detected capacity change from 0 to 512 [ 310.768818][ T8056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.789611][ T8056] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.841265][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.960875][ T8062] loop1: detected capacity change from 0 to 2048 [ 311.023673][ T8062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.434158][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.459705][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 315.492632][ T7804] veth0_vlan: entered promiscuous mode [ 315.518401][ T7804] veth1_vlan: entered promiscuous mode [ 315.556327][ T7804] veth0_macvtap: entered promiscuous mode [ 315.614825][ T7804] veth1_macvtap: entered promiscuous mode [ 315.702170][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.775501][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.828337][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.848452][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.900176][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.946397][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.214893][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.257366][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.363920][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.345951][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.352905][ T8119] loop4: detected capacity change from 0 to 128 [ 319.461261][ T8119] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.618593][ T8119] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.776941][ T5951] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 319.847052][ T5951] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.867945][ T8123] loop3: detected capacity change from 0 to 2048 [ 320.032759][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.178009][ T30] audit: type=1326 audit(1765582697.408:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.247524][ T5826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.260277][ T30] audit: type=1326 audit(1765582697.408:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.346770][ T30] audit: type=1326 audit(1765582697.408:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.427145][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.444759][ T30] audit: type=1326 audit(1765582697.408:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.484589][ T30] audit: type=1326 audit(1765582697.408:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.511327][ T30] audit: type=1326 audit(1765582697.408:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.533912][ T30] audit: type=1326 audit(1765582697.408:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.599274][ T30] audit: type=1326 audit(1765582697.408:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.643455][ T30] audit: type=1326 audit(1765582697.408:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4d58f749 code=0x7ffc0000 [ 320.764124][ T8146] loop3: detected capacity change from 0 to 512 [ 320.821112][ T8146] EXT4-fs: Ignoring removed orlov option [ 320.912173][ T8146] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 320.982452][ T8146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 321.023162][ T8146] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.493: corrupted in-inode xattr: e_value size too large [ 321.034361][ T8156] loop6: detected capacity change from 0 to 128 [ 321.069293][ T30] audit: type=1326 audit(1765582698.298:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.2.495" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e35d8f749 code=0x0 [ 321.155568][ T8146] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.493: couldn't read orphan inode 15 (err -117) [ 321.173139][ T8156] x_tables: ip_tables: ah match: only valid for protocol 51 [ 321.806870][ T8146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.402046][ T8164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.613935][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.630052][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.861982][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.878888][ T8187] loop3: detected capacity change from 0 to 1024 [ 324.959915][ T8189] loop1: detected capacity change from 0 to 128 [ 324.998133][ T8189] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.025106][ T8187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 325.096830][ T8189] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.162378][ T8187] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.259796][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 326.250059][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.624877][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.220479][ T8217] loop1: detected capacity change from 0 to 1024 [ 327.263068][ T8217] EXT4-fs: inline encryption not supported [ 327.381449][ T8217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.751658][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 329.159423][ T6048] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 329.386466][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.101172][ T6048] usb 4-1: Using ep0 maxpacket: 16 [ 330.269432][ T6048] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.318716][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.347661][ T6048] usb 4-1: Product: syz [ 330.352691][ T6048] usb 4-1: Manufacturer: syz [ 330.357746][ T6048] usb 4-1: SerialNumber: syz [ 330.591633][ T30] audit: type=1326 audit(1765582707.828:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 331.309648][ T30] audit: type=1326 audit(1765582707.848:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dbf98f34b code=0x7ffc0000 [ 331.337699][ T8254] loop6: detected capacity change from 0 to 1024 [ 331.418765][ T30] audit: type=1326 audit(1765582707.848:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 331.469226][ T6048] r8152-cfgselector 4-1: Unknown version 0x0000 [ 331.493180][ T6048] r8152-cfgselector 4-1: config 0 descriptor?? [ 331.531405][ T30] audit: type=1326 audit(1765582707.848:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 331.545834][ T6048] r8152-cfgselector 4-1: can't set config #0, error -71 [ 331.576449][ T8269] loop4: detected capacity change from 0 to 512 [ 331.604826][ T8269] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 331.614820][ T6140] hfsplus: b-tree write err: -5, ino 4 [ 331.683496][ T8272] loop3: detected capacity change from 0 to 128 [ 331.712275][ T30] audit: type=1326 audit(1765582707.848:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 331.737479][ T8269] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.522: iget: bogus i_mode (5) [ 331.742209][ T8269] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.522: couldn't read orphan inode 15 (err -117) [ 331.751335][ T30] audit: type=1326 audit(1765582707.848:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 331.764626][ T6048] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 331.787568][ T30] audit: type=1326 audit(1765582707.848:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 331.827093][ T8272] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 333.029237][ T8277] kthread_run failed with err -4 [ 333.540596][ T8272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.593372][ T8269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.395240][ T8284] loop6: detected capacity change from 0 to 512 [ 334.416313][ T8284] EXT4-fs: Ignoring removed oldalloc option [ 334.423292][ T8284] ext4: Unknown parameter 'dont_appraise' [ 335.320549][ T8269] ext2 filesystem being mounted at /108/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.661500][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.673548][ T8294] loop3: detected capacity change from 0 to 1024 [ 340.620112][ T30] audit: type=1326 audit(1765582717.858:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 340.729358][ T30] audit: type=1326 audit(1765582717.858:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 340.863379][ T30] audit: type=1326 audit(1765582717.858:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 340.986763][ T8338] loop4: detected capacity change from 0 to 16 [ 341.007830][ T30] audit: type=1326 audit(1765582717.858:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 341.078385][ T8338] erofs (device loop4): mounted with root inode @ nid 36. [ 341.159316][ T30] audit: type=1326 audit(1765582717.858:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 341.307549][ T30] audit: type=1326 audit(1765582717.858:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 344.751995][ T30] audit: type=1326 audit(1765582717.858:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 344.919450][ T30] audit: type=1326 audit(1765582717.858:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 345.026626][ T30] audit: type=1326 audit(1765582717.858:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 345.169255][ T30] audit: type=1326 audit(1765582717.858:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbf98f749 code=0x7ffc0000 [ 348.033308][ T8376] xt_CONNSECMARK: invalid mode: 66 [ 349.376433][ T8389] loop3: detected capacity change from 0 to 512 [ 351.446697][ T8389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.484995][ T8400] loop1: detected capacity change from 0 to 512 [ 351.532691][ T8389] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.547332][ T8400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 351.622137][ T8400] EXT4-fs (loop1): 1 truncate cleaned up [ 351.700878][ T8400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.731613][ T8389] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz.3.550: Directory hole found for htree leaf block 0 [ 352.961593][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.981436][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.990805][ T8430] loop6: detected capacity change from 0 to 8 [ 357.644003][ T8446] loop6: detected capacity change from 0 to 1024 [ 357.747661][ T8453] loop3: detected capacity change from 0 to 512 [ 357.792565][ T8444] 9p: Bad value for 'rfdno' [ 357.866227][ T8453] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.566: corrupted in-inode xattr: invalid ea_ino [ 357.896202][ T8453] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.566: couldn't read orphan inode 15 (err -117) [ 357.915132][ T8453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.067879][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.473300][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 363.229739][ T8480] binder: 8479:8480 ioctl 4018620d 2000000000c0 returned -16 [ 363.669798][ T8484] loop3: detected capacity change from 0 to 2048 [ 368.760800][ T6152] Bluetooth: hci5: Frame reassembly failed (-84) [ 368.863262][ T8535] loop1: detected capacity change from 0 to 47 [ 368.910262][ T8535] minix: Unknown parameter '/dev/ptmx' [ 371.145484][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 371.145526][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 373.448774][ T8539] loop4: detected capacity change from 0 to 32768 [ 374.053477][ T8572] netlink: 388 bytes leftover after parsing attributes in process `syz.3.601'. [ 374.080013][ T8572] lo: entered promiscuous mode [ 374.112884][ T8572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.833712][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 384.022154][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.043434][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.965855][ T8632] loop4: detected capacity change from 0 to 256 [ 385.197951][ T8632] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.489354][ T8598] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 387.684390][ T8598] usb 5-1: config 0 has no interfaces? [ 387.690502][ T8598] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 387.750049][ T8598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.872568][ T8598] usb 5-1: config 0 descriptor?? [ 387.876754][ T8657] loop6: detected capacity change from 0 to 1024 [ 387.889378][ T8598] usb 5-1: can't set config #0, error -71 [ 387.909905][ T8598] usb 5-1: USB disconnect, device number 9 [ 388.142713][ T8662] faux_driver vgem: [drm] Unknown color mode 511; guessing buffer size. [ 391.816723][ T5993] hfsplus: b-tree write err: -5, ino 4 [ 395.947857][ T8699] loop6: detected capacity change from 0 to 164 [ 396.551563][ T8705] loop6: detected capacity change from 0 to 8 [ 396.733168][ T8705] SQUASHFS error: Failed to read block 0x4e8: -5 [ 397.359737][ T6119] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 397.629897][ T6119] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 397.792116][ T6119] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.804504][ T6119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.815423][ T6119] usb 7-1: Product: syz [ 397.820802][ T6119] usb 7-1: Manufacturer: syz [ 397.826636][ T6119] usb 7-1: SerialNumber: syz [ 397.852618][ T6119] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.882672][ T6174] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 398.122062][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.170028][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.226489][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.278759][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.331681][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.403310][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.446476][ T8396] usb 7-1: USB disconnect, device number 2 [ 398.970952][ T6174] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 399.006990][ T6174] ath9k_htc: Failed to initialize the device [ 399.042775][ T8396] usb 7-1: ath9k_htc: USB layer deinitialized [ 401.415687][ T8745] loop4: detected capacity change from 0 to 128 [ 401.468888][ T8745] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 401.528226][ T8745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.462930][ T8737] loop6: detected capacity change from 0 to 32768 [ 403.564516][ T8737] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 403.689257][ T8737] XFS (loop6): Ending clean mount [ 403.690078][ T8773] loop4: detected capacity change from 0 to 64 [ 403.745495][ T8737] XFS (loop6): Quotacheck needed: Please wait. [ 403.799974][ T8773] hfs: unable to open catalog tree [ 405.538347][ T8737] XFS (loop6): Quotacheck: Done. [ 405.816583][ T7804] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 406.159892][ T5951] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 406.451194][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 406.500765][ T5951] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 406.532850][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.548175][ T5951] usb 3-1: config 0 descriptor?? [ 406.592242][ T5951] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 407.298056][ T8797] loop6: detected capacity change from 0 to 8 [ 407.358205][ T8797] process 'syz.6.660' launched './file1' with NULL argv: empty string added [ 407.378733][ T8797] SQUASHFS error: zstd decompression error: 10 [ 407.385834][ T8797] SQUASHFS error: zstd decompression failed, data probably corrupt [ 407.395051][ T8797] SQUASHFS error: Failed to read block 0x60: -5 [ 407.407515][ T8797] SQUASHFS error: zstd decompression error: 10 [ 407.415446][ T8797] SQUASHFS error: zstd decompression failed, data probably corrupt [ 407.425531][ T8797] SQUASHFS error: Failed to read block 0x60: -5 [ 408.002645][ T8802] FAULT_INJECTION: forcing a failure. [ 408.002645][ T8802] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 408.049481][ T8802] CPU: 1 UID: 0 PID: 8802 Comm: syz.3.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.049517][ T8802] Tainted: [L]=SOFTLOCKUP [ 408.049525][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.049550][ T8802] Call Trace: [ 408.049566][ T8802] [ 408.049576][ T8802] dump_stack_lvl+0x189/0x250 [ 408.049609][ T8802] ? __pfx____ratelimit+0x10/0x10 [ 408.049634][ T8802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.049660][ T8802] ? __pfx__printk+0x10/0x10 [ 408.049689][ T8802] ? __might_fault+0xb0/0x130 [ 408.049741][ T8802] should_fail_ex+0x414/0x560 [ 408.049780][ T8802] _copy_from_user+0x2d/0xb0 [ 408.049806][ T8802] __sys_bpf+0x1e3/0x860 [ 408.049838][ T8802] ? __pfx___sys_bpf+0x10/0x10 [ 408.049885][ T8802] ? ksys_write+0x22a/0x250 [ 408.049909][ T8802] ? __pfx_ksys_write+0x10/0x10 [ 408.049938][ T8802] __x64_sys_bpf+0x7c/0x90 [ 408.049965][ T8802] do_syscall_64+0xfa/0xf80 [ 408.049992][ T8802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.050013][ T8802] ? clear_bhb_loop+0x60/0xb0 [ 408.050038][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.050063][ T8802] RIP: 0033:0x7f8db918f749 [ 408.050082][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.050101][ T8802] RSP: 002b:00007f8db9f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.050123][ T8802] RAX: ffffffffffffffda RBX: 00007f8db93e5fa0 RCX: 00007f8db918f749 [ 408.050138][ T8802] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 408.050151][ T8802] RBP: 00007f8db9f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 408.050164][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.050176][ T8802] R13: 00007f8db93e6038 R14: 00007f8db93e5fa0 R15: 00007ffcf3ea43c8 [ 408.050210][ T8802] [ 408.958455][ T24] usb 3-1: USB disconnect, device number 11 [ 409.446254][ T8809] loop6: detected capacity change from 0 to 32768 [ 409.810658][ T8809] JBD2: Ignoring recovery information on journal [ 409.986977][ T8813] loop4: detected capacity change from 0 to 131072 [ 411.565529][ T8813] F2FS-fs (loop4): invalid crc value [ 411.652585][ T8813] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 411.664889][ T8813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 411.682067][ T8809] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 411.692931][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 411.741918][ T8809] JBD2: bad block at offset 32 [ 411.801598][ T8809] JBD2: journal reset failed [ 411.821921][ T8809] (syz.6.664,8809,1):ocfs2_journal_load:1160 ERROR: Failed to load journal! [ 411.854359][ T8809] (syz.6.664,8809,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 412.314609][ T6001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.652340][ T8155] syz_tun (unregistering): left allmulticast mode [ 412.961376][ T8841] loop4: detected capacity change from 0 to 1024 [ 412.972870][ T8841] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 412.982123][ T8841] hfsplus: failed to load root directory [ 413.031193][ T8836] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.098346][ T8836] kvm: pic: non byte read [ 413.115970][ T8836] loop6: detected capacity change from 0 to 128 [ 413.154663][ T8836] syz.6.673: attempt to access beyond end of device [ 413.154663][ T8836] loop6: rw=8388608, sector=2078, nr_sectors = 1 limit=128 [ 413.183061][ T1304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.198219][ T8836] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000819) [ 413.226233][ T8836] FAT-fs (loop6): Filesystem has been set read-only [ 413.261392][ T8836] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000819) [ 413.306576][ T8836] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000819) [ 413.512941][ T1304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.775396][ T8848] loop3: detected capacity change from 0 to 1024 [ 413.785140][ T8848] EXT4-fs: Invalid want_extra_isize 384 [ 413.798986][ T1304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.053798][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.066257][ T8848] netlink: 56 bytes leftover after parsing attributes in process `syz.3.679'. [ 414.784185][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.794003][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.803867][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.815020][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.619417][ T8856] netlink: 64 bytes leftover after parsing attributes in process `syz.3.679'. [ 416.671449][ T1304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.720728][ T52] Bluetooth: hci1: command tx timeout [ 417.974250][ T8853] wlan0 speed is unknown, defaulting to 1000 [ 418.365935][ T8863] loop6: detected capacity change from 0 to 262144 [ 418.376611][ T8863] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.681 (8863) [ 418.395429][ T8863] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 418.407415][ T8863] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 419.157352][ T8863] BTRFS info (device loop6): enabling ssd optimizations [ 419.166349][ T8863] BTRFS info (device loop6): enabling free space tree [ 419.345265][ T1304] bridge_slave_1: left allmulticast mode [ 419.379494][ T1304] bridge_slave_1: left promiscuous mode [ 419.386628][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.658335][ T1304] bridge_slave_0: left allmulticast mode [ 419.676563][ T1304] bridge_slave_0: left promiscuous mode [ 419.770982][ T52] Bluetooth: hci1: command 0x041b tx timeout [ 420.095469][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.362994][ T7804] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 420.828943][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 420.828962][ T30] audit: type=1326 audit(1765582798.058:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.6.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa9f18f749 code=0x0 [ 421.850478][ T5825] Bluetooth: hci1: command 0x041b tx timeout [ 422.143732][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.186998][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.211567][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.996133][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.008863][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 425.309223][ T5825] Bluetooth: hci1: command 0x041b tx timeout [ 425.345753][ T52] Bluetooth: hci5: command tx timeout [ 426.050430][ T8930] loop6: detected capacity change from 0 to 512 [ 426.316022][ T8930] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 426.448912][ T8930] EXT4-fs (loop6): 1 truncate cleaned up [ 426.460841][ T8930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.137434][ T52] Bluetooth: hci1: command 0x041b tx timeout [ 428.144975][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 428.466140][ T7804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.627151][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.293098][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 430.330599][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.364983][ T1304] bond0 (unregistering): Released all slaves [ 430.907671][ T1304] bond1 (unregistering): Released all slaves [ 431.086707][ T8935] kthread_run failed with err -4 [ 431.440265][ T8908] wlan0 speed is unknown, defaulting to 1000 [ 432.329642][ T5825] Bluetooth: hci5: command 0x041b tx timeout [ 432.958919][ T8853] chnl_net:caif_netlink_parms(): no params data found [ 433.520766][ T6147] netdevice_event(NETDEV_UNREGISTER) on ffff8880119d0000 start [ 434.419302][ T5825] Bluetooth: hci5: command 0x041b tx timeout [ 434.562132][ T6117] wlan0 speed is unknown, defaulting to 1000 [ 434.598730][ T6117] infiniband syz1: ib_query_port failed (-19) [ 434.840619][ T6147] netdevice_event(NETDEV_UNREGISTER) on ffff8880119d0000 end [ 435.069714][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.086050][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.098147][ T8853] bridge_slave_0: entered allmulticast mode [ 435.110166][ T8853] bridge_slave_0: entered promiscuous mode [ 435.195731][ T1304] hsr_slave_0: left promiscuous mode [ 435.233092][ T1304] hsr_slave_1: left promiscuous mode [ 435.250336][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.269640][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.288757][ T1304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.309292][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.391116][ T1304] veth1_macvtap: left promiscuous mode [ 435.403235][ T1304] veth0_macvtap: left promiscuous mode [ 435.519828][ T1304] veth1_vlan: left promiscuous mode [ 435.536952][ T1304] veth0_vlan: left promiscuous mode [ 436.219260][ T6566] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 436.395416][ T6566] usb 4-1: Using ep0 maxpacket: 8 [ 436.404208][ T6566] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.405314][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 436.415987][ T6566] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.416023][ T6566] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.448159][ T6566] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.464577][ T6566] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.475706][ T6566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.560605][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 436.701573][ T6566] usb 4-1: GET_CAPABILITIES returned 0 [ 436.708214][ T6566] usbtmc 4-1:16.0: can't read capabilities [ 436.726771][ T9003] loop4: detected capacity change from 0 to 512 [ 436.753310][ T9003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 436.814631][ T9003] EXT4-fs (loop4): 1 truncate cleaned up [ 436.823094][ T9003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.848441][ T30] audit: type=1800 audit(1765582814.078:118): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.705" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 436.872369][ T9003] EXT4-fs error (device loop4): __ext4_iget:5426: inode #12: block 2: comm syz.4.705: invalid block [ 436.913760][ T6566] usb 4-1: USB disconnect, device number 8 [ 437.490028][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.498895][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.529637][ T8853] bridge_slave_1: entered allmulticast mode [ 437.539022][ T8853] bridge_slave_1: entered promiscuous mode [ 437.614044][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.019496][ T9010] loop3: detected capacity change from 0 to 512 [ 438.113453][ T9010] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 439.726727][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.873414][ T8908] chnl_net:caif_netlink_parms(): no params data found [ 439.895871][ T9010] EXT4-fs (loop3): 1 truncate cleaned up [ 439.947037][ T9010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.158421][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.425765][ T8853] team0: Port device team_slave_0 added [ 440.450495][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.744908][ T8853] team0: Port device team_slave_1 added [ 441.064325][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.089173][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.149199][ T8853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.182319][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.199193][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.309272][ T8853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.340117][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.357990][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.380769][ T8908] bridge_slave_0: entered allmulticast mode [ 441.404186][ T8908] bridge_slave_0: entered promiscuous mode [ 441.462134][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.495317][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.519435][ T8908] bridge_slave_1: entered allmulticast mode [ 441.545930][ T8908] bridge_slave_1: entered promiscuous mode [ 441.899737][ T8908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.010108][ T8853] hsr_slave_0: entered promiscuous mode [ 442.021782][ T8853] hsr_slave_1: entered promiscuous mode [ 442.029567][ T8853] debugfs: 'hsr0' already exists in 'hsr' [ 442.036570][ T8853] Cannot create hsr debugfs directory [ 442.253584][ T8908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.077285][ T8908] team0: Port device team_slave_0 added [ 445.094214][ T8908] team0: Port device team_slave_1 added [ 445.463779][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.479256][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.599556][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.635583][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.791067][ T8908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.045565][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.075308][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.190508][ T8908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.816029][ T8908] hsr_slave_0: entered promiscuous mode [ 446.840622][ T8908] hsr_slave_1: entered promiscuous mode [ 446.848124][ T8908] debugfs: 'hsr0' already exists in 'hsr' [ 446.885358][ T8908] Cannot create hsr debugfs directory [ 447.083870][ T9089] loop4: detected capacity change from 0 to 4096 [ 450.511324][ T8853] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 450.580610][ T8853] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 450.751160][ T8853] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 450.799865][ T8853] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 452.347540][ T8908] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 452.705505][ T8908] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 452.748898][ T8908] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 452.810276][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.818093][ T8908] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 452.840966][ T9133] loop3: detected capacity change from 0 to 512 [ 452.897791][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.941491][ T9133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 452.972336][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.981368][ T6152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.046919][ T9133] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.728: bad orphan inode 131083 [ 453.096354][ T9133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.121062][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.131321][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.405142][ T8853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.647368][ T8908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.667654][ T5832] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 453.783766][ T9158] loop6: detected capacity change from 0 to 256 [ 453.795560][ T8908] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.816676][ T9158] exfat: Deprecated parameter 'namecase' [ 453.900333][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.909561][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.950300][ T9158] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 454.042957][ T9158] netlink: 260 bytes leftover after parsing attributes in process `syz.6.732'. [ 454.049916][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.061575][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.271430][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.275746][ T6027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.351641][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 455.404992][ T9182] trusted_key: syz.6.736 sent an empty control message without MSG_MORE. [ 455.576721][ T6027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.990115][ T8908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.109864][ T6027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.235054][ T6027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.285535][ T8853] veth0_vlan: entered promiscuous mode [ 456.370154][ T8853] veth1_vlan: entered promiscuous mode [ 456.758417][ T9076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.521457][ T9202] kthread_run failed with err -4 [ 458.892028][ T6027] bridge_slave_1: left allmulticast mode [ 458.913759][ T6027] bridge_slave_1: left promiscuous mode [ 458.945178][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.058623][ T6027] bridge_slave_0: left allmulticast mode [ 459.174562][ T6027] bridge_slave_0: left promiscuous mode [ 459.195341][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.070645][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.084488][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.100576][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.340388][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.381028][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.972160][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.985723][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.998589][ T6027] bond0 (unregistering): Released all slaves [ 462.104200][ T8853] veth0_macvtap: entered promiscuous mode [ 462.134537][ T8853] veth1_macvtap: entered promiscuous mode [ 462.159268][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 462.229296][ T9226] CIFS mount error: No usable UNC path provided in device string! [ 462.229296][ T9226] [ 462.239725][ T9226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 462.359456][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 462.424406][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 462.436949][ T24] usb 7-1: can't read configurations, error -61 [ 462.676100][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 463.190658][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 463.207909][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 463.227245][ T24] usb 7-1: can't read configurations, error -61 [ 463.238327][ T24] usb usb7-port1: attempt power cycle [ 463.356233][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.380136][ T8908] veth0_vlan: entered promiscuous mode [ 463.454005][ T6027] hsr_slave_0: left promiscuous mode [ 463.464105][ T6027] hsr_slave_1: left promiscuous mode [ 463.497885][ T6027] veth1_macvtap: left promiscuous mode [ 463.505850][ T6027] veth0_macvtap: left promiscuous mode [ 463.513115][ T6027] veth1_vlan: left promiscuous mode [ 463.520517][ T6027] veth0_vlan: left promiscuous mode [ 463.530580][ T52] Bluetooth: hci0: command tx timeout [ 463.619878][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 463.677977][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 463.703833][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 463.722327][ T24] usb 7-1: can't read configurations, error -61 [ 463.880451][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 463.922930][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 463.934094][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 463.959576][ T24] usb 7-1: can't read configurations, error -61 [ 463.975069][ T24] usb usb7-port1: unable to enumerate USB device [ 464.404960][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 464.468336][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 465.219349][ T5951] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 465.287858][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.383304][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.433739][ T5951] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 465.491909][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.510172][ T8908] veth1_vlan: entered promiscuous mode [ 465.536760][ T5951] usb 5-1: config 0 descriptor?? [ 465.591136][ T1304] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.612176][ T52] Bluetooth: hci0: command tx timeout [ 465.634734][ T1304] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.648275][ T1304] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.674481][ T1304] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.967462][ T9264] loop6: detected capacity change from 0 to 4096 [ 465.984597][ T6027] IPVS: stop unused estimator thread 0... [ 466.084464][ T9266] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.098428][ T8908] veth0_macvtap: entered promiscuous mode [ 466.197530][ T9217] chnl_net:caif_netlink_parms(): no params data found [ 466.274019][ T8908] veth1_macvtap: entered promiscuous mode [ 466.312018][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.355484][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.493548][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.503979][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.513462][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.526371][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.529207][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.535464][ T9217] bridge_slave_0: entered allmulticast mode [ 466.551485][ T9217] bridge_slave_0: entered promiscuous mode [ 466.578368][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.598510][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.622606][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.642086][ T9217] bridge_slave_1: entered allmulticast mode [ 466.659867][ T24] usb 5-1: USB disconnect, device number 10 [ 466.677915][ T9217] bridge_slave_1: entered promiscuous mode [ 466.923233][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.178618][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.299155][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.352720][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.484991][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.571450][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.689373][ T52] Bluetooth: hci0: command tx timeout [ 468.056239][ T9217] team0: Port device team_slave_0 added [ 468.108218][ T9298] loop6: detected capacity change from 0 to 32768 [ 468.188420][ T9217] team0: Port device team_slave_1 added [ 468.214387][ T9306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.230766][ T9306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.244390][ T9306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.255809][ T9306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.554290][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.575779][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.601182][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.632231][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.875199][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.904860][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.914006][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.924938][ T9318] loop7: detected capacity change from 0 to 128 [ 468.946865][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.968999][ T9318] vfat: Unknown parameter 'fm' [ 469.238240][ T9319] loop7: detected capacity change from 0 to 8192 [ 469.260258][ T9319] vfat: Unknown parameter 'À' [ 469.367622][ T9217] hsr_slave_0: entered promiscuous mode [ 469.378668][ T9217] hsr_slave_1: entered promiscuous mode [ 469.388497][ T9217] debugfs: 'hsr0' already exists in 'hsr' [ 469.395165][ T9217] Cannot create hsr debugfs directory [ 469.565301][ T9314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.574494][ T9314] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 469.660203][ T9314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 469.668042][ T9314] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 469.708487][ T9314] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 469.715823][ T9314] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 469.750803][ T9314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 469.758728][ T9314] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 469.769910][ C1] ------------[ cut here ]------------ [ 469.776156][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 469.783748][ C1] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd20/0xf90, CPU#1: kworker/u8:22/6129 [ 469.795885][ C1] Modules linked in: [ 469.800886][ C1] CPU: 1 UID: 0 PID: 6129 Comm: kworker/u8:22 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.812730][ C1] Tainted: [L]=SOFTLOCKUP [ 469.817526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.829550][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 469.838406][ C1] RIP: 0010:__queue_work+0xd4b/0xf90 [ 469.844074][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e6 68 9d 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 3a [ 469.867782][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010086 [ 469.875383][ C1] RAX: 1ffff1100a96f951 RBX: 0000000000000008 RCX: ffff88802c823d00 [ 469.885391][ C1] RDX: ffff888030393978 RSI: ffffffff8a55b780 RDI: ffffffff8f851210 [ 469.894005][ C1] RBP: 0000000000000100 R08: ffffffff8f822a77 R09: 1ffffffff1f0454e [ 469.903100][ C1] R10: dffffc0000000000 R11: ffffffff818ab820 R12: dffffc0000000000 [ 469.912071][ C1] R13: ffff888054b7ca88 R14: ffffffff8f851210 R15: ffff888030393978 [ 469.921739][ C1] FS: 0000000000000000(0000) GS:ffff888125f31000(0000) knlGS:0000000000000000 [ 469.931572][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.939057][ C1] CR2: 0000001b2dffaff8 CR3: 0000000076a60000 CR4: 00000000003526f0 [ 469.947934][ C1] Call Trace: [ 469.951601][ C1] [ 469.955091][ C1] call_timer_fn+0x16e/0x590 [ 469.960549][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 469.967021][ C1] ? call_timer_fn+0xbe/0x590 [ 469.972212][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 469.978037][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 469.983900][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 469.989855][ C1] __run_timer_base+0x646/0x860 [ 469.995972][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 470.002205][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 470.009641][ C1] run_timer_softirq+0xb7/0x180 [ 470.015590][ C1] handle_softirqs+0x27d/0x850 [ 470.021183][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 470.026651][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 470.033296][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 470.039681][ C1] __irq_exit_rcu+0xca/0x1f0 [ 470.044422][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 470.050523][ C1] irq_exit_rcu+0x9/0x30 [ 470.055126][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 470.061758][ C1] [ 470.065448][ C1] [ 470.068594][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.075257][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 470.082419][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 60 4c d7 10 4b 7a b4 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 470.107750][ C1] RSP: 0018:ffffc9000b8873f8 EFLAGS: 00000283 [ 470.115514][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 470.124991][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df41a60 [ 470.134228][ C1] RBP: ffffffff81743f85 R08: 0000000000000000 R09: 0000000000000000 [ 470.142705][ C1] R10: ffffc9000b8875d8 R11: ffffffff81ada980 R12: 0000000000000002 [ 470.152002][ C1] R13: ffffffff8df41a60 R14: 0000000000000000 R15: 0000000000000000 [ 470.161771][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 470.167073][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.175216][ C1] lock_acquire+0x5f/0x340 [ 470.180788][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 470.187127][ C1] ? __kasan_slab_free+0x5c/0x80 [ 470.192274][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 470.198358][ C1] unwind_next_frame+0xc2/0x23d0 [ 470.203788][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 470.211093][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 470.216894][ C1] ? kasan_save_free_info+0x46/0x50 [ 470.222679][ C1] ? __kasan_slab_free+0x5c/0x80 [ 470.229836][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.236820][ C1] arch_stack_walk+0x11c/0x150 [ 470.242748][ C1] ? __kasan_slab_free+0x5c/0x80 [ 470.248520][ C1] stack_trace_save+0x9c/0xe0 [ 470.254208][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 470.260420][ C1] ? consume_skb+0x9e/0xf0 [ 470.265248][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 470.272238][ C1] ? process_one_work+0x93a/0x15a0 [ 470.279390][ C1] ? worker_thread+0x9b0/0xee0 [ 470.285364][ C1] ? kthread+0x711/0x8a0 [ 470.290266][ C1] ? ret_from_fork+0x599/0xb30 [ 470.296018][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 470.301231][ C1] kasan_save_track+0x3e/0x80 [ 470.306579][ C1] ? kasan_save_track+0x3e/0x80 [ 470.312954][ C1] ? kasan_save_free_info+0x46/0x50 [ 470.318733][ C1] ? __kasan_slab_free+0x5c/0x80 [ 470.324931][ C1] kasan_save_free_info+0x46/0x50 [ 470.330300][ C1] __kasan_slab_free+0x5c/0x80 [ 470.335922][ C1] kmem_cache_free+0x197/0x620 [ 470.341732][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 470.347960][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 470.354405][ C1] ? process_one_work+0x868/0x15a0 [ 470.360378][ C1] process_one_work+0x93a/0x15a0 [ 470.365829][ C1] ? __pfx_process_one_work+0x10/0x10 [ 470.372316][ C1] ? assign_work+0x3c7/0x5b0 [ 470.377923][ C1] worker_thread+0x9b0/0xee0 [ 470.384856][ C1] kthread+0x711/0x8a0 [ 470.389606][ C1] ? __pfx_worker_thread+0x10/0x10 [ 470.394895][ C1] ? __pfx_kthread+0x10/0x10 [ 470.399577][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.405669][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 470.412006][ C1] ? __pfx_kthread+0x10/0x10 [ 470.418228][ C1] ret_from_fork+0x599/0xb30 [ 470.423405][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 470.429527][ C1] ? __switch_to_asm+0x39/0x70 [ 470.435453][ C1] ? __switch_to_asm+0x33/0x70 [ 470.440943][ C1] ? __pfx_kthread+0x10/0x10 [ 470.446481][ C1] ret_from_fork_asm+0x1a/0x30 [ 470.451865][ C1] [ 470.455208][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 470.464713][ C1] CPU: 1 UID: 0 PID: 6129 Comm: kworker/u8:22 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.477228][ C1] Tainted: [L]=SOFTLOCKUP [ 470.483115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.496651][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 470.505574][ C1] Call Trace: [ 470.509713][ C1] [ 470.513406][ C1] dump_stack_lvl+0x99/0x250 [ 470.518349][ C1] ? __asan_memcpy+0x40/0x70 [ 470.524496][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.531934][ C1] ? __pfx__printk+0x10/0x10 [ 470.537170][ C1] vpanic+0x237/0x6d0 [ 470.541495][ C1] ? __pfx_vpanic+0x10/0x10 [ 470.547200][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 470.553501][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 470.560002][ C1] panic+0xb9/0xc0 [ 470.564138][ C1] ? __pfx_panic+0x10/0x10 [ 470.569568][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 470.575909][ C1] __warn+0x317/0x4b0 [ 470.580551][ C1] ? __queue_work+0xd20/0xf90 [ 470.585716][ C1] ? __queue_work+0xd20/0xf90 [ 470.590679][ C1] __report_bug+0x288/0x500 [ 470.596879][ C1] ? __queue_work+0xd20/0xf90 [ 470.602737][ C1] ? __pfx___report_bug+0x10/0x10 [ 470.609791][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 470.615741][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 470.621856][ C1] report_bug_entry+0x19a/0x290 [ 470.627202][ C1] ? __queue_work+0xd4b/0xf90 [ 470.632722][ C1] ? __queue_work+0xd50/0xf90 [ 470.638038][ C1] handle_bug+0xca/0x200 [ 470.642806][ C1] exc_invalid_op+0x1a/0x50 [ 470.647919][ C1] asm_exc_invalid_op+0x1a/0x20 [ 470.654957][ C1] RIP: 0010:__queue_work+0xd4b/0xf90 [ 470.661389][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e6 68 9d 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 3a [ 470.684404][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010086 [ 470.696656][ C1] RAX: 1ffff1100a96f951 RBX: 0000000000000008 RCX: ffff88802c823d00 [ 470.705189][ C1] RDX: ffff888030393978 RSI: ffffffff8a55b780 RDI: ffffffff8f851210 [ 470.715377][ C1] RBP: 0000000000000100 R08: ffffffff8f822a77 R09: 1ffffffff1f0454e [ 470.724429][ C1] R10: dffffc0000000000 R11: ffffffff818ab820 R12: dffffc0000000000 [ 470.734542][ C1] R13: ffff888054b7ca88 R14: ffffffff8f851210 R15: ffff888030393978 [ 470.743704][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 470.751503][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 470.757776][ C1] call_timer_fn+0x16e/0x590 [ 470.763194][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 470.770435][ C1] ? call_timer_fn+0xbe/0x590 [ 470.775667][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 470.781673][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 470.787120][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 470.793437][ C1] __run_timer_base+0x646/0x860 [ 470.800684][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 470.807230][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 470.817357][ C1] run_timer_softirq+0xb7/0x180 [ 470.822534][ C1] handle_softirqs+0x27d/0x850 [ 470.827903][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 470.833226][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 470.839355][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 470.845601][ C1] __irq_exit_rcu+0xca/0x1f0 [ 470.851630][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 470.858156][ C1] irq_exit_rcu+0x9/0x30 [ 470.862555][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 470.868604][ C1] [ 470.872286][ C1] [ 470.876039][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.884652][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 470.891329][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 60 4c d7 10 4b 7a b4 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 470.915160][ C1] RSP: 0018:ffffc9000b8873f8 EFLAGS: 00000283 [ 470.923094][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 470.932769][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df41a60 [ 470.943015][ C1] RBP: ffffffff81743f85 R08: 0000000000000000 R09: 0000000000000000 [ 470.954582][ C1] R10: ffffc9000b8875d8 R11: ffffffff81ada980 R12: 0000000000000002 [ 470.963796][ C1] R13: ffffffff8df41a60 R14: 0000000000000000 R15: 0000000000000000 [ 470.973636][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 470.979943][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.988296][ C1] lock_acquire+0x5f/0x340 [ 470.993546][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 471.000949][ C1] ? __kasan_slab_free+0x5c/0x80 [ 471.007876][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 471.015762][ C1] unwind_next_frame+0xc2/0x23d0 [ 471.022651][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 471.028532][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 471.034226][ C1] ? kasan_save_free_info+0x46/0x50 [ 471.040109][ C1] ? __kasan_slab_free+0x5c/0x80 [ 471.046938][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.053922][ C1] arch_stack_walk+0x11c/0x150 [ 471.060619][ C1] ? __kasan_slab_free+0x5c/0x80 [ 471.066127][ C1] stack_trace_save+0x9c/0xe0 [ 471.071288][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 471.077147][ C1] ? consume_skb+0x9e/0xf0 [ 471.082486][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 471.088515][ C1] ? process_one_work+0x93a/0x15a0 [ 471.094913][ C1] ? worker_thread+0x9b0/0xee0 [ 471.101325][ C1] ? kthread+0x711/0x8a0 [ 471.106426][ C1] ? ret_from_fork+0x599/0xb30 [ 471.112229][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 471.117912][ C1] kasan_save_track+0x3e/0x80 [ 471.124218][ C1] ? kasan_save_track+0x3e/0x80 [ 471.130126][ C1] ? kasan_save_free_info+0x46/0x50 [ 471.137066][ C1] ? __kasan_slab_free+0x5c/0x80 [ 471.143181][ C1] kasan_save_free_info+0x46/0x50 [ 471.150946][ C1] __kasan_slab_free+0x5c/0x80 [ 471.156244][ C1] kmem_cache_free+0x197/0x620 [ 471.162683][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 471.169340][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 471.175674][ C1] ? process_one_work+0x868/0x15a0 [ 471.181368][ C1] process_one_work+0x93a/0x15a0 [ 471.186638][ C1] ? __pfx_process_one_work+0x10/0x10 [ 471.192510][ C1] ? assign_work+0x3c7/0x5b0 [ 471.197347][ C1] worker_thread+0x9b0/0xee0 [ 471.203147][ C1] kthread+0x711/0x8a0 [ 471.209379][ C1] ? __pfx_worker_thread+0x10/0x10 [ 471.215437][ C1] ? __pfx_kthread+0x10/0x10 [ 471.221430][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.228237][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 471.236097][ C1] ? __pfx_kthread+0x10/0x10 [ 471.240914][ C1] ret_from_fork+0x599/0xb30 [ 471.246432][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 471.251940][ C1] ? __switch_to_asm+0x39/0x70 [ 471.258342][ C1] ? __switch_to_asm+0x33/0x70 [ 471.264541][ C1] ? __pfx_kthread+0x10/0x10 [ 471.272336][ C1] ret_from_fork_asm+0x1a/0x30 [ 471.278556][ C1] [ 471.282053][ C1] Kernel Offset: disabled [ 471.286996][ C1] Rebooting in 86400 seconds..