last executing test programs: 7.73314689s ago: executing program 3 (id=2812): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000c00)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000340)={0x20, 0x16, 0x8, "07d6895a2e848fde"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.284996314s ago: executing program 4 (id=2820): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080), 0x8) syz_usb_connect(0x0, 0x47, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) 5.110592248s ago: executing program 0 (id=2822): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, r0) r1 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.635199338s ago: executing program 3 (id=2825): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xab46c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000001e40)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x8080) 4.490928691s ago: executing program 0 (id=2826): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x0) 4.172379498s ago: executing program 4 (id=2827): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r2], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044814}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x1, 0x300) socket$netlink(0x10, 0x3, 0x4) 3.967752413s ago: executing program 3 (id=2829): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'macvlan1\x00', 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x15) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x4, &(0x7f0000000340)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r6, 0xfff}, 0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.62991982s ago: executing program 4 (id=2832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 3.598238161s ago: executing program 2 (id=2833): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 3.544095492s ago: executing program 0 (id=2834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setuid(0xee01) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) 3.542918182s ago: executing program 4 (id=2835): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) 3.447437164s ago: executing program 4 (id=2836): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, r0) r1 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.808105558s ago: executing program 1 (id=2837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) open(0x0, 0x101000, 0x8a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6558}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x88f7, 0x5, 0x0, 0x3}}, {@generic={0x88f7}}}}, 0x1a) 2.669240491s ago: executing program 2 (id=2838): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xa2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0xc, 0xe8, 0x1, 0x5, [{@rand_addr=0x64010100, 0xe450}]}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x50, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x8, '\x00\x00\x00\x00\x00\x00'}, {0x0, 0x2}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 2.668483701s ago: executing program 3 (id=2839): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xab46c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000001e40)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x8080) 2.504409485s ago: executing program 1 (id=2840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, &(0x7f0000000000)="c8eb", 0x1001, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 2.465982306s ago: executing program 1 (id=2841): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000280)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x70) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nodiscard}, {@data_err_ignore}, {@data_err_abort}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x907811, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.371787568s ago: executing program 0 (id=2843): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044814}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x1, 0x300) socket$netlink(0x10, 0x3, 0x4) 1.483081258s ago: executing program 3 (id=2844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x5, 0x5, 'K'}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1.425527948s ago: executing program 0 (id=2845): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x42, 0x0, &(0x7f0000000140)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4607100701040000000000000002003e0001000080d8010000000000004000000000000000230200000000000008000000060038000300"], 0xe8) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.320194761s ago: executing program 1 (id=2846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002c00)=@newtfilter={0x1904, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18d4, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x43, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}, @TCA_CGROUP_ACT={0x410, 0x1, [@m_simple={0xe4, 0xf, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xfffffff8, 0x2, 0x5, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x3ff, 0x10000000, 0x9, 0x1}}, @TCA_DEF_DATA={0x9, 0x3, '&:&\\\x00'}]}, {0x7c, 0x6, "be44ea6125b64e633635f15406dfbff8f23ea8b12a0dbca057832a8f8fa7163d6fdb656cb460564bd2e9b449e0349dfbb4d52a6dca35024424ecc399f5ea60d2a4be7d01e48c2275830617dc8c797ab2bb14f2cd417cbe67bdac5cfb89dd194d5acb6e97f363d577e809abbb5eaa71d91e4ac6223626a785"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x5c, 0x9, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'policy\x00'}]}, {0x24, 0x6, "57b1cc3b2dbad13cca7a303cd021ea51767bb99e984d1c2e91adf26320901f37"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xd0, 0x1f, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '$[-:%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x80000001, 0x6, 0x1, 0x7}}, @TCA_DEF_DATA={0x10, 0x3, '/!])&!\x03( ^#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xf, 0x62, 0x1, 0x2, 0x3}}]}, {0x58, 0x6, "d81da2dd1b343631db2b2997dd124ac3f01f65707f3de67106b22f2b7872f107728e3e5acd7c11952b5af0d2b4a30ca4903f8a9a36c2bff2b5d029265991034cdeb201672007fbb6101c60713e36d1b22ef850ef"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x124, 0x1c, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x2, 0x5, 0x7fff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x5, 0x4, 0x991}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe0000, 0x6, 0x2, 0x5, 0x10}, 0x1c3}}]}, {0x9e, 0x6, "c54b199bac60a4cb1f188023ec452882412d5480be38213b15bfd75ee059ae84bbf9535bfd7630184aa005f0088deecd0703b0c0f2b432bfb84b0d6019619f7c98df233b52d93e472eed92351e4d03fb6c57a72748802d1ebec54a9cadb760eee9fb74540c8514ebf7d0ab6d8f617a8bbd2b82d56dd18455623e08e9f89b79aed6721b1d7921eb1c43944d1cee976d782f819b12448e0f4b5236"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd8, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeba}]}, {0xa1, 0x6, "6e133abf8cd054eed24f6d77f1483cf3576ffa8bc90136cb04dd4973f4c48d72b89fec0b2125267f1cc22367ae018172cded0a4b292ff1df1307c6aff35679fd6ecbe89ed2cdd401dc7064dfabe27da4ccbb90a12d75f34f90c669a94fe4fcad462b9d424dda2df3eb9a28fa56adce12e71a137d3b7adbcf3495aa4abcf001523ebd469124bf185b99b2abc3ec75c2687e1c69d960b90649fdaded4051"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_ACT={0x147c, 0x1, [@m_ctinfo={0x1048, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe63b}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x12c, 0x10, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}]}, {0xde, 0x6, "636ff9874b87f5b2e518317bbc5ba77d75bf637fc7ffac2b9530a812592313ab35d91c4b7192798aaf4b5cf3793ca84d7a6e62b90456e21ba10227053a8c7d0420bb1e2a05b790e607b1b58d083b2c4ec2623bd9a9abf8e0e0fed79405a4b7ac4c6e8b8380f9ecefa8f47bb22537334e9e3bcbd08375a1d790c0514b4847731be63951d97ea94f459eaa7938cbee4657b94f9f4143e7bc6ed761035b29f1e2aeeb209f2449ffd3f5eebe392e848af999d1b5d2def87b28d8e88f6739cc5b416123e633f2a8391dd397f414d624450508704aba6aec9f75531f2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x154, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x3, 0x20000000, 0x9, 0x1}, 0x2}}]}, {0x101, 0x6, "fa6b72639723bdc72817a44a98d014984416e9a0a9acb5e43f465a1ce8620d8c0a04af456bc2b9e5f5f6df83ec6915f9d6798723ba21285b565d9e4f31884e60a2690bf1d5a5c45f075cbc94a9f028a358115b06861c88081c22e79c41564af282d3368622ef5454d2cfac710e0a64cd7a7c9db3efaf7ec0509e400defce99d07a41d64811181c91853cc1768a8b2d1ab385ad7ac0840a9e1205e6b3b2638d164ee74e07bccdfbf3b884928f0fd5dd6b168a7c45e39745c8f552d04c7e4e3f49167db51d8c00b0e60391c65161d1853ce522fc87b82339db9750e1716ec25c0b4b5aa45ec80161fc01f49bb47f046ca495a1936771745d6f0b1164c346"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x15c, 0xf, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffe}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fffffff, 0xa3b1, 0x4, 0x0, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x6, 0x0, 0x3, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0xd7, 0x6, "d3a0369abefe543e2d5ae4b0af5feb7d51d46d0737ed4900b5b76190e696eb38c7c01902ab1b6a2d9619bde410097a02d938e2e83288fc857cd9bfec212e8a2e2dc69d0909307a605c57af2e44f64792076213bca45fc9b4a1d64f2120ec558ae2130cfe3fb1516758b5176d39cdb8a34baad33297d584d9a9393bc19992313c8cca34cd0d506e5b2f0b95999a9138f6efd04727c179373d0a3b29776ebe3a47babf7efd4e2c0cfd22b6fabc358c46a4696b4977b84dbe2c8fc4db3d5b3f4ceca8bf6220806f9168a224bf20f3f8b4af7bc1bc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x54, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5aac, 0x5, 0xe52, 0x8}, 0x3, r3}}]}, {0x5, 0x6, "16"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1904}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.284300382s ago: executing program 2 (id=2847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x3000, 0x1000, 0x8, 0x2, 0xfb, 0x10, 0x4, 0x4, 0x0, 0x2e, 0x8}, {0x5000, 0x2000, 0x9, 0x0, 0x40, 0xf5, 0x7d, 0x4, 0x5, 0x3, 0x8}, {0xeeef0000, 0xeeef0000, 0xb, 0x5, 0x6, 0x7, 0x40, 0x9, 0x1, 0xa7, 0x8, 0x81}, {0x26000, 0x3000, 0xd, 0x3, 0x4, 0x43, 0xb, 0xff, 0x1, 0xaf, 0xe, 0x11}, {0x58000, 0x2000, 0xb, 0x1, 0x15, 0x7, 0xa9, 0x8, 0x9, 0x83, 0xf6}, {0x40000, 0x26000, 0x8, 0x14, 0x4, 0x8, 0x7, 0xa0, 0x80, 0x10, 0x1, 0xc}, {0x41000, 0x8ac59f64341f8cf3, 0x3, 0x5, 0x7, 0x5, 0x7, 0x6, 0x5, 0x81, 0xff, 0x40}, {0x0, 0x1000, 0xf, 0xd, 0xf, 0x7, 0x4, 0x34, 0xda, 0x0, 0xd6, 0x9}, {0x5000, 0x30}, {0x1, 0xf}, 0x80000031, 0x0, 0x41000, 0x202024, 0x4, 0x1003, 0x2000, [0x6800000000000000, 0x2, 0x0, 0x10000000ff]}) 1.203127764s ago: executing program 3 (id=2848): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x9a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0xc, 0xe8, 0x1, 0x5, [{@rand_addr=0x64010100, 0xe450}]}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.064323977s ago: executing program 0 (id=2849): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, 0x0, 0x0) 1.064048377s ago: executing program 1 (id=2850): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 1.048674057s ago: executing program 2 (id=2851): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r0, 0xffffffffffffffff, 0x0) 783.454123ms ago: executing program 4 (id=2852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00008000000000000000020000000000000000005ff4f8b1202e3db6741dc34ab96f975eda0d15a9b63171b59c2a09adb61d9bb0065809da266b137b0cca3f9556fbe287d189b26b5675bc7640adc1fa0d7366675a8f8c8e"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000180000000600000000000000090000004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 755.077763ms ago: executing program 2 (id=2853): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, "b4bc323ef77d1f000071849800000000dfff00"}}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 556.366767ms ago: executing program 2 (id=2854): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xab46c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000001e40)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x8080) 0s ago: executing program 1 (id=2855): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044814}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x1, 0x300) socket$netlink(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): link: 56 bytes leftover after parsing attributes in process `syz.1.111'. [ 94.846734][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 94.853968][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 94.871177][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.123942][ T4709] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.162559][ T4709] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.255776][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.264236][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.305229][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.313070][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.320806][ T4709] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.439147][ T4717] device syzkaller0 entered promiscuous mode [ 95.455901][ T4700] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 95.466078][ T4700] BTRFS info (device loop4): turning on sync discard [ 95.473130][ T4700] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.482938][ T4700] BTRFS info (device loop4): use zstd compression, level 3 [ 95.490334][ T4700] BTRFS info (device loop4): turning on async discard [ 95.497323][ T4700] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 95.507988][ T4700] BTRFS info (device loop4): trying to use backup root at mount time [ 95.516109][ T4700] BTRFS info (device loop4): enabling auto defrag [ 95.520755][ T4707] netlink: 56 bytes leftover after parsing attributes in process `syz.1.111'. [ 95.522622][ T4700] BTRFS info (device loop4): using free space tree [ 95.538009][ T4700] BTRFS info (device loop4): has skinny extents [ 95.623223][ T4707] Zero length message leads to an empty skb [ 96.554450][ T4463] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 97.487414][ T4758] loop3: detected capacity change from 0 to 40427 [ 97.576448][ T4700] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 97.586963][ T4245] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 97.625341][ T4758] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 97.633357][ T4758] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 97.661141][ T4758] F2FS-fs (loop3): invalid crc value [ 97.671256][ T4700] BTRFS warning (device loop4): couldn't read tree root [ 97.679050][ T4700] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 97.689568][ T4700] BTRFS warning (device loop4): couldn't read tree root [ 98.067584][ T4758] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.218426][ T4700] BTRFS error (device loop4): open_ctree failed: -22 [ 98.284472][ T4758] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.291782][ T4758] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.433241][ T4764] overlayfs: failed to clone upperpath [ 99.220189][ T26] audit: type=1800 audit(1783065980.956:5): pid=4776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.120" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 99.504059][ T4189] attempt to access beyond end of device [ 99.504059][ T4189] loop3: rw=2049, want=40968, limit=40427 [ 100.533769][ T26] audit: type=1804 audit(1783065982.936:6): pid=4786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.128" name="bus" dev="ramfs" ino=35387 res=1 errno=0 [ 102.307788][ C1] sched: RT throttling activated [ 103.337394][ T4796] overlayfs: failed to clone upperpath [ 103.420885][ T26] audit: type=1804 audit(1783065982.956:7): pid=4786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.128" name="bus" dev="ramfs" ino=35387 res=1 errno=0 [ 103.604797][ T4795] loop2: detected capacity change from 0 to 32768 [ 103.648357][ T4795] ======================================================= [ 103.648357][ T4795] WARNING: The mand mount option has been deprecated and [ 103.648357][ T4795] and is ignored by this kernel. Remove the mand [ 103.648357][ T4795] option from the mount to silence this warning. [ 103.648357][ T4795] ======================================================= [ 103.683263][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.832425][ T4803] TC_ACT_REPEAT abuse ? [ 104.835442][ T4813] jfs_strtoUCS: char2uni returned -22. [ 104.841278][ T4813] charset = iso8859-3, char = 0xbe [ 105.399283][ T4812] virt_wifi0 speed is unknown, defaulting to 1000 [ 105.597227][ T4817] device syzkaller0 entered promiscuous mode [ 105.821850][ T4824] kvm: pic: non byte write [ 106.339279][ T4840] fuse: Bad value for 'fd' [ 109.097833][ T4872] ISOFS: Unable to identify CD-ROM format. [ 109.287918][ T26] audit: type=1326 audit(1783065991.626:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.4.148" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30a9d3ee59 code=0x0 [ 109.343135][ T4883] loop2: detected capacity change from 0 to 128 [ 109.374518][ T4885] device syzkaller0 entered promiscuous mode [ 109.379878][ T4264] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.393069][ T4885] tipc: Started in network mode [ 110.055337][ T4885] tipc: Node identity 2a618bfa6688, cluster identity 4711 [ 110.122770][ T4885] tipc: Enabled bearer , priority 0 [ 110.220792][ T4892] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.240104][ T4884] tipc: Resetting bearer [ 110.268308][ T4884] tipc: Disabling bearer [ 111.640849][ T4900] fuse: Bad value for 'fd' [ 111.708462][ T4264] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 111.732893][ T4264] usb 1-1: can't read configurations, error -71 [ 112.968361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.642077][ T4918] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 113.710891][ T4928] binder: 4919:4928 ioctl c0306201 0 returned -14 [ 114.410206][ T4918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.431813][ T4918] syz.4.163 (4918) used greatest stack depth: 20912 bytes left [ 114.443037][ T4926] device ipip0 entered promiscuous mode [ 114.481226][ T4926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.530186][ T4926] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 114.556487][ T4926] bond1: (slave ipip0): Error -95 calling set_mac_address [ 115.494943][ T4956] loop2: detected capacity change from 0 to 512 [ 115.748554][ T4956] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.759767][ T4956] ext4 filesystem being mounted at /syzcgroup/unified/syz2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 116.179702][ T4972] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-5-15-kasan/syz-executor /root/ci2-linux-5-15-kasan/syz-executor /newroot/syzcgroup/unified/syz2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 116.609636][ T4981] Set syz0 is full, maxelem 0 reached [ 117.694292][ T4984] Disabled LAPIC found during irq injection [ 122.339930][ T5062] device syzkaller0 entered promiscuous mode [ 122.444656][ T5071] 9pnet: Insufficient options for proto=fd [ 124.518199][ T5091] CIFS: VFS: Malformed UNC in devname [ 126.109935][ T5096] loop4: detected capacity change from 0 to 1024 [ 126.889694][ T5105] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.211680][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.107887][ T26] audit: type=1326 audit(1783066010.506:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.1.210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97e994fe59 code=0x0 [ 128.540739][ T5117] loop3: detected capacity change from 0 to 1024 [ 128.618000][ T5117] EXT4-fs (loop3): inline encryption not supported [ 128.791424][ T2240] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.858692][ T5117] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 129.037977][ T2240] usb 3-1: Using ep0 maxpacket: 8 [ 129.763040][ T2240] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.827969][ T2240] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 129.835578][ T2240] usb 3-1: can't read configurations, error -71 [ 130.052846][ T5167] virt_wifi0 speed is unknown, defaulting to 1000 [ 130.433366][ T5186] hub 8-0:1.0: USB hub found [ 130.440408][ T5186] hub 8-0:1.0: 1 port detected [ 132.104671][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 132.198540][ T5200] loop0: detected capacity change from 0 to 512 [ 132.645667][ T5204] virt_wifi0 speed is unknown, defaulting to 1000 [ 132.718349][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724740][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.779004][ T5200] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 133.412774][ T5200] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.663458][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.684509][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.694631][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.706131][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.715800][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 134.400379][ T5217] xt_hashlimit: size too large, truncated to 1048576 [ 134.495100][ T5229] fuse: Bad value for 'fd' [ 135.677519][ T5239] loop0: detected capacity change from 0 to 4096 [ 136.565944][ T5239] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 136.671433][ T5239] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 136.899225][ T5239] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 137.418826][ T5239] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 137.433298][ T5239] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 137.498975][ T5239] ntfs: volume version 3.1. [ 137.560269][ T5239] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 137.598268][ T5239] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 137.687881][ T5239] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 137.727934][ T5239] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 137.753430][ T5239] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 138.849893][ T5291] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 138.914481][ T5291] device bond1 entered promiscuous mode [ 138.997374][ T5291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.018330][ T4917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.752323][ T5300] syz.4.245 (5300) used greatest stack depth: 20832 bytes left [ 139.855487][ T5296] bond1: (slave erspan1): making interface the new active one [ 139.920137][ T5296] device erspan1 entered promiscuous mode [ 141.025119][ T5296] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 141.123906][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 141.163502][ T5312] device syzkaller0 entered promiscuous mode [ 141.272667][ T5296] syz.1.246 (5296) used greatest stack depth: 20176 bytes left [ 142.330036][ T5327] device syzkaller0 entered promiscuous mode [ 144.049961][ T5339] loop0: detected capacity change from 0 to 4096 [ 144.572722][ T5339] EXT4-fs (loop0): Test dummy encryption mode enabled [ 144.809214][ T5339] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 146.756210][ T4206] Bluetooth: hci3: link tx timeout [ 146.761828][ T4206] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.772763][ T4206] Bluetooth: hci3: link tx timeout [ 146.778165][ T4206] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.786664][ T4206] Bluetooth: hci3: link tx timeout [ 146.792261][ T4206] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.806120][ T4206] Bluetooth: hci3: link tx timeout [ 146.811610][ T4206] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.820751][ T4206] Bluetooth: hci3: link tx timeout [ 146.826090][ T4206] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.834233][ T4206] Bluetooth: hci3: link tx timeout [ 146.839629][ T4206] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.857892][ T4206] Bluetooth: hci3: link tx timeout [ 146.873441][ T4206] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.894113][ T4206] Bluetooth: hci3: link tx timeout [ 146.909645][ T4206] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.938110][ T4206] Bluetooth: hci3: link tx timeout [ 146.953707][ T4206] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.965153][ T4206] Bluetooth: hci3: link tx timeout [ 146.975044][ T4206] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.157879][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.438430][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 148.907477][ T4240] Bluetooth: hci3: command 0x0406 tx timeout [ 149.002260][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.028567][ T4232] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.057898][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.088591][ T4232] usb 3-1: config 0 descriptor?? [ 149.646926][ T5398] loop3: detected capacity change from 0 to 512 [ 149.755168][ T5398] EXT4-fs (loop3): bad s_min_extra_isize: 40992 [ 149.828735][ T5404] loop0: detected capacity change from 0 to 256 [ 149.829846][ T4232] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 149.907528][ T5404] FAT-fs (loop0): Directory bread(block 64) failed [ 149.914501][ T5404] FAT-fs (loop0): Directory bread(block 65) failed [ 149.921164][ T5404] FAT-fs (loop0): Directory bread(block 66) failed [ 149.927702][ T5404] FAT-fs (loop0): Directory bread(block 67) failed [ 149.934327][ T5404] FAT-fs (loop0): Directory bread(block 68) failed [ 149.940894][ T5404] FAT-fs (loop0): Directory bread(block 69) failed [ 149.947486][ T5404] FAT-fs (loop0): Directory bread(block 70) failed [ 149.954083][ T5404] FAT-fs (loop0): Directory bread(block 71) failed [ 149.960797][ T5404] FAT-fs (loop0): Directory bread(block 72) failed [ 149.967433][ T5404] FAT-fs (loop0): Directory bread(block 73) failed [ 150.293469][ T4240] usb 3-1: USB disconnect, device number 4 [ 151.678121][ T4240] Bluetooth: hci3: command 0x0406 tx timeout [ 153.807323][ T5438] device syzkaller0 entered promiscuous mode [ 154.041637][ T5437] loop3: detected capacity change from 0 to 128 [ 154.198237][ T5445] netlink: 'syz.0.289': attribute type 4 has an invalid length. [ 155.729641][ T5458] device syzkaller0 entered promiscuous mode [ 156.723892][ T5463] device syzkaller0 entered promiscuous mode [ 156.815227][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 160.236686][ T5502] device syzkaller0 entered promiscuous mode [ 160.431271][ T5502] tipc: Enabled bearer , priority 0 [ 160.886138][ T5502] tipc: Resetting bearer [ 160.968245][ T5499] tipc: Resetting bearer [ 161.032853][ T5499] tipc: Disabling bearer [ 169.621147][ T5661] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.099257][ T5654] netlink: 14 bytes leftover after parsing attributes in process `syz.3.333'. [ 171.849617][ T5718] netlink: 'syz.0.347': attribute type 2 has an invalid length. [ 172.532708][ T5728] loop3: detected capacity change from 0 to 256 [ 176.527750][ T5728] FAT-fs (loop3): Directory bread(block 64) failed [ 176.567887][ T5728] FAT-fs (loop3): Directory bread(block 65) failed [ 176.622442][ T5728] FAT-fs (loop3): Directory bread(block 66) failed [ 176.629193][ T5728] FAT-fs (loop3): Directory bread(block 67) failed [ 176.635790][ T5728] FAT-fs (loop3): Directory bread(block 68) failed [ 176.642361][ T5728] FAT-fs (loop3): Directory bread(block 69) failed [ 176.648985][ T5728] FAT-fs (loop3): Directory bread(block 70) failed [ 176.655519][ T5728] FAT-fs (loop3): Directory bread(block 71) failed [ 176.662152][ T5728] FAT-fs (loop3): Directory bread(block 72) failed [ 176.668721][ T5728] FAT-fs (loop3): Directory bread(block 73) failed [ 177.739285][ T5773] mmap: syz.4.357 (5773) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 178.478039][ T4773] Bluetooth: hci2: command 0x0406 tx timeout [ 178.518187][ T5392] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.792026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.369864][ T4773] Bluetooth: hci0: command 0x0406 tx timeout [ 179.376030][ T4773] Bluetooth: hci1: command 0x0406 tx timeout [ 179.382141][ T4773] Bluetooth: hci4: command 0x0406 tx timeout [ 180.758003][ T5392] usb 1-1: device not accepting address 6, error -71 [ 180.928531][ T5804] netlink: 'syz.1.378': attribute type 2 has an invalid length. [ 182.718013][ T2240] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 183.088235][ T2240] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.112756][ T2240] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.127171][ T2240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.188935][ T2240] usb 4-1: config 0 descriptor?? [ 184.286828][ T2240] pwc: Askey VC010 type 2 USB webcam detected. [ 184.688178][ T2240] pwc: recv_control_msg error -32 req 02 val 2b00 [ 184.818416][ T2240] pwc: recv_control_msg error -32 req 02 val 2700 [ 184.988309][ T2240] pwc: recv_control_msg error -32 req 02 val 2c00 [ 185.147981][ T2240] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.243617][ T2240] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.298065][ T2240] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.347941][ T2240] pwc: recv_control_msg error -32 req 02 val 2000 [ 186.064595][ T2240] pwc: recv_control_msg error -32 req 02 val 2100 [ 186.137949][ T2240] pwc: recv_control_msg error -32 req 04 val 1500 [ 186.208022][ T2240] pwc: recv_control_msg error -32 req 02 val 2500 [ 186.249068][ T2240] pwc: recv_control_msg error -32 req 02 val 2400 [ 186.508008][ T2240] pwc: recv_control_msg error -71 req 02 val 2900 [ 186.528064][ T2240] pwc: recv_control_msg error -71 req 02 val 2800 [ 186.548565][ T2240] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.567922][ T2240] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.579491][ T2240] pwc: Registered as video103. [ 186.594478][ T2240] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 186.627584][ T2240] usb 4-1: USB disconnect, device number 2 [ 187.883747][ T5894] device syzkaller0 entered promiscuous mode [ 188.393264][ T5904] NILFS (nullb0): couldn't find nilfs on the device [ 192.859744][ T5937] device syzkaller0 entered promiscuous mode [ 194.438475][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687466][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.703480][ T5968] NILFS (nullb0): couldn't find nilfs on the device [ 200.943715][ T1325] Bluetooth: hci3: command 0x0405 tx timeout [ 202.919783][ T6025] NILFS (nullb0): couldn't find nilfs on the device [ 207.249376][ T6055] loop3: detected capacity change from 0 to 256 [ 207.373557][ T6055] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 207.974211][ T6073] NILFS (nullb0): couldn't find nilfs on the device [ 212.787343][ T6120] loop3: detected capacity change from 0 to 1024 [ 212.860697][ T6125] mip6: mip6_destopt_init_state: spi is not 0: 3557031936 [ 213.495218][ T6120] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.843198][ T6142] hugetlbfs: syz.0.462 (6142): Using mlock ulimits for SHM_HUGETLB is deprecated [ 216.167682][ T6160] overlayfs: failed to clone upperpath [ 224.483500][ T6260] binder: 6257:6260 ioctl c0306201 0 returned -14 [ 225.716442][ T6269] loop3: detected capacity change from 0 to 1024 [ 226.012139][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.020325][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.748458][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.755800][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.818076][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.848862][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.882609][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.901269][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.939674][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.068373][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.620402][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.627751][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.652485][ T6298] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.728066][ T6298] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.813238][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 227.888002][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.138192][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.178176][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.577421][ T6298] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.596773][ T6298] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.669650][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.725274][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.810968][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.821052][ T6280] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.909606][ T6298] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.928770][ T6298] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.979397][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.998607][ T6269] hfsplus: request for non-existent node 33423360 in B*Tree [ 229.687490][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 230.301849][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 231.438060][ T13] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 231.877927][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.316601][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.327293][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.337635][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.357931][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.367275][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.477734][ T13] usb 1-1: can't set config #16, error -71 [ 232.494480][ T13] usb 1-1: USB disconnect, device number 8 [ 236.827976][ T5392] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 237.017369][ T6439] IPVS: lc: FWM 3 0x00000003 - no destination available [ 237.588160][ T5392] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.775497][ T5392] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.794908][ T5392] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.819136][ T6444] NILFS (nullb0): couldn't find nilfs on the device [ 237.835018][ T5392] usb 3-1: config 0 interface 0 has no altsetting 0 [ 237.998005][ T5392] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 238.049162][ T5392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.077087][ T5392] usb 3-1: Product: syz [ 238.092462][ T5392] usb 3-1: Manufacturer: syz [ 238.097335][ T5392] usb 3-1: SerialNumber: syz [ 238.118059][ T5392] usb 3-1: config 0 descriptor?? [ 238.161908][ T5392] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 238.468015][ T5392] snd_usb_toneport 3-1:0.0: set_interface failed [ 238.475807][ T5392] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 238.561463][ T5392] snd_usb_toneport: probe of 3-1:0.0 failed with error -71 [ 238.588580][ T5392] usb 3-1: USB disconnect, device number 5 [ 238.761212][ T6462] device syzkaller0 entered promiscuous mode [ 241.934713][ T6485] device syzkaller0 entered promiscuous mode [ 242.181482][ T6484] device syzkaller0 entered promiscuous mode [ 244.740058][ T6523] NILFS (nullb0): couldn't find nilfs on the device [ 246.257977][ T6528] netlink: 160 bytes leftover after parsing attributes in process `syz.4.556'. [ 246.313780][ T6528] netlink: 160 bytes leftover after parsing attributes in process `syz.4.556'. [ 246.448545][ T6528] netlink: 160 bytes leftover after parsing attributes in process `syz.4.556'. [ 249.200582][ T6586] device gretap1 entered promiscuous mode [ 249.207000][ T6586] batman_adv: batadv0: Adding interface: gretap1 [ 249.213567][ T6586] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.239246][ T6586] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 253.370799][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.379959][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.880089][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.966736][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.048049][ T5392] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 255.242940][ T6606] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.252017][ T6606] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.261267][ T6606] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.270511][ T6606] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.319507][ T6606] device gretap1 left promiscuous mode [ 255.428336][ T5392] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.544226][ T5392] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.558081][ T5392] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.567383][ T5392] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 255.582549][ T5392] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 256.524068][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.530477][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.649428][ T5392] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.705065][ T5392] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.468738][ T5392] usb 3-1: Product: syz [ 260.572001][ T5392] usb 3-1: Manufacturer: syz [ 260.597964][ T5392] usb 3-1: can't set config #1, error -71 [ 260.726433][ T6716] NILFS (nullb0): couldn't find nilfs on the device [ 261.218640][ T5392] usb 3-1: USB disconnect, device number 6 [ 262.112562][ T6742] netlink: 'syz.1.602': attribute type 3 has an invalid length. [ 262.120436][ T6742] netlink: 3 bytes leftover after parsing attributes in process `syz.1.602'. [ 265.724308][ T6793] binder: 6787:6793 ioctl c0306201 2000000003c0 returned -14 [ 265.755464][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 265.765067][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 267.152669][ T6799] device syzkaller0 entered promiscuous mode [ 267.339033][ T6799] tipc: Started in network mode [ 267.358031][ T6799] tipc: Node identity 3ad518caecfb, cluster identity 4711 [ 267.365610][ T6799] tipc: Enabled bearer , priority 0 [ 267.884971][ T6797] tipc: Resetting bearer [ 267.912507][ T6797] tipc: Disabling bearer [ 268.962422][ T6823] loop3: detected capacity change from 0 to 128 [ 269.016233][ T6823] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.035061][ T6823] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.298611][ T5668] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.589149][ T6836] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 275.656248][ T6890] loop3: detected capacity change from 0 to 256 [ 275.902418][ T6890] FAT-fs (loop3): Directory bread(block 64) failed [ 275.909743][ T6890] FAT-fs (loop3): Directory bread(block 65) failed [ 275.916984][ T6890] FAT-fs (loop3): Directory bread(block 66) failed [ 275.923898][ T6890] FAT-fs (loop3): Directory bread(block 67) failed [ 275.930963][ T6890] FAT-fs (loop3): Directory bread(block 68) failed [ 275.937737][ T6890] FAT-fs (loop3): Directory bread(block 69) failed [ 275.944946][ T6890] FAT-fs (loop3): Directory bread(block 70) failed [ 275.951745][ T6890] FAT-fs (loop3): Directory bread(block 71) failed [ 275.959008][ T6890] FAT-fs (loop3): Directory bread(block 72) failed [ 275.966135][ T6890] FAT-fs (loop3): Directory bread(block 73) failed [ 276.436289][ T6888] device syzkaller0 entered promiscuous mode [ 278.139506][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 278.287862][ T6926] 9pnet: Insufficient options for proto=fd [ 281.586252][ T6949] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 281.637030][ T6956] binder_alloc: 6953: pid 6953 spamming oneway? 2 buffers allocated for a total size of 5120 [ 281.654938][ T6956] binder_alloc: 6953: pid 6953 spamming oneway? 3 buffers allocated for a total size of 5128 [ 281.846334][ T6957] NILFS (nullb0): couldn't find nilfs on the device [ 284.535284][ T6982] IPVS: sh: FWM 3 0x00000003 - no destination available [ 286.952388][ T6997] blk_update_request: I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 286.964411][ T6997] gfs2: error 10 reading superblock [ 294.202072][ T7077] capability: warning: `syz.4.696' uses 32-bit capabilities (legacy support in use) [ 296.559032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.617888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.502797][ T7115] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 298.555273][ T7115] device bond_slave_0 entered promiscuous mode [ 298.561943][ T7115] device bond_slave_1 entered promiscuous mode [ 298.568211][ T7115] device vxlan0 entered promiscuous mode [ 298.584702][ T7115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.598446][ T7115] team0: Port device macvlan2 added [ 300.343428][ T7132] netlink: 68 bytes leftover after parsing attributes in process `syz.1.711'. [ 300.787118][ T7134] block device autoloading is deprecated and will be removed. [ 300.994817][ T7139] fuse: Bad value for 'fd' [ 301.669498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.650331][ T7147] tipc: Enabled bearer , priority 0 [ 302.674435][ T7147] device syzkaller0 entered promiscuous mode [ 302.708334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.885462][ T7147] tipc: Resetting bearer [ 302.903218][ T7146] tipc: Resetting bearer [ 304.013440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.300398][ T7146] tipc: Disabling bearer [ 304.346095][ T4240] tipc: Node number set to 3593345226 [ 305.055074][ T7182] NILFS (nullb0): couldn't find nilfs on the device [ 306.747506][ T7201] block device autoloading is deprecated and will be removed. [ 308.067498][ T7220] overlayfs: failed to clone upperpath [ 310.756664][ T7277] block device autoloading is deprecated and will be removed. [ 311.237674][ T7286] device syzkaller0 entered promiscuous mode [ 312.547262][ T7293] NILFS (nullb0): couldn't find nilfs on the device [ 317.040344][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.046705][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.150259][ T7343] autofs4:pid:7343:autofs_fill_super: called with bogus options [ 318.165302][ T7344] NILFS (nullb0): couldn't find nilfs on the device [ 320.891479][ T4401] Bluetooth: (null): Invalid header checksum [ 323.590020][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 326.484080][ T7410] ipt_REJECT: ECHOREPLY no longer supported. [ 326.541516][ T7410] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.130423][ T7456] netlink: 96 bytes leftover after parsing attributes in process `syz.3.795'. [ 331.439932][ T7458] device syzkaller0 entered promiscuous mode [ 331.491601][ T7462] loop3: detected capacity change from 0 to 512 [ 331.512691][ T7458] tipc: Enabled bearer , priority 0 [ 331.556459][ T7457] tipc: Resetting bearer [ 331.599857][ T7457] tipc: Disabling bearer [ 331.762558][ T7465] SET target dimension over the limit! [ 332.361048][ T7462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 334.187370][ T7462] EXT4-fs (loop3): 1 orphan inode deleted [ 334.195727][ T7462] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 336.167674][ T7462] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.250470][ T7505] netlink: 96 bytes leftover after parsing attributes in process `syz.1.815'. [ 338.857680][ T7538] loop3: detected capacity change from 0 to 2048 [ 338.936581][ T7538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.955296][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.962869][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.373874][ T7609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.687990][ T5392] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 354.562424][ T7705] kvm [7703]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 354.580883][ T7705] kvm [7703]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 354.595016][ T7705] kvm [7703]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x80 [ 354.605071][ T7705] kvm [7703]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 354.838090][ T5392] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 354.847210][ T5392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.867878][ T5392] usb 4-1: Product: syz [ 354.872117][ T5392] usb 4-1: Manufacturer: syz [ 354.876744][ T5392] usb 4-1: SerialNumber: syz [ 354.932616][ T5392] usb 4-1: config 0 descriptor?? [ 356.828060][ T5392] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 356.835491][ T5392] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 356.907001][ T5392] usb 4-1: USB disconnect, device number 3 [ 357.180478][ T7752] device syzkaller0 entered promiscuous mode [ 358.913631][ T7771] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 364.713857][ T7822] NILFS (nullb0): couldn't find nilfs on the device [ 365.095588][ T7832] mip6: mip6_destopt_init_state: spi is not 0: 3557031936 [ 365.860456][ T7833] loop3: detected capacity change from 0 to 64 [ 367.483284][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.904'. [ 368.252519][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 370.284519][ T7870] device bond_slave_0 entered promiscuous mode [ 370.291702][ T7870] device bond_slave_1 entered promiscuous mode [ 370.309949][ T7870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.330499][ T7870] team0: Port device macvlan2 added [ 374.371412][ T7912] loop3: detected capacity change from 0 to 512 [ 376.305392][ T7924] xt_hashlimit: max too large, truncated to 1048576 [ 376.312970][ T7924] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 376.450388][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 378.171288][ T7912] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 378.480062][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.487070][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.212040][ T7946] netlink: 160 bytes leftover after parsing attributes in process `syz.2.936'. [ 379.229485][ T7946] netlink: 160 bytes leftover after parsing attributes in process `syz.2.936'. [ 379.249919][ T7946] netlink: 160 bytes leftover after parsing attributes in process `syz.2.936'. [ 380.917900][ T4194] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 382.215831][ T7979] Bluetooth: hci0: unsupported parameter 255 [ 382.356239][ T7979] Bluetooth: hci0: unsupported parameter 255 [ 382.450688][ T7986] device syzkaller0 entered promiscuous mode [ 382.471271][ T7984] device syzkaller0 entered promiscuous mode [ 382.488865][ T7986] tipc: Started in network mode [ 382.494016][ T7986] tipc: Node identity 2e48c86ca98, cluster identity 4711 [ 382.515114][ T7986] tipc: Enabled bearer , priority 0 [ 382.553500][ T7985] tipc: Resetting bearer [ 382.598146][ T7985] tipc: Disabling bearer [ 382.964511][ T8003] batman_adv: batadv0: Adding interface: vxlan0 [ 382.970961][ T8003] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.996464][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.005443][ T8003] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 383.501093][ T4194] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 385.626001][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.644774][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.647984][ T4194] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.658187][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.670020][ T4194] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 385.680522][ T4194] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.689572][ T4194] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 385.700776][ T4194] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 385.711565][ T8020] device bridge_slave_0 left promiscuous mode [ 385.737553][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.747933][ T4194] usb 1-1: string descriptor 0 read error: -71 [ 385.754182][ T4194] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.781112][ T4194] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 386.487939][ T4194] usb 1-1: can't set config #1, error -71 [ 386.514389][ T4194] usb 1-1: USB disconnect, device number 10 [ 386.538697][ T8034] xt_bpf: check failed: parse error [ 387.358579][ T8014] Set syz1 is full, maxelem 65536 reached [ 387.450256][ T8020] device bridge_slave_1 left promiscuous mode [ 387.465377][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.505632][ T8020] bond0: (slave bond_slave_0): Releasing backup interface [ 387.523681][ T8020] bond0: (slave bond_slave_1): Releasing backup interface [ 387.608259][ T8020] team0: Port device team_slave_0 removed [ 387.636508][ T8020] team0: Port device team_slave_1 removed [ 387.647199][ T8020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.655219][ T8020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.674343][ T8020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.686114][ T8020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.704487][ T8020] bond1: (slave erspan1): Releasing active interface [ 387.717197][ T8020] device erspan1 left promiscuous mode [ 387.732230][ T8036] netlink: 'syz.3.959': attribute type 10 has an invalid length. [ 387.740531][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.959'. [ 387.764928][ T8036] team0: Port device geneve0 added [ 387.887575][ T8045] device syzkaller0 entered promiscuous mode [ 388.117919][ T13] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 388.128651][ T8050] device bond_slave_0 entered promiscuous mode [ 388.135296][ T8050] device bond_slave_1 entered promiscuous mode [ 388.143855][ T8050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.151765][ T8050] team0: Port device macvlan2 added [ 388.410531][ T8054] loop3: detected capacity change from 0 to 2048 [ 388.580426][ T8055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.281897][ T8054] syz.3.967 (8054) used greatest stack depth: 19664 bytes left [ 389.398680][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 389.406935][ T13] usb 1-1: no configurations [ 389.412186][ T13] usb 1-1: can't read configurations, error -22 [ 390.391975][ T8070] overlayfs: failed to clone upperpath [ 395.710513][ T8125] block device autoloading is deprecated and will be removed. [ 395.898813][ T8122] syz.3.983 (8122) used greatest stack depth: 18384 bytes left [ 396.054567][ T8107] 9pnet: Insufficient options for proto=fd [ 396.310952][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 396.890736][ T8144] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 8144 comm: syz.4.991) [ 398.992144][ T8174] kernel profiling enabled (shift: 5) [ 405.665356][ T8223] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 405.882755][ T8235] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1017'. [ 405.903875][ T8235] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1017'. [ 405.948754][ T8235] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1017'. [ 411.173405][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 411.173440][ T26] audit: type=1400 audit(1783066293.577:10): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=8289 comm="syz.3.1034" [ 411.832958][ T8308] 9pnet: Insufficient options for proto=fd [ 413.885993][ T8328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1045'. [ 417.314560][ T8373] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 417.322588][ T8373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1057'. [ 417.343649][ T8373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.353073][ T8373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.362120][ T8373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.371150][ T8373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.401513][ T8373] team0: Port device geneve0 added [ 418.882835][ T8384] futex_wake_op: syz.3.1060 tries to shift op by 144; fix this program [ 420.056334][ T8400] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 420.698492][ T8406] NILFS (nullb0): couldn't find nilfs on the device [ 421.842793][ T8426] input: syz1 as /devices/virtual/input/input8 [ 423.197333][ T8424] xt_l2tp: unknown flags: 17 [ 425.339250][ T8435] loop0: detected capacity change from 0 to 4096 [ 430.489059][ T8479] loop0: detected capacity change from 0 to 64 [ 432.213470][ T8494] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1088'. [ 433.064743][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.072061][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.685908][ T8527] NILFS (nullb0): couldn't find nilfs on the device [ 435.617237][ T8550] loop3: detected capacity change from 0 to 256 [ 440.148754][ T8596] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 440.378636][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.385032][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.702397][ T8601] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 440.709755][ T8601] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 440.720650][ T8601] vhci_hcd vhci_hcd.0: Device attached [ 441.038174][ T5392] usb 34-1: SetAddress Request (2) to port 0 [ 441.403452][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.414580][ T8602] vhci_hcd: connection closed [ 441.421156][ T144] vhci_hcd: stop threads [ 441.977871][ T144] vhci_hcd: release socket [ 441.990557][ T144] vhci_hcd: disconnect device [ 441.995912][ T5392] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 442.030419][ T8609] loop0: detected capacity change from 0 to 1024 [ 442.067964][ T5392] usb 34-1: enqueue for inactive port 0 [ 442.188266][ T8609] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 443.633922][ T5392] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 443.642531][ T5392] usb usb34-port1: attempt power cycle [ 443.827479][ T8635] overlayfs: failed to clone upperpath [ 443.899040][ T8632] loop0: detected capacity change from 0 to 1024 [ 444.005453][ T8632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 444.113959][ T5392] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 444.431446][ T5392] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 444.439209][ T5392] usb usb34-port1: unable to enumerate USB device [ 448.098103][ T4773] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 448.285562][ T8684] NILFS (nullb0): couldn't find nilfs on the device [ 448.427920][ T4773] usb 1-1: Using ep0 maxpacket: 32 [ 448.548039][ T4773] usb 1-1: config index 0 descriptor too short (expected 12315, got 27) [ 448.563965][ T4773] usb 1-1: config 102 has too many interfaces: 120, using maximum allowed: 32 [ 448.573602][ T4773] usb 1-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 448.584621][ T4773] usb 1-1: config 102 has 0 interfaces, different from the descriptor's value: 120 [ 449.340262][ T4773] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 449.376956][ T4773] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 449.421994][ T4773] usb 1-1: Product: syz [ 449.442631][ T4773] usb 1-1: Manufacturer: syz [ 449.465834][ T4773] usb 1-1: SerialNumber: syz [ 450.276536][ T4773] usb 1-1: USB disconnect, device number 13 [ 450.867970][ T4773] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 450.870329][ T8723] loop0: detected capacity change from 0 to 1024 [ 450.962740][ T8723] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 451.575745][ T4773] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 451.716761][ T4773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.760152][ T4773] usb 4-1: Product: syz [ 451.780303][ T4773] usb 4-1: Manufacturer: syz [ 451.801976][ T4773] usb 4-1: SerialNumber: syz [ 451.849596][ T4773] usb 4-1: config 0 descriptor?? [ 452.349884][ T8728] NILFS (nullb0): couldn't find nilfs on the device [ 452.798340][ T4773] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 459.115216][ T8808] overlayfs: failed to clone lowerpath [ 459.169108][ T8810] overlayfs: failed to clone lowerpath [ 461.338189][ T4773] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 461.347409][ T4773] usb 4-1: USB disconnect, device number 4 [ 465.193004][ T26] audit: type=1400 audit(1783066347.597:11): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=8857 comm="syz.2.1196" [ 465.312522][ T8871] loop0: detected capacity change from 0 to 1024 [ 466.154311][ T8875] netlink: 'syz.2.1201': attribute type 10 has an invalid length. [ 466.186710][ T8875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1201'. [ 466.223281][ T8875] team0: Port device geneve0 added [ 466.238363][ T8871] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 466.251541][ T8880] loop3: detected capacity change from 0 to 1024 [ 466.966083][ T8880] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 467.784100][ T8897] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 470.748855][ T8927] netlink: 'syz.0.1215': attribute type 10 has an invalid length. [ 470.760641][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1215'. [ 470.899745][ T8927] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.912743][ T8927] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.922976][ T8927] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.936248][ T8927] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.255293][ T8956] loop3: detected capacity change from 0 to 256 [ 474.694670][ T8965] loop0: detected capacity change from 0 to 8 [ 475.029416][ T8965] SQUASHFS error: xz decompression failed, data probably corrupt [ 475.037975][ T8965] SQUASHFS error: Failed to read block 0x108: -5 [ 475.044483][ T8965] SQUASHFS error: Unable to read metadata cache entry [106] [ 475.052034][ T8965] SQUASHFS error: Unable to read inode 0x11f [ 478.652305][ T1091] block nbd2: Attempted send on invalid socket [ 478.659314][ T1091] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.883080][ T9003] efs: cannot read volume header [ 484.145388][ T9048] loop0: detected capacity change from 0 to 64 [ 486.168904][ T9071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.500423][ T9073] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 487.344912][ T9093] fuse: Bad value for 'fd' [ 493.895918][ T5392] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 494.748306][ T5392] usb 3-1: Using ep0 maxpacket: 16 [ 495.628003][ T5392] usb 3-1: device descriptor read/all, error -71 [ 496.818494][ T9162] syz.3.1277 (9162): drop_caches: 0 [ 496.836827][ T9162] loop3: detected capacity change from 0 to 128 [ 497.278479][ T9162] FAT-fs (loop3): Unrecognized mount option "/proc/sys/vm/drop_caches" or missing value [ 498.256271][ T9178] loop0: detected capacity change from 0 to 256 [ 498.711009][ T9188] tmpfs: Unknown parameter 'usrquota' [ 499.901913][ T9189] loop3: detected capacity change from 0 to 256 [ 500.461066][ T9189] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.471807][ T9189] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 500.497950][ T9189] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 500.621072][ T9193] autofs4:pid:9193:autofs_fill_super: called with bogus options [ 500.958891][ T9198] Device name cannot be null; rc = [-22] [ 501.358473][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.364999][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.405982][ T9211] syz.1.1293 sent an empty control message without MSG_MORE. [ 506.861909][ T9233] futex_wake_op: syz.2.1298 tries to shift op by 144; fix this program [ 512.497982][ T9263] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 512.576963][ T9263] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 512.668726][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 512.780687][ T9267] xt_TCPMSS: Only works on TCP SYN packets [ 514.466519][ T9280] netlink: 'syz.0.1314': attribute type 10 has an invalid length. [ 514.474633][ T9280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1314'. [ 515.409119][ T9287] loop0: detected capacity change from 0 to 1024 [ 515.926094][ T9287] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.732470][ T9333] netlink: 'syz.4.1317': attribute type 10 has an invalid length. [ 519.740488][ T9333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1317'. [ 519.757180][ T9333] team0: Port device geneve0 added [ 519.852493][ T9335] loop3: detected capacity change from 0 to 32768 [ 520.129348][ T9335] XFS (loop3): Mounting V5 Filesystem [ 520.568434][ T9335] XFS (loop3): Ending clean mount [ 521.491316][ T9355] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 521.499326][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1325'. [ 521.558314][ T9357] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1326'. [ 522.557658][ T4189] XFS (loop3): Unmounting Filesystem [ 523.877034][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 525.423076][ T9402] futex_wake_op: syz.1.1336 tries to shift op by 144; fix this program [ 525.464509][ T9402] overlayfs: failed to clone upperpath [ 525.584823][ T9399] tmpfs: Unknown parameter 'grpquota' [ 525.888485][ T9409] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 525.896470][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1340'. [ 526.917973][ T4269] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 526.948826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 527.737905][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 528.448887][ T4269] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 528.494464][ T4269] usb 1-1: config 0 interface 0 has no altsetting 0 [ 528.507045][ T4269] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 528.525892][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.575581][ T4269] usb 1-1: config 0 descriptor?? [ 529.568048][ T4269] usbhid 1-1:0.0: can't add hid device: -71 [ 529.574056][ T4269] usbhid: probe of 1-1:0.0 failed with error -71 [ 529.593387][ T4269] usb 1-1: USB disconnect, device number 14 [ 529.788858][ T9441] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 538.547950][ T9501] Invalid ELF header type: 3 != 1 [ 540.915475][ T9527] NILFS (nullb0): couldn't find nilfs on the device [ 545.120141][ T9566] xt_l2tp: unknown flags: 17 [ 547.172708][ T9573] Device name cannot be null; rc = [-22] [ 549.827641][ T9598] NILFS (nullb0): couldn't find nilfs on the device [ 549.916488][ T9606] loop3: detected capacity change from 0 to 512 [ 550.856304][ T9606] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 550.876696][ T9606] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.521662][ T2240] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 551.552957][ T9630] overlayfs: failed to clone upperpath [ 551.918293][ T9637] loop3: detected capacity change from 0 to 256 [ 553.105439][ T2240] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 553.120106][ T2240] usb 3-1: config 0 interface 0 has no altsetting 0 [ 553.389017][ T9648] NILFS (nullb0): couldn't find nilfs on the device [ 554.107968][ T2240] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 554.171618][ T2240] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 554.979166][ T2240] usb 3-1: Product: syz [ 554.983376][ T2240] usb 3-1: Manufacturer: syz [ 554.990013][ T2240] usb 3-1: config 0 descriptor?? [ 555.008359][ T2240] usb 3-1: can't set config #0, error -71 [ 555.015519][ T2240] usb 3-1: USB disconnect, device number 9 [ 557.292980][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'. [ 557.487919][ T4269] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 557.948075][ T4269] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 557.961726][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.018590][ T4269] usb 1-1: config 0 descriptor?? [ 558.069689][ T4269] pwc: Samsung MPC-C10 USB webcam detected. [ 558.663693][ T4269] pwc: send_video_command error -71 [ 558.669286][ T4269] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 558.677119][ T4269] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 558.712708][ T4269] usb 1-1: USB disconnect, device number 15 [ 560.868460][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 560.899465][ T9716] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 560.933022][ T9716] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 561.759643][ T9724] NILFS (nullb0): couldn't find nilfs on the device [ 562.785273][ T9745] loop0: detected capacity change from 0 to 16 [ 562.791236][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.797860][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.834400][ T9745] erofs: Unknown parameter 'ãé' [ 573.720122][ T9832] netlink: 'syz.0.1455': attribute type 10 has an invalid length. [ 573.728275][ T9832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1455'. [ 573.737419][ T26] audit: type=1800 audit(1783066456.127:12): pid=9831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1456" name="/" dev="fuse" ino=1 res=0 errno=0 [ 574.174567][ T9842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.806057][ T9952] loop0: detected capacity change from 0 to 32768 [ 582.864822][ T9951] NILFS (nullb0): couldn't find nilfs on the device [ 583.666429][ T9971] loop0: detected capacity change from 0 to 1024 [ 583.767925][ T4773] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 583.779540][ T9971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 584.246345][ T9986] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 584.254410][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1489'. [ 584.668013][ T4773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.679628][ T4773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.484374][ T4773] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 585.535949][ T4773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.549197][ T4773] usb 3-1: Product: syz [ 585.553399][ T4773] usb 3-1: Manufacturer: syz [ 585.563735][ T4773] usb 3-1: SerialNumber: syz [ 586.741335][ T4773] usb 3-1: USB disconnect, device number 10 [ 588.910585][T10046] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 588.918541][T10046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1503'. [ 589.106638][T10050] NILFS (nullb0): couldn't find nilfs on the device [ 591.357988][T10089] NILFS (nullb0): couldn't find nilfs on the device [ 593.933958][T10125] loop0: detected capacity change from 0 to 1024 [ 594.078773][T10125] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 594.841869][T10138] loop3: detected capacity change from 0 to 1024 [ 595.096607][T10144] tipc: Cannot configure node identity twice [ 595.123615][T10145] netlink: 'syz.4.1536': attribute type 10 has an invalid length. [ 595.131633][T10145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1536'. [ 596.912124][T10167] loop0: detected capacity change from 0 to 512 [ 596.966257][T10138] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 597.609572][T10178] loop0: detected capacity change from 0 to 1024 [ 597.638799][T10178] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 598.566885][T10193] loop3: detected capacity change from 0 to 512 [ 598.797135][T10198] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 598.805117][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1551'. [ 598.818878][T10198] team0: Port device geneve0 added [ 600.265524][T10193] FAT-fs (loop3): bogus logical sector size 0 [ 600.272333][T10193] FAT-fs (loop3): Can't find a valid FAT filesystem [ 601.324585][T10222] loop0: detected capacity change from 0 to 1024 [ 601.365460][T10225] netlink: 'syz.2.1559': attribute type 10 has an invalid length. [ 601.373400][T10225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1559'. [ 601.392540][T10222] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 602.366484][T10236] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 602.374502][T10236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 603.404658][T10251] loop0: detected capacity change from 0 to 1024 [ 603.617522][T10251] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 603.636677][T10261] loop3: detected capacity change from 0 to 1024 [ 603.664412][T10251] EXT4-fs error (device loop0): ext4_xattr_set_entry:1615: inode #13: comm syz.0.1568: corrupted xattr entries [ 603.865168][T10261] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 604.289261][T10276] netlink: 'syz.0.1573': attribute type 10 has an invalid length. [ 604.297137][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1573'. [ 604.923852][T10287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1578'. [ 606.635397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.649363][T10303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1585'. [ 607.289873][T10322] netlink: 'syz.2.1589': attribute type 10 has an invalid length. [ 607.297902][T10322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1589'. [ 608.357255][T10330] loop0: detected capacity change from 0 to 128 [ 608.413754][T10330] vxfs: unable to set final block size [ 611.129959][T10365] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 611.137922][T10365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1601'. [ 611.158974][T10362] 8021q: VLANs not supported on lo [ 611.668187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.708482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.127849][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 613.243985][T10404] loop0: detected capacity change from 0 to 64 [ 613.418079][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 613.758045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.398066][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.443379][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 614.560263][T10429] loop0: detected capacity change from 0 to 128 [ 614.588723][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.606517][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 614.620630][ T21] usb 4-1: SerialNumber: syz [ 614.627271][T10429] qnx6: unable to set blocksize [ 614.724158][ T21] hub 4-1:1.0: bad descriptor, ignoring hub [ 614.731098][ T21] hub: probe of 4-1:1.0 failed with error -5 [ 614.738352][ T21] cdc_acm 4-1:1.0: skipping garbage [ 614.743881][ T21] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 614.757741][ T21] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 614.830488][ T21] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 616.049994][ T5392] usb 4-1: USB disconnect, device number 5 [ 617.086333][T10478] loop3: detected capacity change from 0 to 16 [ 617.808912][T10482] loop0: detected capacity change from 0 to 1024 [ 617.818351][T10478] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 618.038632][T10482] hfsplus: request for non-existent node 211 in B*Tree [ 618.106414][T10482] hfsplus: request for non-existent node 211 in B*Tree [ 618.442126][T10478] erofs: DAX unsupported by block device. Turning off DAX. [ 618.625319][T10478] erofs: (device loop3): mounted with root inode @ nid 36. [ 618.940034][ T5392] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 619.188741][ T5392] usb 3-1: Using ep0 maxpacket: 32 [ 619.341755][T10513] loop3: detected capacity change from 0 to 4096 [ 619.352648][ T5392] usb 3-1: unable to get BOS descriptor or descriptor too short [ 619.408782][T10513] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 619.448478][ T5392] usb 3-1: config 8 has an invalid interface number: 94 but max is 0 [ 619.469142][ T5392] usb 3-1: config 8 has no interface number 0 [ 619.475569][ T5392] usb 3-1: config 8 interface 94 has no altsetting 0 [ 620.198244][ T5392] usb 3-1: string descriptor 0 read error: -22 [ 620.204612][ T5392] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 620.645621][ T5392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.690302][ T5392] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 621.570613][ T5392] gspca_sn9c2028: read1 error -110 [ 621.727761][ T5392] gspca_sn9c2028: read1 error -71 [ 621.747971][ T5392] gspca_sn9c2028: read1 error -71 [ 621.753110][ T5392] sn9c2028: probe of 3-1:8.94 failed with error -71 [ 621.844982][T10545] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 621.853549][T10545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1667'. [ 622.379762][ T5392] usb 3-1: USB disconnect, device number 11 [ 624.231076][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.243552][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.256985][T10585] loop3: detected capacity change from 0 to 1024 [ 625.611802][T10585] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 625.628504][T10609] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1690'. [ 625.698787][T10610] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 625.706787][T10610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1683'. [ 628.483792][T10654] netlink: 'syz.0.1703': attribute type 10 has an invalid length. [ 628.491769][T10654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'. [ 629.518578][T10668] loop0: detected capacity change from 0 to 4096 [ 629.635104][T10645] loop3: detected capacity change from 0 to 32768 [ 630.999501][T10668] ntfs: (device loop0): parse_options(): NLS character set is not found. Using previous one default. [ 631.386524][T10668] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 632.100162][T10703] netlink: 'syz.3.1717': attribute type 10 has an invalid length. [ 632.108228][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1717'. [ 632.339107][T10668] ntfs: volume version 3.1. [ 634.309923][T10729] loop3: detected capacity change from 0 to 1024 [ 635.224248][T10738] loop0: detected capacity change from 0 to 4096 [ 635.374955][T10738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 636.538453][T10729] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 638.970287][T10797] netlink: 'syz.0.1745': attribute type 10 has an invalid length. [ 638.978340][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1745'. [ 641.615632][T10846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1759'. [ 644.641579][T10889] NILFS (nullb0): couldn't find nilfs on the device [ 645.724462][T10916] netlink: 'syz.2.1784': attribute type 10 has an invalid length. [ 645.732687][T10916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1784'. [ 647.083404][T10932] SET target dimension over the limit! [ 648.911768][T10953] netlink: 'syz.1.1795': attribute type 10 has an invalid length. [ 648.919657][T10953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1795'. [ 649.108373][T10961] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1799'. [ 649.848154][ T4194] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 650.998114][ T4194] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 651.063458][ T4194] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 651.108417][ T4194] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 651.122309][ T4194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 652.058821][T10993] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 652.066731][T10993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1809'. [ 652.320343][ T4194] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 652.348802][ T4194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.459874][ T4194] usb 1-1: config 0 descriptor?? [ 653.477977][ T4194] usb 1-1: can't set config #0, error -71 [ 653.506197][ T4194] usb 1-1: USB disconnect, device number 16 [ 653.798658][T11012] loop0: detected capacity change from 0 to 40427 [ 653.887231][T11012] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 653.895108][T11012] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 653.908874][T11012] F2FS-fs (loop0): invalid crc value [ 653.940116][T11012] F2FS-fs (loop0): Found nat_bits in checkpoint [ 654.075579][T11012] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 654.082964][T11012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 655.097149][T11034] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 655.105165][T11034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1821'. [ 655.286402][T11036] loop3: detected capacity change from 0 to 1024 [ 655.711359][T11036] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 661.224253][T11109] loop3: detected capacity change from 0 to 40427 [ 661.493223][T11109] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 661.501065][T11109] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 661.511594][T11109] F2FS-fs (loop3): invalid crc value [ 661.663119][T11109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 661.721065][T11109] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 661.728403][T11109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 661.805660][T11123] xt_l2tp: unknown flags: 17 [ 662.955753][T11123] loop0: detected capacity change from 0 to 32768 [ 663.428397][ T5392] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 664.528430][ T5392] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 664.539872][ T5392] usb 3-1: config 0 has no interface number 0 [ 664.546173][ T5392] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 664.598119][ T5392] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 664.613873][ T5392] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 664.627660][ T5392] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 664.843456][ T5392] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 664.862933][ T5392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.887132][ T5392] usb 3-1: Product: syz [ 664.897582][ T5392] usb 3-1: Manufacturer: syz [ 664.907433][ T5392] usb 3-1: SerialNumber: syz [ 664.974302][ T5392] usb 3-1: config 0 descriptor?? [ 665.036217][ T5392] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 665.123192][ T5392] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input10 [ 665.790851][ T5392] usb 3-1: USB disconnect, device number 12 [ 665.801267][ T5392] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 667.724285][T11177] loop0: detected capacity change from 0 to 128 [ 667.812754][T11184] loop3: detected capacity change from 0 to 512 [ 667.824432][T11177] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 667.990662][T11184] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 668.000478][T11184] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 668.090362][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 668.245629][T11168] xt_l2tp: unknown flags: 17 [ 669.724544][T11209] loop0: detected capacity change from 0 to 1764 [ 671.580744][T11231] loop0: detected capacity change from 0 to 2048 [ 672.055034][T11231] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 672.310269][T11253] device batadv_slave_0 entered promiscuous mode [ 672.322394][T11253] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 674.423524][T11291] loop3: detected capacity change from 0 to 1024 [ 675.243868][T11291] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 675.353901][T11311] loop0: detected capacity change from 0 to 736 [ 677.562008][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1921'. [ 677.628502][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1921'. [ 679.483885][T11371] loop0: detected capacity change from 0 to 1024 [ 680.340520][T11386] loop3: detected capacity change from 0 to 256 [ 680.360286][T11371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 681.794666][T11434] x_tables: unsorted entry at hook 2 [ 681.984613][T11439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 681.991182][T11439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.010402][T11439] vhci_hcd vhci_hcd.0: Device attached [ 682.032537][T11445] loop3: detected capacity change from 0 to 1024 [ 682.096590][T11445] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 682.314952][ T4240] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 682.322545][ T21] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 683.578077][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 683.658172][T11440] vhci_hcd: unknown pdu 2 [ 683.690506][ T144] vhci_hcd: stop threads [ 683.704404][ T144] vhci_hcd: release socket [ 683.728128][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 683.761666][ T144] vhci_hcd: disconnect device [ 683.833503][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 683.845478][ T21] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 683.857697][ T21] usb 1-1: can't read configurations, error -71 [ 684.897953][ T2240] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 685.257981][ T2240] usb 4-1: Using ep0 maxpacket: 16 [ 685.669932][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.676331][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.748876][ T2240] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 685.888607][ T2240] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 686.053203][T11501] capability: warning: `syz.0.1978' uses deprecated v2 capabilities in a way that may be insecure [ 686.057196][ T2240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.092307][ T2240] usb 4-1: config 0 descriptor?? [ 687.438333][ T2240] usbhid 4-1:0.0: can't add hid device: -71 [ 687.444482][ T2240] usbhid: probe of 4-1:0.0 failed with error -71 [ 687.530404][ T2240] usb 4-1: USB disconnect, device number 6 [ 688.077976][ T4240] vhci_hcd: vhci_device speed not set [ 688.302242][T11558] netlink: 'syz.1.1992': attribute type 10 has an invalid length. [ 688.310359][T11558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'. [ 688.467699][T11569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1998'. [ 689.312758][ T26] audit: type=1326 audit(1783066571.717:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb465f31e59 code=0x7ffc0000 [ 689.398034][ T26] audit: type=1326 audit(1783066571.747:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 689.443279][ T26] audit: type=1326 audit(1783066571.747:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 689.603503][ T26] audit: type=1326 audit(1783066571.747:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 689.627514][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.970974][ T26] audit: type=1326 audit(1783066571.747:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 690.111057][ T26] audit: type=1326 audit(1783066571.747:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 690.242168][ T26] audit: type=1326 audit(1783066571.747:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 690.372629][ T26] audit: type=1326 audit(1783066571.747:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 690.525541][ T26] audit: type=1326 audit(1783066571.747:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 690.636366][ T26] audit: type=1326 audit(1783066571.747:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb465f31aeb code=0x7ffc0000 [ 690.660802][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.677886][ T6913] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 691.922577][ T6913] usb 1-1: Using ep0 maxpacket: 32 [ 692.049238][ T6913] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 692.058343][ T6913] usb 1-1: config 0 has no interface number 0 [ 692.064469][ T6913] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 692.111889][ T6913] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.138512][ T6913] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 692.149185][ T6913] usb 1-1: config 0 interface 196 has no altsetting 0 [ 692.318685][ T6913] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 692.330307][ T6913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.381458][ T6913] usb 1-1: Product: syz [ 692.439580][ T6913] usb 1-1: Manufacturer: syz [ 692.506144][ T6913] usb 1-1: SerialNumber: syz [ 692.611312][ T6913] usb 1-1: config 0 descriptor?? [ 692.669751][T11598] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 693.288086][ T6913] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 693.740989][T11620] NILFS (nullb0): couldn't find nilfs on the device [ 693.829937][ T6913] ipheth: probe of 1-1:0.196 failed with error -22 [ 693.845575][ T6913] usb 1-1: USB disconnect, device number 19 [ 694.330228][T11641] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 694.330250][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2020'. [ 694.351003][T11640] loop0: detected capacity change from 0 to 4096 [ 694.432268][T11640] __ntfs_error: 6 callbacks suppressed [ 694.432285][T11640] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 694.454803][T11640] ntfs: volume version 3.1. [ 694.497196][T11640] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-14. You might want to try to use the mount option nls=utf8. [ 694.497303][T11640] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 696.133125][T11664] NILFS (nullb0): couldn't find nilfs on the device [ 696.350704][T11675] loop3: detected capacity change from 0 to 16 [ 696.373671][T11675] erofs: (device loop3): mounted with root inode @ nid 36. [ 696.487870][ T4773] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 696.636791][T11683] loop3: detected capacity change from 0 to 1024 [ 696.815962][T11686] loop0: detected capacity change from 0 to 256 [ 696.869017][T11686] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcb51127, utbl_chksum : 0xe619d30d) [ 696.894102][T11683] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 696.905250][ T4773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 696.927545][ T4773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.002939][ T4773] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 697.023768][ T4773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.071961][ T4773] usb 3-1: config 0 descriptor?? [ 697.088302][T11671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 697.565565][ T4773] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 697.585233][ T4773] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 697.600640][ T4773] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 697.616084][ T4773] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 697.631594][ T4773] magicmouse 0003:05AC:0265.0001: unexpected long global item [ 697.647544][ T4773] magicmouse 0003:05AC:0265.0001: magicmouse hid parse failed [ 697.663559][ T4773] magicmouse: probe of 0003:05AC:0265.0001 failed with error -22 [ 697.773059][ T4773] usb 3-1: USB disconnect, device number 13 [ 698.884854][T11721] netlink: 'syz.0.2048': attribute type 29 has an invalid length. [ 698.894311][T11721] netlink: 'syz.0.2048': attribute type 29 has an invalid length. [ 698.905810][T11721] netlink: 'syz.0.2048': attribute type 29 has an invalid length. [ 699.248173][ T5392] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 699.318031][ T6913] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 700.298375][ T5392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 700.313919][ T5392] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 700.324507][ T5392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.398847][ T5392] usb 3-1: config 0 descriptor?? [ 700.408140][ T6913] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 700.442183][ T6913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 700.455066][ T6913] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 700.465864][ T6913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.482909][ T6913] usb 4-1: config 0 descriptor?? [ 700.657922][ T5392] ath6kl: Failed to submit usb control message: -71 [ 700.664613][ T5392] ath6kl: unable to send the bmi data to the device: -71 [ 700.677828][ T5392] ath6kl: Unable to send get target info: -71 [ 701.830495][ T6913] holtek_mouse 0003:04D9:A04A.0002: unexpected long global item [ 701.838556][ T6913] holtek_mouse 0003:04D9:A04A.0002: hid parse failed: -22 [ 701.845720][ T6913] holtek_mouse: probe of 0003:04D9:A04A.0002 failed with error -22 [ 701.878830][ T6913] usb 4-1: USB disconnect, device number 7 [ 703.323487][T11785] loop3: detected capacity change from 0 to 64 [ 705.046577][T11806] device ip6_vti0 entered promiscuous mode [ 706.016560][T11818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 707.937937][ T2240] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 708.417981][ T2240] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 708.426388][ T2240] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.436955][ T2240] usb 1-1: config 1 has no interface number 0 [ 708.443719][ T2240] usb 1-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.457597][ T2240] usb 1-1: config 1 interface 188 has no altsetting 0 [ 708.618470][ T2240] usb 1-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 708.627553][ T2240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.638132][ T2240] usb 1-1: Product: syz [ 708.642326][ T2240] usb 1-1: Manufacturer: syz [ 708.646932][ T2240] usb 1-1: SerialNumber: syz [ 708.973466][ T2240] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 708.998224][ T2240] usb 1-1: 188:0 : does not exist [ 709.070361][ T2240] usb 1-1: USB disconnect, device number 20 [ 709.371875][T11788] udevd[11788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.379463][T11933] batman_adv: batadv0: Adding interface: macvtap0 [ 712.408180][T11933] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.476351][T11933] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 712.526759][T11938] loop0: detected capacity change from 0 to 1024 [ 712.671469][T11938] hfsplus: trying to free free bnode 0(1) [ 713.202631][ T4401] hfsplus: b-tree write err: -5, ino 25 [ 713.243812][ T4401] hfsplus: b-tree write err: -5, ino 4 [ 713.256511][ T4401] hfsplus: b-tree write err: -5, ino 2 [ 713.297024][ T4401] hfsplus: b-tree write err: -5, ino 26 [ 713.404153][T11940] loop3: detected capacity change from 0 to 128 [ 713.675862][T11953] loop0: detected capacity change from 0 to 16 [ 713.763953][T11953] erofs: (device loop0): mounted with root inode @ nid 36. [ 714.026432][T11940] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 714.317940][ T4773] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 714.866091][T11940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.054993][T11940] overlayfs: upper fs needs to support d_type. [ 715.067265][T11940] overlayfs: upper fs does not support tmpfile. [ 715.093261][ T4773] usb 1-1: Using ep0 maxpacket: 16 [ 715.261021][T11978] loop3: detected capacity change from 0 to 256 [ 715.288138][ T4773] usb 1-1: unable to get BOS descriptor or descriptor too short [ 715.335813][T11978] exfat: Deprecated parameter 'namecase' [ 715.342085][T11978] exfat: Deprecated parameter 'utf8' [ 715.391737][ T4773] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 715.441716][T11978] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 715.618142][ T4773] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 715.656121][ T4773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.664409][ T4773] usb 1-1: Product: syz [ 715.668750][ T4773] usb 1-1: Manufacturer: syz [ 715.673437][ T4773] usb 1-1: SerialNumber: syz [ 716.321547][ T4773] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 716.444562][ T4773] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 716.669924][T12002] loop3: detected capacity change from 0 to 64 [ 716.814680][ T4773] usb 1-1: USB disconnect, device number 21 [ 717.139369][T11876] udevd[11876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.170948][T12020] loop3: detected capacity change from 0 to 512 [ 717.269715][T12020] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 717.348653][T12020] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 717.365245][T12020] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 717.375177][T12038] loop0: detected capacity change from 0 to 512 [ 717.420482][ T26] audit: type=1800 audit(1783066599.827:29): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2156" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 717.487908][T12038] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 717.576700][T12038] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2161: bg 0: block 104: invalid block bitmap [ 717.596855][T12038] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 717.615985][T12038] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2161: invalid indirect mapped block 1 (level 1) [ 717.689436][T12038] EXT4-fs (loop0): 1 truncate cleaned up [ 717.695135][T12038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 719.384492][T12076] loop0: detected capacity change from 0 to 4096 [ 719.456445][T12076] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 719.576028][T12076] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 720.263164][ T4460] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 720.273357][ T4191] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 720.302791][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 720.325477][ T4191] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 720.337551][ T4460] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 720.353218][ T4191] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 722.509127][T12124] netlink: 'syz.4.2193': attribute type 10 has an invalid length. [ 722.517129][T12124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2193'. [ 724.651723][T12171] netlink: 'syz.4.2207': attribute type 10 has an invalid length. [ 724.659813][T12171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2207'. [ 725.951507][T12204] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 725.959586][T12204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2222'. [ 727.512497][T12237] loop3: detected capacity change from 0 to 512 [ 727.926471][T12249] netlink: 'syz.1.2238': attribute type 10 has an invalid length. [ 727.934458][T12249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2238'. [ 728.498772][T12237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 728.583339][T12237] System zones: 1-12 [ 728.626613][T12237] EXT4-fs (loop3): 1 truncate cleaned up [ 728.833203][T12237] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nodiscard,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,barrier=0x0000000000000006,data_err=ignore,debug,,errors=continue. Quota mode: none. [ 729.608461][T12237] EXT4-fs warning (device loop3): verify_group_input:165: Last group not full [ 731.567877][ T2240] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 731.833281][ T2240] usb 4-1: Using ep0 maxpacket: 16 [ 732.003879][ T2240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.035377][ T2240] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.238054][ T2240] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.293843][ T2240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.302561][ T2240] usb 4-1: Product: syz [ 732.306872][ T2240] usb 4-1: Manufacturer: syz [ 732.319827][ T2240] usb 4-1: SerialNumber: syz [ 732.536669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.978032][ T2240] usb 4-1: 0:2 : does not exist [ 733.052920][T12334] loop0: detected capacity change from 0 to 1024 [ 733.103380][ T2240] usb 4-1: USB disconnect, device number 8 [ 733.204791][T11788] udevd[11788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.244432][T12334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 735.463522][T12370] loop3: detected capacity change from 0 to 16 [ 735.618649][T12370] erofs: (device loop3): mounted with root inode @ nid 36. [ 736.391180][T12370] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 736.412668][T12385] loop0: detected capacity change from 0 to 1024 [ 736.557590][T12385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 737.588265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.094144][ T26] audit: type=1326 audit(1783066620.497:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.3.2284" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d6514e59 code=0x7fc00000 [ 738.251588][T12409] kvm [12406]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0x400003 [ 738.365172][T12416] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 738.389506][T12416] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 738.638218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.877986][ T2348] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 739.668001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.117955][ T2348] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 740.164501][ T2348] usb 4-1: config 1 interface 0 altsetting 110 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 740.193281][T12453] loop0: detected capacity change from 0 to 1024 [ 740.204811][ T2348] usb 4-1: config 1 interface 0 has no altsetting 0 [ 741.326430][T12453] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 741.337401][ T2348] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.347050][ T2348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.357873][ T2348] usb 4-1: Product: syz [ 741.363196][ T2348] usb 4-1: Manufacturer: syz [ 741.372262][ T2348] usb 4-1: SerialNumber: syz [ 741.989618][T12483] loop3: detected capacity change from 0 to 512 [ 742.038991][ T2348] cdc_ether 4-1:1.0: skipping garbage [ 742.044452][ T2348] cdc_ether 4-1:1.0: skipping garbage [ 742.051593][ T2348] cdc_ether 4-1:1.0: skipping garbage [ 742.057048][ T2348] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 742.077931][ T2348] usb 4-1: bad CDC descriptors [ 742.096606][ T2348] usb 4-1: USB disconnect, device number 9 [ 742.186414][T12483] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 742.323047][T12483] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.2314: invalid block [ 742.346515][T12483] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2314: invalid indirect mapped block 1024 (level 0) [ 742.366806][T12483] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2314: bg 0: block 35: padding at end of block bitmap is not set [ 742.387485][T12483] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 742.404820][T12483] EXT4-fs (loop3): 1 truncate cleaned up [ 742.410811][T12483] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,nombcache,bsddf,,errors=continue. Quota mode: none. [ 743.166237][T12508] loop0: detected capacity change from 0 to 64 [ 743.330603][T12508] hfs: request for non-existent node 131072 in B*Tree [ 743.368378][T12508] hfs: request for non-existent node 131072 in B*Tree [ 745.450105][T12536] loop0: detected capacity change from 0 to 2048 [ 745.493624][T12536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.918721][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2335'. [ 745.929564][T12543] device veth0_macvtap left promiscuous mode [ 745.977931][ T4773] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 746.398040][ T4773] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 746.417866][ T4773] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 746.446909][ T4773] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.910255][ T4773] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 746.969179][ T4773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 747.043080][ T4773] usb 1-1: Product: syz [ 747.082124][ T4773] usb 1-1: Manufacturer: syz [ 747.111445][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.120644][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.143031][ T4773] usb 1-1: SerialNumber: syz [ 747.558133][ T4773] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 747.790971][ T4773] usb 1-1: USB disconnect, device number 22 [ 747.809849][ T4773] usblp0: removed [ 748.859357][T12577] loop3: detected capacity change from 0 to 512 [ 748.941899][T12579] loop0: detected capacity change from 0 to 512 [ 748.959920][T12577] EXT4-fs (loop3): Ignoring removed bh option [ 749.224412][T12577] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2349: inode #13: comm syz.3.2349: iget: illegal inode # [ 749.373094][T12577] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.2349: couldn't read orphan inode 13 (err -117) [ 749.726280][T12577] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,,errors=continue. Quota mode: none. [ 749.823124][T12605] loop0: detected capacity change from 0 to 256 [ 749.828112][T12577] EXT4-fs (loop3): shut down requested (1) [ 751.584334][T12624] netlink: 'syz.0.2360': attribute type 10 has an invalid length. [ 751.592409][T12624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2360'. [ 753.390321][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 754.304471][T12674] loop3: detected capacity change from 0 to 256 [ 757.728160][ T2348] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 758.047979][ T2348] usb 1-1: Using ep0 maxpacket: 32 [ 758.188711][ T2348] usb 1-1: config 0 has no interfaces? [ 758.195221][ T2348] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 758.321568][ T2348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.402997][ T2348] usb 1-1: config 0 descriptor?? [ 758.755525][ T4773] usb 1-1: USB disconnect, device number 23 [ 759.134496][T12747] netlink: 'syz.3.2397': attribute type 1 has an invalid length. [ 759.375785][T12763] loop0: detected capacity change from 0 to 128 [ 759.417360][T12763] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 759.530269][T12763] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 761.307255][T12788] virt_wifi0 speed is unknown, defaulting to 1000 [ 761.651163][T12799] input: syz1 as /devices/virtual/input/input11 [ 761.734396][T12802] netlink: 'syz.3.2412': attribute type 10 has an invalid length. [ 761.742521][T12802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2412'. [ 762.360235][T12809] kernel read not supported for file /eth0 (pid: 12809 comm: syz.2.2417) [ 762.381542][ T26] audit: type=1800 audit(1783066644.787:31): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2417" name="eth0" dev="mqueue" ino=59952 res=0 errno=0 [ 764.364459][T12834] loop0: detected capacity change from 0 to 128 [ 765.054771][T12848] netlink: 'syz.1.2429': attribute type 10 has an invalid length. [ 765.062768][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2429'. [ 765.870995][T12842] loop0: detected capacity change from 0 to 32768 [ 765.975028][T12842] XFS (loop0): Mounting V5 Filesystem [ 766.049320][T12842] XFS (loop0): Ending clean mount [ 766.179663][ T4191] XFS (loop0): Unmounting Filesystem [ 767.389093][T12879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 769.093943][T12906] loop0: detected capacity change from 0 to 32768 [ 769.228525][T12906] (syz.0.2448,12906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 769.279915][T12906] (syz.0.2448,12906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 769.922702][T12906] JBD2: Ignoring recovery information on journal [ 770.027560][T12906] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 770.433114][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 773.842720][T12993] overlayfs: failed to clone upperpath [ 775.423777][T13012] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2488'. [ 778.179525][T13060] netlink: 'syz.1.2502': attribute type 10 has an invalid length. [ 778.187456][T13060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2502'. [ 779.082890][T13065] vivid-004: disconnect [ 779.113494][T13064] vivid-004: reconnect [ 779.542424][T13081] loop0: detected capacity change from 0 to 512 [ 779.682157][T13081] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2510: Unrecognised inode hash code 255 [ 779.714776][T13081] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2510: Corrupt directory, running e2fsck is recommended [ 779.760085][T13081] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 779.785437][T13081] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.2510: corrupted in-inode xattr [ 779.823776][T13081] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2510: couldn't read orphan inode 15 (err -117) [ 779.868456][T13081] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 779.945949][T13081] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2510: Unrecognised inode hash code 255 [ 779.977989][T13081] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2510: Corrupt directory, running e2fsck is recommended [ 780.001657][T13081] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 4: comm syz.0.2510: path /514/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 780.059778][T13081] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 22: comm syz.0.2510: path /514/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 780.084019][T13081] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 8: comm syz.0.2510: path /514/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 780.567883][T13102] netlink: 'syz.0.2513': attribute type 10 has an invalid length. [ 780.575945][T13102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2513'. [ 783.495626][T13137] netlink: 'syz.1.2526': attribute type 10 has an invalid length. [ 783.503894][T13137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2526'. [ 787.828916][T13182] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 787.836846][T13182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2538'. [ 789.795619][T13218] syz.1.2552[13218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.795782][T13218] syz.1.2552[13218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.580385][T13233] tipc: Started in network mode [ 791.604853][T13233] tipc: Node identity 7f000001, cluster identity 4711 [ 791.613050][T13233] tipc: Enabling of bearer rejected, failed to enable media [ 791.629420][T13233] tipc: Enabled bearer , priority 10 [ 792.211582][T13244] raw_sendmsg: syz.3.2559 forgot to set AF_INET. Fix it! [ 792.982426][ T4269] tipc: Node number set to 2130706433 [ 793.076743][T13246] loop3: detected capacity change from 0 to 1024 [ 793.512477][T13246] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 795.732444][T13306] virt_wifi0 speed is unknown, defaulting to 1000 [ 795.891475][T13301] loop0: detected capacity change from 0 to 40427 [ 795.932562][T13301] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 795.946816][T13301] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 795.964828][T13301] F2FS-fs (loop0): invalid crc value [ 796.011414][T13301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 796.132252][T13301] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 796.153025][T13301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 796.274496][T13301] attempt to access beyond end of device [ 796.274496][T13301] loop0: rw=2051, want=45064, limit=40427 [ 796.329965][T13301] attempt to access beyond end of device [ 796.329965][T13301] loop0: rw=2051, want=81920, limit=40427 [ 796.346493][T13314] attempt to access beyond end of device [ 796.346493][T13314] loop0: rw=2051, want=131072, limit=40427 [ 796.358862][T13301] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 796.358904][T13301] F2FS-fs (loop0): Issue discard(5637, 5637, 4603) failed, ret: -5 [ 796.366883][T13314] F2FS-fs (loop0): Issue discard(10240, 10240, 6144) failed, ret: -5 [ 797.406534][T13322] loop0: detected capacity change from 0 to 1024 [ 797.535193][T13322] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback. [ 797.613192][T13322] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.671400][T13322] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.2583: lblock 0 mapped to illegal pblock 0 (length 1) [ 797.712666][T13322] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 797.738465][T13322] EXT4-fs (loop0): This should not happen!! Data will be lost [ 797.738465][T13322] [ 797.758235][ T26] audit: type=1804 audit(1783066680.157:32): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2583" name="/newroot/531/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 797.791150][T13327] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.2583: lblock 0 mapped to illegal pblock 0 (length 1) [ 797.873504][ T26] audit: type=1800 audit(1783066680.277:33): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2583" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 799.982938][T13373] loop0: detected capacity change from 0 to 1024 [ 800.040266][T13373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 801.442017][ T4269] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 801.717931][ T4269] usb 4-1: Using ep0 maxpacket: 16 [ 801.892102][ T4269] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.009720][ T4269] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.027828][ T4269] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.268009][ T4269] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 802.287314][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.297421][ T4269] usb 4-1: Product: syz [ 802.307617][ T4269] usb 4-1: Manufacturer: syz [ 802.317763][ T4269] usb 4-1: SerialNumber: syz [ 802.898206][ T4269] usb 4-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8212 device_setup=1 to enable and report any issues to g@b4.vu [ 803.049278][ T4269] usb 4-1: USB disconnect, device number 10 [ 805.347544][T13477] netlink: 'syz.0.2633': attribute type 10 has an invalid length. [ 805.355600][T13477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2633'. [ 806.061412][T13484] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2637'. [ 806.089834][T13484] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2637'. [ 808.551775][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.560461][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.778330][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 812.989269][T13572] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 812.995916][T13572] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 813.010525][T13572] vhci_hcd vhci_hcd.0: Device attached [ 813.041584][T13574] vhci_hcd: connection closed [ 813.041795][ T4401] vhci_hcd: stop threads [ 813.059542][ T4401] vhci_hcd: release socket [ 813.064008][ T4401] vhci_hcd: disconnect device [ 815.910577][T13625] netlink: 'syz.2.2680': attribute type 10 has an invalid length. [ 815.928145][T13625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2680'. [ 817.215315][T13639] loop0: detected capacity change from 0 to 1024 [ 817.323494][T13639] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 818.140236][T13668] loop0: detected capacity change from 0 to 1024 [ 818.236237][T13668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 819.304257][T13700] loop0: detected capacity change from 0 to 512 [ 819.335235][T13700] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 819.480675][ T4400] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 819.822915][T13708] netlink: 'syz.1.2709': attribute type 10 has an invalid length. [ 819.847064][T13708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2709'. [ 820.381587][T13707] loop0: detected capacity change from 0 to 32768 [ 820.744911][T13707] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2712 (13707) [ 820.898154][T13707] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 820.907132][T13707] BTRFS info (device loop0): setting nodatasum [ 820.913484][T13707] BTRFS info (device loop0): force zlib compression, level 3 [ 820.941833][T13707] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 820.981870][T13707] BTRFS info (device loop0): use lzo compression, level 0 [ 821.014118][T13707] BTRFS info (device loop0): turning on flush-on-commit [ 821.032870][T13707] BTRFS info (device loop0): enabling auto defrag [ 821.062028][T13707] BTRFS info (device loop0): max_inline at 4096 [ 821.129125][T13707] BTRFS info (device loop0): force zlib compression, level 3 [ 821.136950][T13707] BTRFS info (device loop0): using free space tree [ 821.143757][T13707] BTRFS info (device loop0): has skinny extents [ 821.403180][T13732] loop3: detected capacity change from 0 to 32768 [ 821.460449][T13732] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 821.469341][T13732] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 821.556561][T13732] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 821.578861][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 821.586169][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 821.651499][T13707] BTRFS info (device loop0): enabling ssd optimizations [ 821.877076][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 290ms [ 821.924828][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 821.937472][T13732] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 823.483102][T13784] virt_wifi0 speed is unknown, defaulting to 1000 [ 823.613480][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2725'. [ 823.628233][T13784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2725'. [ 824.279644][T13793] loop0: detected capacity change from 0 to 40427 [ 824.318712][T13793] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 824.339452][T13793] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 824.376731][T13793] F2FS-fs (loop0): invalid crc value [ 824.424865][T13793] F2FS-fs (loop0): Found nat_bits in checkpoint [ 824.540122][T13793] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 824.560064][T13793] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 824.666559][T13793] attempt to access beyond end of device [ 824.666559][T13793] loop0: rw=2049, want=45224, limit=40427 [ 824.745007][ T4191] attempt to access beyond end of device [ 824.745007][ T4191] loop0: rw=2049, want=40968, limit=40427 [ 827.754247][T13847] IPVS: Scheduler module ip_vs_ not found [ 829.131813][T13879] xt_hashlimit: size too large, truncated to 1048576 [ 829.223259][T13883] input: syz1 as /devices/virtual/input/input12 [ 829.562610][T13888] loop3: detected capacity change from 0 to 1024 [ 829.824675][T13899] loop0: detected capacity change from 0 to 1024 [ 829.996153][T13888] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 830.010388][T13899] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 831.322885][T13902] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 833.919019][T13938] loop0: detected capacity change from 0 to 32768 [ 833.960964][T13938] (syz.0.2771,13938,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 833.975255][T13938] (syz.0.2771,13938,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 834.004590][T13938] JBD2: Ignoring recovery information on journal [ 834.048699][T13944] loop3: detected capacity change from 0 to 1024 [ 834.068842][T13938] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 834.170518][ T26] audit: type=1800 audit(1783066716.577:34): pid=13938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2771" name="file1" dev="loop0" ino=16979 res=0 errno=0 [ 834.223043][T13944] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 834.283504][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 834.701519][T13952] overlayfs: failed to clone upperpath [ 834.754467][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2778'. [ 835.795061][T13975] loop0: detected capacity change from 0 to 1024 [ 835.927388][T13975] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 836.129113][T13987] overlayfs: upper fs does not support file handles, falling back to index=off. [ 837.681219][T14008] netlink: 'syz.3.2788': attribute type 10 has an invalid length. [ 837.689212][T14008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2788'. [ 838.654505][T14018] loop0: detected capacity change from 0 to 4096 [ 838.793296][T14018] ntfs3: loop0: ino=5, "/" directory corrupted [ 838.988763][T14018] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 839.489233][T14034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2802'. [ 840.968000][ T2240] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 842.435449][ T2240] usb 4-1: unable to get BOS descriptor or descriptor too short [ 842.456576][T14095] netlink: 'syz.2.2817': attribute type 10 has an invalid length. [ 842.464677][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2817'. [ 842.480645][T14093] loop0: detected capacity change from 0 to 1024 [ 842.640175][T14093] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 843.127944][ T2240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.148080][ T2240] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 843.157258][ T2240] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 843.188166][ T2240] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 843.217908][ T2240] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 843.237851][ T2240] usb 4-1: config 1 interface 1 has no altsetting 0 [ 843.568252][ T2240] usb 4-1: string descriptor 0 read error: -22 [ 843.574563][ T2240] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 843.593710][ T2240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.738686][ T2240] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 843.773074][ T2240] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 843.818095][ T2240] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 843.837882][ T2240] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 843.878026][ T2240] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 843.888215][ T2240] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 843.930422][ T2240] usb 4-1: USB disconnect, device number 11 [ 844.525022][T14120] loop0: detected capacity change from 0 to 32768 [ 844.660937][T14120] XFS (loop0): Mounting V5 Filesystem [ 844.689408][T14120] XFS (loop0): Ending clean mount [ 844.863063][ T4191] XFS (loop0): Unmounting Filesystem [ 845.221060][T14161] netlink: 'syz.3.2829': attribute type 10 has an invalid length. [ 845.229264][T14161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2829'. [ 846.929046][T14189] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 847.059663][T14191] loop0: detected capacity change from 0 to 128 [ 847.118706][T14191] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 847.133995][T14191] ext4 filesystem being mounted at /592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 847.209926][T14191] Invalid argument reading file caps for ./file0 [ 847.577267][T14212] loop0: detected capacity change from 0 to 1024 [ 847.664830][T14212] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 848.376391][ T27] INFO: task kworker/0:8:5392 blocked for more than 143 seconds. [ 848.517857][ T27] Not tainted syzkaller #0 [ 848.522837][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.531945][ T27] task:kworker/0:8 state:D stack:23056 pid: 5392 ppid: 2 flags:0x00004000 [ 848.546909][ T27] Workqueue: usb_hub_wq hub_event [ 848.552947][ T27] Call Trace: [ 848.556380][ T27] [ 848.567361][ T27] __schedule+0x11c3/0x4350 [ 848.572433][ T27] ? release_firmware_map_entry+0x190/0x190 [ 848.584006][ T27] ? verify_lock_unused+0x140/0x140 [ 848.589778][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 848.595098][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 848.606262][ T27] schedule+0x11b/0x1e0 [ 848.612249][ T27] schedule_timeout+0xbd/0x2d0 [ 848.617162][ T27] ? console_conditional_schedule+0x40/0x40 [ 848.631383][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 848.642050][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 848.647220][ T27] ? lock_chain_count+0x20/0x20 [ 848.654830][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 848.663965][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 848.671755][ T27] do_wait_for_common+0x295/0x460 [ 848.677019][ T27] ? console_conditional_schedule+0x40/0x40 [ 848.686518][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 848.695776][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 848.704448][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 848.712933][ T27] ? kthread_data+0x4b/0xc0 [ 848.717733][ T27] wait_for_completion+0x48/0x60 [ 848.723856][ T27] flush_workqueue+0x667/0x1390 [ 848.729109][ T27] ? rcu_work_rcufn+0x120/0x120 [ 848.734102][ T27] ? ath6kl_bmi_done+0x1a0/0x1a0 [ 848.739267][ T27] ath6kl_usb_power_off+0x34/0x40 [ 848.744381][ T27] ath6kl_core_init+0xac4/0x10a0 [ 848.749506][ T27] ? lockdep_softirqs_off+0x430/0x430 [ 848.754906][ T27] ? ath6kl_core_rx_complete+0x70/0x70 [ 848.760538][ T27] ? ath6kl_core_create+0x7d6/0x980 [ 848.765755][ T27] ath6kl_usb_probe+0x1301/0x1410 [ 848.770964][ T27] ? _raw_spin_unlock+0x40/0x40 [ 848.775842][ T27] usb_probe_interface+0x5be/0xae0 [ 848.781106][ T27] ? usb_register_driver+0x3c0/0x3c0 [ 848.786434][ T27] really_probe+0x276/0xc70 [ 848.791314][ T27] ? pm_runtime_barrier+0x147/0x1c0 [ 848.796602][ T27] __driver_probe_device+0x1f5/0x390 [ 848.802035][ T27] driver_probe_device+0x4f/0x420 [ 848.807102][ T27] __device_attach_driver+0x2b0/0x500 [ 848.812697][ T27] ? deferred_probe_work_func+0x230/0x230 [ 848.818558][ T27] bus_for_each_drv+0x184/0x210 [ 848.823465][ T27] ? deferred_probe_work_func+0x230/0x230 [ 848.830434][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 848.836193][ T27] __device_attach+0x2a7/0x480 [ 848.841025][ T27] ? device_attach+0x20/0x20 [ 848.845628][ T27] bus_probe_device+0xba/0x1d0 [ 848.851050][ T27] device_add+0xbcf/0x1050 [ 848.855480][ T27] usb_set_configuration+0x19d5/0x2030 [ 848.861009][ T27] usb_generic_driver_probe+0x89/0x150 [ 848.866583][ T27] usb_probe_device+0x126/0x250 [ 848.871582][ T27] ? usb_register_device_driver+0x230/0x230 [ 848.877487][ T27] really_probe+0x276/0xc70 [ 848.882120][ T27] ? pm_runtime_barrier+0x147/0x1c0 [ 848.887332][ T27] __driver_probe_device+0x1f5/0x390 [ 848.892766][ T27] driver_probe_device+0x4f/0x420 [ 848.897934][ T27] __device_attach_driver+0x2b0/0x500 [ 848.903346][ T27] ? deferred_probe_work_func+0x230/0x230 [ 848.909281][ T27] bus_for_each_drv+0x184/0x210 [ 848.914141][ T27] ? deferred_probe_work_func+0x230/0x230 [ 848.919893][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 848.925625][ T27] __device_attach+0x2a7/0x480 [ 848.930584][ T27] ? device_attach+0x20/0x20 [ 848.935218][ T27] ? kobject_uevent_env+0x36c/0x890 [ 848.941485][ T27] bus_probe_device+0xba/0x1d0 [ 848.946262][ T27] device_add+0xbcf/0x1050 [ 848.950794][ T27] usb_new_device+0x9f6/0x15d0 [ 848.955576][ T27] ? usb_disconnect+0x8a0/0x8a0 [ 848.960482][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 848.965687][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 848.970950][ T27] hub_event+0x2b8d/0x5260 [ 848.975396][ T27] ? hub_post_resume+0x120/0x120 [ 848.980384][ T27] ? read_lock_is_recursive+0x10/0x10 [ 848.985775][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 848.991049][ T27] process_one_work+0x867/0xff0 [ 848.995921][ T27] ? worker_detach_from_pool+0x240/0x240 [ 849.001626][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 849.006931][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 849.012094][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 849.017692][ T27] ? wq_worker_running+0x97/0x170 [ 849.022808][ T27] worker_thread+0xad7/0x12a0 [ 849.027505][ T27] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 849.033607][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 849.039657][ T27] kthread+0x42e/0x520 [ 849.043771][ T27] ? rcu_lock_release+0x20/0x20 [ 849.049874][ T27] ? kthread_blkcg+0xd0/0xd0 [ 849.054486][ T27] ret_from_fork+0x1f/0x30 [ 849.059042][ T27] [ 849.062290][ T27] INFO: task udevd:7805 blocked for more than 144 seconds. [ 849.070836][ T27] Not tainted syzkaller #0 [ 849.075969][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 849.084742][ T27] task:udevd state:D stack:23280 pid: 7805 ppid: 3562 flags:0x00004002 [ 849.094184][ T27] Call Trace: [ 849.097646][ T27] [ 849.100932][ T27] __schedule+0x11c3/0x4350 [ 849.105794][ T27] ? rcu_lock_acquire+0x30/0x30 [ 849.110817][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 849.116206][ T27] ? release_firmware_map_entry+0x190/0x190 [ 849.122269][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 849.127392][ T27] ? __mutex_trylock_common+0x86/0x260 [ 849.132939][ T27] ? rcu_lock_release+0x20/0x20 [ 849.137843][ T27] schedule+0x11b/0x1e0 [ 849.142021][ T27] schedule_preempt_disabled+0xf/0x20 [ 849.147403][ T27] __mutex_lock_common+0xdf5/0x2400 [ 849.152749][ T27] ? uevent_show+0x16c/0x320 [ 849.157401][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 849.163429][ T27] mutex_lock_nested+0x17/0x20 [ 849.168259][ T27] uevent_show+0x16c/0x320 [ 849.172700][ T27] dev_attr_show+0x50/0xb0 [ 849.177349][ T27] ? device_get_ownership+0xa0/0xa0 [ 849.182614][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 849.187679][ T27] seq_read_iter+0x460/0xc50 [ 849.192501][ T27] vfs_read+0x75e/0xd50 [ 849.196738][ T27] ? kernel_read+0x1e0/0x1e0 [ 849.201378][ T27] ? __fdget_pos+0x2c6/0x370 [ 849.206012][ T27] ksys_read+0x153/0x260 [ 849.210322][ T27] ? vfs_write+0xd70/0xd70 [ 849.214772][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 849.220030][ T27] do_syscall_64+0x4c/0xa0 [ 849.224487][ T27] ? clear_bhb_loop+0x30/0x80 [ 849.229658][ T27] ? clear_bhb_loop+0x30/0x80 [ 849.234349][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 849.240309][ T27] RIP: 0033:0x7f1a4a648407 [ 849.244733][ T27] RSP: 002b:00007ffc21623e80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 849.253349][ T27] RAX: ffffffffffffffda RBX: 00007f1a4a55a880 RCX: 00007f1a4a648407 [ 849.261363][ T27] RDX: 0000000000001000 RSI: 000055655593a210 RDI: 0000000000000008 [ 849.270655][ T27] RBP: 00007f1a4a790ff0 R08: 0000000000000000 R09: 0000000000000000 [ 849.278756][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 849.286737][ T27] R13: 00007f1a4a790ea0 R14: 0000000000000000 R15: 00005565558e39c0 [ 849.294814][ T27] [ 849.298036][ T27] [ 849.298036][ T27] Showing all locks held in the system: [ 849.308066][ T27] 2 locks held by kworker/0:0/7: [ 849.313047][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 849.324221][ T27] #1: ffffc90000cc7d00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 849.335761][ T27] 1 lock held by khungtaskd/27: [ 849.340660][ T27] #0: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 849.350126][ T27] 2 locks held by getty/3952: [ 849.354817][ T27] #0: ffff88814d461098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 849.364785][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 849.374975][ T27] 2 locks held by syz-executor/4191: [ 849.381494][ T27] #0: ffff888023dd8d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780 [ 849.391042][ T27] #1: ffff8880637ff468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 849.400448][ T27] 5 locks held by kworker/0:8/5392: [ 849.405670][ T27] #0: ffff8881419b8938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 849.416561][ T27] #1: ffffc90002f4fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 849.433796][ T27] #2: ffff888148244220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260 [ 849.442787][ T27] #3: ffff888060e93220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 849.457421][ T27] #4: ffff888060b661a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 849.466787][ T27] 4 locks held by udevd/7805: [ 849.476793][ T27] #0: ffff88802baa0418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 849.485704][ T27] #1: ffff8880605aac88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x55/0x3c0 [ 849.501433][ T27] #2: ffff88805a783cb8 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 849.529124][ T27] #3: ffff888060e93220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 849.538538][ T27] 1 lock held by syz.3.2848/14206: [ 849.543835][ T27] [ 849.546185][ T27] ============================================= [ 849.546185][ T27] [ 849.605285][ T27] NMI backtrace for cpu 1 [ 849.609653][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 849.616861][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.626935][ T27] Call Trace: [ 849.630209][ T27] [ 849.633136][ T27] dump_stack_lvl+0x188/0x250 [ 849.637890][ T27] ? show_regs_print_info+0x20/0x20 [ 849.643085][ T27] ? load_image+0x410/0x410 [ 849.647684][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 849.653057][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 849.658175][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 849.663231][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 849.669409][ T27] ? _printk+0xda/0x130 [ 849.673580][ T27] ? load_image+0x410/0x410 [ 849.678073][ T27] ? load_image+0x410/0x410 [ 849.682566][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 849.688741][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 849.694739][ T27] watchdog+0xe1b/0xe60 [ 849.698899][ T27] kthread+0x42e/0x520 [ 849.702959][ T27] ? hungtask_pm_notify+0x40/0x40 [ 849.707980][ T27] ? kthread_blkcg+0xd0/0xd0 [ 849.712577][ T27] ret_from_fork+0x1f/0x30 [ 849.716987][ T27] [ 849.720358][ T27] Sending NMI from CPU 1 to CPUs 0: [ 849.725598][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 849.738213][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 849.745111][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 849.752311][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.762361][ T27] Call Trace: [ 849.765633][ T27] [ 849.768559][ T27] dump_stack_lvl+0x188/0x250 [ 849.773238][ T27] ? show_regs_print_info+0x20/0x20 [ 849.778432][ T27] ? load_image+0x410/0x410 [ 849.782975][ T27] panic+0x2f8/0x850 [ 849.786875][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 849.792495][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 849.796984][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 849.803125][ T27] watchdog+0xe5a/0xe60 [ 849.807269][ T27] kthread+0x42e/0x520 [ 849.811406][ T27] ? hungtask_pm_notify+0x40/0x40 [ 849.816414][ T27] ? kthread_blkcg+0xd0/0xd0 [ 849.820984][ T27] ret_from_fork+0x1f/0x30 [ 849.825388][ T27] [ 849.828657][ T27] Kernel Offset: disabled [ 849.832978][ T27] Rebooting in 86400 seconds..