last executing test programs: 26m55.265936019s ago: executing program 32 (id=15): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000480)="e3ef7f090000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100005}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x642) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 22m16.020517635s ago: executing program 3 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2006c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf00bf05, 0x2}) 22m14.298850284s ago: executing program 3 (id=521): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_io_uring_setup(0x2aa8, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x10001043, 0xffffffffffffffff, 0x0) 22m13.081814851s ago: executing program 33 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x1000f) 22m5.441955736s ago: executing program 3 (id=531): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xffb, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x7, 0x4, 0x0, {0x0, 0x0, 0xffffffff}, {}, {}, {}, 0x1, 0x100, 0x0, 0x6, 0x1, 0xf79, 0x1, 0x3, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x1, 0x5}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x5, 0x0) 22m0.230615074s ago: executing program 3 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) 21m53.7670923s ago: executing program 3 (id=545): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 21m48.177526177s ago: executing program 3 (id=549): socket$inet6_sctp(0xa, 0x801, 0x84) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000029f000/0x4000)=nil) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200"], 0x2c2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 21m32.843606656s ago: executing program 34 (id=549): socket$inet6_sctp(0xa, 0x801, 0x84) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000029f000/0x4000)=nil) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200"], 0x2c2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 10m53.823201171s ago: executing program 5 (id=1671): mkdir(0x0, 0x0) mkdir(0x0, 0x13b) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x334, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) io_setup(0x8, 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) io_destroy(r3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) mkdir(&(0x7f0000000240)='./bus\x00', 0x44) mount$overlay(0x0, 0x0, 0x0, 0x4408, &(0x7f0000000400)) chdir(0x0) 10m49.605298551s ago: executing program 5 (id=1679): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xffb, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x7, 0x4, 0x0, {0x0, 0x0, 0xffffffff}, {}, {}, {}, 0x1, 0x100, 0x0, 0x6, 0x1, 0xf79, 0x1, 0x3, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x1, 0x5}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$kcm(0xa, 0x5, 0x0) 10m48.70974449s ago: executing program 7 (id=1681): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000005000000", 0xfe60) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f00000000c0)='geneve1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10m47.561097585s ago: executing program 7 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x6, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x3, 0x6, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001300)) 10m43.10387065s ago: executing program 7 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x53b8, &(0x7f0000000000)={0x0, 0x5fa0, 0x40, 0x0, 0x8d}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 10m42.17101703s ago: executing program 5 (id=1695): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0xffffffffffffff54) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {r2, r3+10000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x700, 0x0, 0x4, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x32}, 0x60) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r5) 10m41.394779517s ago: executing program 7 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 10m41.152300362s ago: executing program 5 (id=1699): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x300060c1) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) fallocate(r1, 0x3, 0x0, 0x10000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(r0) 10m39.244539483s ago: executing program 5 (id=1700): creat(&(0x7f0000000280)='./file0\x00', 0x155adae9f4f0a7c9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x2008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24044084, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000040), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 10m37.320691344s ago: executing program 5 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x6, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x3, 0x6, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001300)) 10m34.26419891s ago: executing program 7 (id=1708): openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_open_dev$sg(0x0, 0x0, 0x2082) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xff], 'veth1_to_team\x00', 'bond0\x00', {0xff}, {}, 0x2f, 0x4, 0x4}, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {0x0, 0x2}, {}, {}, {}, {}, {0x5, 0x10}, {}, {0x0, 0x80}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {0x8000}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0xff}, {}, {0x0, 0x1}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 10m32.437547349s ago: executing program 7 (id=1713): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}, [@generic={0x6b, 0x1, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) 10m22.176814109s ago: executing program 35 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x6, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x3, 0x6, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001300)) 10m17.260351794s ago: executing program 36 (id=1713): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}, [@generic={0x6b, 0x1, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) 9m17.073865212s ago: executing program 2 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x5f) 9m15.511098226s ago: executing program 2 (id=1864): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x300060c1) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x0) fallocate(r1, 0x3, 0x0, 0x10000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(r0) 9m14.254895893s ago: executing program 2 (id=1868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x1, 0x10, 0x7, 0x5, 0x2, 0x8, 0xc, 0x7f, 0xff, 0x67, 0xd, 0x1, 0x8, 0xe2, 0x6, 0x3}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m13.707855744s ago: executing program 2 (id=1870): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m13.359084532s ago: executing program 2 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) close_range(r2, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1e, 0x40000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, 0x0) 9m12.02426142s ago: executing program 2 (id=1875): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsopen(&(0x7f0000000400)='jffs2\x00', 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x4, "abacd2116c93000000000000aeb5ab2c7b9ca5fa270ee04200"}) close(0x3) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000000c0)=0x402) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m56.606792621s ago: executing program 37 (id=1875): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsopen(&(0x7f0000000400)='jffs2\x00', 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x4, "abacd2116c93000000000000aeb5ab2c7b9ca5fa270ee04200"}) close(0x3) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000000c0)=0x402) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m13.58226821s ago: executing program 4 (id=2804): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.179342103s ago: executing program 4 (id=2815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x28, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x80000, &(0x7f0000000640)=""/223, 0xdf, 0x2, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m9.897241309s ago: executing program 4 (id=2817): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd2(0x9, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x8dc, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$can_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "89c5a938cab61257"}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) 2m7.758065555s ago: executing program 4 (id=2824): r0 = fsopen(&(0x7f0000000400)='jffs2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0xfffc, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @timestamp={0xd, 0x0, 0x0, 0xff, 0xe, 0x9, 0x5, 0x1}}}, 0x36) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000240)={0x4, "abacd2116c93000000000000aeb5ab2c7b9ca5fa270ee04200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r9}) close(0x3) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f00000000c0)=0x402) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m6.048399911s ago: executing program 4 (id=2829): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580), 0x4, 0xbc0, &(0x7f0000000b40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) pipe(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x400, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x45f, &(0x7f0000001b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000001b00)={0x1, 0x0, 0x3, 0xf, 0x5f, &(0x7f0000001700)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000)=0x2000, 0x1fffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x18800, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_elf32(r5, &(0x7f0000000e00)=ANY=[], 0x458) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10080, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1510, &(0x7f0000002e00)="$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") 2m2.507378337s ago: executing program 4 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='!,\x00\xe5\x9b\xb41\x89\x1a\xd1;m\x83+\xbd\xe1\xdb5f\x14\x8a\xe8\xf7\x8fe\xf0\xea\x15\x1am\xe8=\x99I\xe1\xb6^\xf40\x99\xae\xa2&\xf7\xcc\fJ|aW\xab\xd6\xbcD[\xb5\x97\x14\x11\xac\x83\xce\xaf4g\x14\x9b\xb4%Zn\xe7\x8e[\xf8\xefQ=\xb6\xff\xd3\xeaX\x01\n\xaf\x9b\xc7=\x83\x88\xae\xcb-\xac\xbc\x12\xe7i\xdd\xddy[\xa2\x00\x16\xca\xcfca\xd7A\xfdL\xf1I\xb5\xab\xf7c\xb5\xb8\b\xe6m\n\x85\x00L') setrlimit(0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$int_in(r4, 0x5452, &(0x7f0000002480)=0x3) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000"], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m46.204720346s ago: executing program 38 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='!,\x00\xe5\x9b\xb41\x89\x1a\xd1;m\x83+\xbd\xe1\xdb5f\x14\x8a\xe8\xf7\x8fe\xf0\xea\x15\x1am\xe8=\x99I\xe1\xb6^\xf40\x99\xae\xa2&\xf7\xcc\fJ|aW\xab\xd6\xbcD[\xb5\x97\x14\x11\xac\x83\xce\xaf4g\x14\x9b\xb4%Zn\xe7\x8e[\xf8\xefQ=\xb6\xff\xd3\xeaX\x01\n\xaf\x9b\xc7=\x83\x88\xae\xcb-\xac\xbc\x12\xe7i\xdd\xddy[\xa2\x00\x16\xca\xcfca\xd7A\xfdL\xf1I\xb5\xab\xf7c\xb5\xb8\b\xe6m\n\x85\x00L') setrlimit(0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$int_in(r4, 0x5452, &(0x7f0000002480)=0x3) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000"], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18.100374663s ago: executing program 1 (id=3062): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pread64(r0, &(0x7f0000000040), 0x34, 0x7ff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x81e}, &(0x7f00000000c0)=0xb72, 0x0, 0x800008, 0xe0000, 0x1e, 0x2, 0x3b, 0xffffffff}}, @cswp={0x58, 0x114, 0x7, {{0xb, 0x3}, 0x0, 0x0, 0x401, 0x5, 0x8, 0x3, 0x40, 0x8}}], 0xb0}, 0x0) 12.784297177s ago: executing program 6 (id=3073): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000300), 0x37db, r4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r4}, 0x4) 11.70998146s ago: executing program 8 (id=3074): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000280)='test_dummy_encryption\xbf\x03.\x80\xda\xf7u\xd4%\xd6\xb6OF\xb4z\x88\t\xa6I\xc0\xd9\x11\xfd\xcf\x00\xf9\x96W\xdd3\xd3k\x94\x1abRWdi\x1b7\xf0y~Wt\x16\xbd\x91\xa4Z\"b\\\xf1\x15`WY\xc6h\x12E\x80\xe8q3\x8e\x82n%(?z\xecj<8\xfcMR\x86\xc2\xf6\xbb^\xabH\xe5\xccm\x94\xfc', 0x0, 0xffffffffffffff9c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10.938232946s ago: executing program 1 (id=3075): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 9.928518648s ago: executing program 1 (id=3077): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(0xffffffffffffffff, 0x5, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYBLOB="6e5824b395c6", @ANYBLOB="99939317f305e417746fc1ae5895c62275a431ce0abc1356bde42930f5ab41d76abd7c211ebfe7e8bad9a0fedbb89032ace8c649597d4c95d04d821e0af9953960636a5297b35c265b7c2e867eeb5212056de04ffab8e875bac8d5c76747c3d9480b428a3cfdd503feb53276ba47847999e99103b73df04b2d032e406be0732d5d86a7bc15cee3ad58f04487765819d38101223bdb4ca5a40bafb60bf2e8f3cfe3a8b1608235950221f1e07213e54f57b5923832e6c6923b4e8bb5e6d627bdc7aff1b0510e739e56e63eff"], 0x28}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)="7d063178e096f71f1287f1a49ae61b9dc182a873864d365540c9607c174f4d437404b459080431646b691790475a14ea6fbd72c9de5f1032e8b6f28f00b468fd3d3493911db9bf58989c2f407d6d51dc8b8bb7666d", 0x55}, {0x0}, {&(0x7f0000000440)="0e42c167481b9e8a8ec88bf3766d862bbb48c0593efe82b5e951e4b4e42f4c9949e680fba2bb5bb429019b7acc56033b1cdcb0ad7fef6ce836e9d014b4477f9754045e2e63e35b829e87b96ca88c31a41b0fdfab1457087aba2c73ff82608b77c6c499f85a957fa5e8256b7e3578278822e026586414a2409b199f3bbac79be23a22db56eada04809f6d679f5e", 0x8d}, {&(0x7f0000000500)="c28c175f7c900fff57d89c8bfc871ffebb81d1b8a816840cfbefc31d978204f0f4a6b8f0d90687edd20c7ea3c6ad90f136a351a0a9e8a323966f2fb9efb4a0815fc14ec3185e28abddc9892adc7ab2a980504068be8cf06715cc6c3eb91a089cce2248cbde334ce426cab25282a9433d386aabf0636a0ba72aeb57aa1ce7aca6af84e6f23553d8b2e04bacb5246b19c80226053d7a5dbe699ea32b84b2c0", 0x9e}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="872e2469cae0cf638a23df7116ed9f154e91ed9cd5955b4d92c915053401ccf279c37f3a2a46474bc52d237e0f8174e9966d97a2b96f9383f55db9e839ad460031b2ec8dbe224ff4cfea60c54d1f500db892c16c23666d1017ebe93e35a1a7affd9d37ccbe5bcabc66f2fc48d162555272f6b3745b6dd7ec197b4444898c138c01a37d18b67ba3af234d6026eee5d0425a60af89", 0x94}, {&(0x7f0000001680)="c47d5c13cb0f345c631e538bb1eab4abe969038f359305d8ed832fd462706d7424de9f32bcbc99c4a8eab6ff4d231d867909b81723248b7567423c9c23f46fce433b72a2e0419ff8ca628b5b94c835f5016621b506d8edfd1f18f525e89fa3da56b20e20ab79dfa219c9b8e767f7b88a3ff3554d6b9ce06ffbec47e0a310d75551e8b1c1790ea463ef6b29a9", 0x8c}, {&(0x7f0000001740)}], 0x8, &(0x7f0000001800)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x87, 0x12, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xc1, 0x7, [0xaf1, 0x5, 0x5]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x9b}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x1, 0xe, 0xb, 0x6, [0xe, 0x5, 0x1, 0x0, 0x7, 0xc2b, 0xfffffffffffff4c3]}}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0xe, 0x0, [@local]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@ra={0x5, 0x2, 0x7fff}]}}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a00)="2a4774a4fecae6f532ca8a8cb26b6b4fa0597081f4d1ad73d35ee07f7b3611b520e4196fca9413aed38af055d8d1d9e266c075651afd9064b446afb680e7d505f6018d4105c25dcfdaa3d64701a1665b6d279852b3c6e74f", 0x58}, {&(0x7f0000001a80)="dfe2163bb6e68b5fa81b36d63c06af", 0xf}, {&(0x7f0000001ac0)="676fb1557b0b1294f2536028df2eeb902c13cd0ef1b679bf9ec2d52f2710ff2cf34f1adb1b1d04e715cf65547bb5627d943378df33dfc138e4fc6c22d95b21860a7784f7fc9a104f0ab35c683285a6afd8175cb659bcb7eee0387540fdfb2bf687a605cb1128b933f2a21e43a4779cc3a65fc0af98dce861ca5a3648c4386cf0e53408c4e51f37d0ffa48d585da7a23d23a527c720c50f33d807c023a53143fc1af4ba14c40c1d8fb4ca34194f5004966b828f742bcfd7c3", 0xb8}, {&(0x7f0000001b80)="422d23baedd8f2f6c0dce4d256f0a877087ff2bcf986dfbb53bd957d0f237903572106688f08807ed6a3a60abea9c4c7932e163a56efd1f84d96933efaa78a608cc461c893d7b4c48bef4f1344e0f0b90fb6a5db68c545717c1587c8e23126694bd2409d8cb1cf", 0x67}, {&(0x7f0000001c00)="7954e79e1a9604975e9ec2a3b0fb9947b6c7cdff5ea5d0d3a7bfc163d03872ff85aad814170a6300fa7a322bf1c41717c9e475084c4308fd8496fed7889e4682ece22157f1f2bd3492c1282a15dcd0c68b9d0b88fb84b252206e7638735063182e2460cacd23593357fa36a68ffb25378cb35fa97b4843a68dbd51089d8f2c9bb09434bd97e562823da5be5d79cf41f65c429441f30806efa903312c359c1a313a837007937b0fb5b544f8a289b5ca7189fd", 0xb2}, {&(0x7f0000001cc0)="a430dc9f08ae2ea1cddd0266c8dcc25b3622759cc867e832c8f37ba171f1b4dc8e5120e081a6a68f2a68cf8a65eb6d7ae9400c4097da48f898defabae427f3b47aa9658f76b44b2b05e6e230855847e66c180153287391a8d19797b83bb1b678bd6d4b98ff041e10d793ebfa7caf1db4cdb4b0b5befb774a5c981b1bbb81151ac705f2ba61eae4806cd029acbb37d5312c71f48eb0a9cce679", 0x99}, {&(0x7f0000001d80)="8ba5f7861902bd618510430631fad4aea16c70dc773a15cfb5a1ef17a63024511321cdeda67e7aba6171bb9e8c9536869667bb11adcee95566d5adbff64be48a91cd", 0x42}, {&(0x7f0000001e00)="e18e79c54bc4298af8fa2a4ee4b385987fa3b24f62f2dcce79039205dda65058b37ca59a7800666ed5014288a23c1cf64bd319c3add5f6c192ed353fcf9de501676672b6bc22fcf6d5100a563c25cd2cdf55b64b04361bbafa4092bbd4bbd4bc1664c62e6fcc3fb875c3cc10d4cf6bbcf99c2189fd94067ec27c5f40a8d14a3d8e1e6ae230f3107e753ea276e5767e0beb8486efee", 0x95}], 0x8, &(0x7f0000001f40)=[@tclass={{0x14, 0x29, 0x43, 0xe59}}], 0x18}}], 0x3, 0x4041) 9.663139103s ago: executing program 8 (id=3079): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x200002, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 9.598197525s ago: executing program 6 (id=3081): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) r1 = syz_kvm_add_vcpu$x86(0x0, 0x0) pipe2(&(0x7f0000000bc0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="470f23fc48b8e7320000000000000f21f866baf80cb83c76858fef66bafc0cb8965e7813eff8440f014a000f2221c7c4c3fd01ce0020650f01f824f30f556797f6c44383fd00e702ea02ea7b478f097880581be4", 0x54}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="0002020100000000ff0200000000000001a88e11f19139540546dfc43c53cae91165d186140d72a3c45eecfb2989bf9a684253d2b226a8bbb9a4bbbf25be1d07abd4edd8d51a959716bd5366a711920c607d9a6abe55801e4c6ed815a5b765ae380f46524aaed8ac4a6328ceb6d698af85dd9fc818322eee6bc4656905179a0bc07c0642ecc7abbd2095ed694c8d166aa78be490"], 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 7.615094137s ago: executing program 6 (id=3084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x14, 0x6, 0x0, @local, @private1, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe, 0x0, 0x1001}}}}}}}, 0x0) 6.571805459s ago: executing program 8 (id=3086): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = socket(0x1d, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x20040000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df779cf766e0029da3713a53156c9de2ed0f3666f09833d7844d4f485143cb7a3393904796aa365e1830f06bec89b34d24053fc23e0bf699683131b0ad327418d7e9acc25dd67783cab30349ee97cca653034c7f0dc6b8b0e922602f30bfa2ee5ada218886b2d8a79daad247a13a96dba8c74a1f91176ca62ae315ec45622c0adfb254e02efbaac05bd3abfca614e0b9bfbab8500f87a8f253c4b06cd81ab6013e03ba854ac42b73ce47ee6ad75412afa4265a822c153e3f0bba475b20004f3fc77d40d6e024a3aed0c1101b59878ceb4624730ca1e3facb8fa6f4c69672235c0709d6488a166b5725a232105f3c8daa9dedfa345ab65a89c2082aace03740e7b6c947576624aae1b2698062d5c53d2a82dca42062cb4a91ebfeea98245df8d1211cde8e979e9d2ba6e3c229124ce7896a18639ed4c6a669ed9830a99b17b603248f5b0927deeb48ecd4c2c39d0e7440044544246e05c3c809af1febe1c881a8f846345f59881c843d2786aa82acf45e43ce13fd5aba3632081cc0be486ffd971247642c33764e7b4690cc29d7a9f76e83b"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r5 = openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f00000002c0)=0x3) preadv(r5, 0x0, 0x0, 0x9, 0x8001) 5.869904254s ago: executing program 9 (id=3088): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c000000020601040000060000000000b2070000050001000600650016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a0000000500040000000000"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.694037378s ago: executing program 6 (id=3089): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000340)={[{@logbufs={'logbufs', 0x3d, 0x5}}, {@noalign}, {@filestreams}]}, 0x1, 0x9764, &(0x7f00000097c0)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQJGcc84555xzzjnn+D3L7iquB/S+331fvPec8zy7M11dVVP9/3VXzUz1dC85z2JzDgyMPjC0KQZG7JY751xo4x3nvGKfnfY8ZYoxx5982ORhC0w67OKkg4Z9HGlgYGCkYesZNm2sR088aaSBUd6d/vfGGmPMQeMMDEw37OLswz7ONPTDRI8Nn++dERpxQwf97eKg7Yf+e7fxhnyJIZ8sffOF5wwMDIz/nuWHLDLNP91QaUvOMe88f7f6m9sQq8HDPn/vv1GH/pvogYGBie4d4PvHe+cd9CHcpCFfc/wdHxx93Q/ha/+Pa8k55p1vBP8hj8WRh02bachjfMTHoLER7+c3rzLr7sOG8N3728DAkF3cPzxW/ke05BzzLDDw/vv5gYfHHPeMd97db4717MDAWM8NDIz1/MDAWC8MDIz14sDAWC992C71/6855px+ziGP9+GXh7EPvy+PT/eLfVZ/ce+BgYHRhs4z1ttDjxdjTzH8mFBVVVX/2c0x5/RzwfF/9A86/m+19Ry3dvyvqqr6n9t8c8w5/ZDj+AjH/7E/6Pj/vRtvXGPo7/5nn2noUm9/uDeiqqqq/kvNMx8e/8f/oOP/eDtcv3/H/6qqqv+5Lbrgu8f/sUc4/k/8Qcf/Nea/87Jh8w3/vuGt96zy3eePDZv+xnumj/ye6a+/Z/rg96znvfOP+p7pr75n+ugDA2M9Omz6m3+fPNazQ5b55/WM9fLfn48z6Sjvmf7Ke6aP+p7prw7bpiHTR3vP9LfeM//of58+9pD/phj2dV/7gKGuqqr6j2nR6eeZa+A9z7MfNnn4E/vxeaHHHLP1XR/W9lZVVVVVVVXVf723nzr97L//zfcnB97zt6t/+xvWYb8XGHTsudde+6Ft6H9Gg/759yFbfNjb9P+3Ic6jHz7FwMBaS3zYm1IfQv9j/la9/q+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/3/7+/+Be7+0w7BZZ5nszvsW+/uSkw6sNuyzW+6cc6HVPoRt/xD633r+f2C1QQMDw3zHH2K50ByLLj7VwMDAYvfdOdmMA3+7buYh18064cjv/jHnwMBU7/4/eNL3WfOwd1l4980dJv7bOo59d/3zvbPfyING2Ij3NNs59x+06pKvzDDixy+8/+342/tLLPXyflMO/1uWkUaYafT3WXj4+offlhGdh237VEO2feoN1lxn6vU33uSrq625/CorrbLSWtNNN+0M0884w3Rfn2XqlVdbY6Vphv7/PmM29K0rRv53xmzsEcfsqTneO2Yj3rYJTj4Ix+yf39XjH1bx7hrPm+3hy4eP2Sj/5pgN/3ojf/CYTbHasC806cDggeXeHZpBAwOTjjJ4YKMhF6YdbWBg0sHD5p10yLzfnHCkgYEd/35DBw17sdGh8wzaYsg8/2HvWzLLsBHZdPh8I77O+ogb+q/et+SEsXe5c4T3Lfm/1f/R8f+fvGYe9LeBGv4GCMPmGer1Ib/PxD9t7xSjvHuQe7/t/YDXxXk3un+tuepjS/x3vS4Obe/YH7C9H/A6fu+7vVNN+8weQ1f137a9I+zrFhh65b+zrxv44H3dyLT8SldNPuK+bv7338R/eBwPH6PRRpjp/fZ1O85/3uZD1j/wwfu6BVYb9uIBf9/XjTQwMOnIw/d1Q3Z8ow4e2HHIhemGXBht8MChQy5M/+6FMQbOHXLhayusvcaKg959mYFh651myHpnn3DQ0AfQTQetOtou77wzyrBteXmsf9zWYfePKd57PJ9jwmGDOWzZ4esdMuvw9b66zdDrRh223lf+C+sdvixt76RnDb1utGHrfXWE9Q7+gPUOX/afHg9TDfqHJ6rC/uZDfV8jevyO/gHb+wGvw433t3fdp1z24f+G1+Ee9H7bO8oHb+/7vW/I+27v45c/se9/1+uG0/3s3n2G3ldGH3Y/e+u/cP8dvuyI+7GhLwQydLc/+r+zH5vin/ZjW4480giD/Z7e7/vcFWH+YY+Iv61txQNfWW342A8eYb3/6vvc99yWQbAfG3+En+cGbb7vwCAa80fXeGHDt3f+4DEfPPCPP1sMH/Phy37QmI/274z5Jz54zEf8Pvn9xnyqzw69fvAI2//eMV9kt9lvGj7mo46w3n815qN98LHjn8d8YGAwjfmOkw0dtw/an77fmA9fdviYD/k6s044ysDcAwMDUw4b81H/nTGf9L/nfj4mzD/085X+NunZGRf+yvAxH3GM/9WYj/pfHPPN7v3b/XzKd6/7zEgDo446sNHyG2yw3rRD/x9+cbqh//O+6NkVh47zBx1L389o+LIf9LgY5d8xGv/fMhr0r4wmG+X9jP7+0Br5oEWf+z/dF43yXzU6l/dFp847dNw+6Pui9xvz4cvScXDi9yw/4s+hH/D6WXib3h2f+bcd/vPef8LrZw3/efd/5OtnDf+d5Goj7uTr363f/7vL313+7vJ3l7+49zn/P8Xw8//vjH3AJMN+6Bx81cy3zv5hb++H3P/q8//DfP/h/P/st8581ZAfrYZd94HnZ4fO8x95fnamoR8memz4fCOeHxxxQ//V+dl9dt3gqv9H52f/jxr+WP03fi5u/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9z7n/6cZ/jyAhxZf6PvDToQO3nTaozb9sLf3Q+5/9fn/Yb7/cP5/06Om3XSkgb9d94Hn/4fO4zj/f/+Cmy/zn3z+f/hjtfP/9S/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc/5/9mHPw/giNnm/tzw5wPcsN1+e3zY2/sh97/1/H/v/++t/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3LDz/wMjvE3iwt0vMDj//z+79/FfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+ePWfy3yh+z+P8mf8ziv3X+mMX/t/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9d/pjF//f5Yxb/HfLHLP5/yB+z+P8xf8ziv2P+mMV/p/wxi/+f8scs/jvnj1n8d8kfs/jvmj9m8f9z/pjF/y/5Yxb/3fLHLP5/zR+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4j9J/pjF/6P5Yxb/SfPHLP4fyx+z+E+WP2bx/3j+mMX/E/ljFv/J88cs/p/MH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8P5s/ZvGfMn/M4v+5/DGL/+fzxyz+X8gfs/hPlT9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/+v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Rv6YxX/W/DGL/zfzxyz+s+WPWfy/lT9m8f92/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v5M/ZvGfO3/M4j9P/pjFf978MYv/d/PHLP7z5Y9Z/L+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+ePWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+SPWfx/mD9m8V8yf8ziv1T+mMX/R/ljFv8f549Z/JfOH7P4L5M/ZvFfNn/M4v+T/DGL/3L5Yxb/5fPHLP4/zR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/X+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v88cs/lvlj1n8f5M/ZvHfOn/M4v/b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/y5/zOL/+/wxi/8O+WMW/z/kj1n8/5g/ZvHfMX/M4r9T/pjF/0/5Yxb/nfPHLP675I9Z/HfNH7P4/zl/zOL/l/wxi/9u+WMW/7/mj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vzf25bDP7H4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvF/99P8/zmL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/2X+mMX/V/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/+v8MYv/VvljFv/f5I9Z/LfOH7P4/zZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/yx+z+P8+f8ziv0P+mMX/D/ljFv8/5o9Z/HfMH7P475Q/ZvH/U/6YxX/n/DGL/y75Yxb/XfPHLP5/zh+z+P8lf8ziv1v+mMX/r/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/5IH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/hPkj9m8f9o/pjFf9L8MYv/x/LHLP6T5Y9Z/D+eP2bx/0T+mMV/8vwxi/8n88cs/p/KH7P4T5E/ZvH/dP6Yxf8z+WMW/8/mj1n8p8wfs/h/Ln/M4v/5/DGL/xfyxyz+U+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f96/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5E/ZvGfNX/M4v/N/DGL/2z5Yxb/b+WPWfy/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/+/kj1n8584fs/jPkz9m8Z83f8zi/938MYv/fPljFv/v5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF//v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/wf5Yxb/H+aPWfyXzB+z+C+VP2bx/1H+mMX/x/ljFv+l88cs/svkj1n8l80fs/j/JH/M4r9c/pjFf/n8MYv/T/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f95/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Zf6Yxf9X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/6/wxi/9W+WMW/9/kj1n8t84fs/j/Nn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/LH7P4/z5/zOK/Q/6Yxf8P+WMW/z/mj1n8d8wfs/jvlD9m8f9T/pjFf+f8MYv/LvljFv9d88cs/n/OH7P4/yV/zOK/W/6Yxf+v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/DVf7vjPfvzmnxP0Ll/+9n8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5YxL/UQbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/PHLP5b5Y9Z/H+TP2bx3zp/zOL/2/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8uf8zi//v8MYv/DvljFv8/5I9Z/P+YP2bx3zF/zOK/U/6Yxf9P+WMW/53zxyz+u+SPWfx3zR+z+P85f8zi/5f8MYv/bvljFv+/5o9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vtJ/Uf7F9db/PeX+v+rLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP+pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/3X+mMV/q/wxi/9v8scs/lvnj1n8f5s/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5Y9Z/H+fP2bx3yF/zOL/h/wxi/8f88cs/jvmj1n8d8ofs/j/KX/M4r9z/pjFf5f8MYv/rvljFv8/549Z/P+SP2bx3y1/zOL/1/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/2kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/Mn/M4v+r/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/df6YxX+r/DGL/2/yxyz+W+ePWfx/mz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/lj1n8f58/ZvHfIX/M4v+H/DGL/x/zxyz+O+aPWfx3yh+z+P8pf8ziv3P+mMV/l/wxi/+u+WMW/z/nj1n8/5I/ZvHfLX/M4v/X/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/6QP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j+h2P+dzd//Oov/RGL/D8riP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8xkD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/MH7P4/yp/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+dP2bx3yp/zOL/m/wxi//W+WMW/9/mj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/d/ljFv/f549Z/HfIH7P4/yF/zOL/x/wxi/+O+WMW/53yxyz+f8ofs/jvnD9m8d8lf8ziv2v+mMX/z/ljFv+/5I9Z/HfLH7P4/zV/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzmQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/I5n/aP/mfBb/jWX+/24W/03yxyz+v8wfs/j/Kn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f50/ZvHfKn/M4v+b/DGL/9b5Yxb/3+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf93+WMW/9/nj1n8d8gfs/j/IX/M4v/H/DGL/475Yxb/nfLHLP5/yh+z+O+cP2bx3yV/zOK/a/6Yxf/P+WMW/7/kj1n8d8sfs/j/NX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPNZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I89kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0ne1//td9555//Npv0nZvH/aI9/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8p/SINGHAOL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v88cs/r/KH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f549Z/LfKH7P4/yZ/zOK/df6Yxf+3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/13+mMX/9/ljFv8d8scs/n/IH7P4/zF/zOK/Y/6YxX+n/DGL/5/yxyz+O+ePWfx3yR+z+O+aP2bx/3P+mMX/L/ljFv/d8scs/n/NH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMO5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PHLP6T5o9Z/D+WP2bxnyx/zOL/8fwxi/8n8scs/pPnj1n8P5k/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/h/Nn/M4j9l/pjF/3P5Yxb/z+ePWfy/kD9m8Z8qf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+N/DGL/6z5Yxb/b+aPWfxnyx+z+H8rf8zi/+38MYv/7PljFv858scs/nPmj1n858ofs/h/J3/M4j93/pjFf578MYv/vPljFv/v5o9Z/OfLH7P4fy9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/1/nj1n8t8ofs/j/Jn/M4r91/pjF/7f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Xf6Yxf/3+WMW/x3yxyz+f8gfs/j/MX/M4r9j/pjFf6f8MYv/n/LHLP47549Z/HfJH7P475o/ZvH/c/6Yxf8v+WMW/93yxyz+f80fs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4w3kj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/v8fe/SUNgoBQAHwVn/mY7Zt27Zt27Zt27Zt27Zt673vrKAzs4UZ1X/U8j+a/6jlf3T/Ucv/GP6jlv8x/Uct/2P5j1r+x/YftfyP4z9q+R/Xf9TyP57/qOV/fP9Ry/8E/qOW/wn9Ry3/E/mPWv4n9h+1/E/iP2r5n9R/1PI/mf+o5X9y/1HL/xT+o5b/Kf1HLf9T+Y9a/qf2H7X8T+M/avmf1n/U8j+d/6jlf3r/Ucv/DP6jlv8Z/Uct/zP5j1r+Z/YftfzP4j9q+Z/Vf9TyP5v/qOV/dv9Ry/8c/qOW/zn9Ry3/c/mPWv7n9h+1/M/jP2r5n9d/1PI/n/+o5X9+/1HL/wL+o5b/Bf1HLf8L+Y9a/hf2H7X8L+I/avlf1H/U8r+Y/6jlf3H/Ucv/Ev6jlv8l/Uct/0v5j1r+l/Yftfwv4z9q+V/Wf9Tyv5z/qOV/ef9Ry/8K/qOW/xX9Ry3/K/mPWv5X9h+1/K/iP2r5X9V/1PK/mv+o5X91/1HL/xr+o5b/Nf1HLf9r+Y9a/tf2H7X8r+M/avlf13/U8r+e/6jlf33/Ucv/Bv6jlv8N/Uct/xv5j1r+N/Yftfxv4j9q+d/Uf9Tyv5n/qOV/c/9Ry/8W/qOW/y39Ry3/W/mPWv639h+1/G/jP2r539Z/1PK/nf+o5X97/1HL/w7+o5b/Hf1HLf87+Y9a/nf2H7X87+I/avnf1X/U8r+b/6jlf3f/Ucv/Hv6jlv89/Uct/3v5j1r+9/Yftfzv4z9q+d/Xf9Tyv5//qOV/f/9Ry/8B/qOW/wP9Ry3/B/mPWv4P9h+1/B/iP2r5P9R/1PJ/mP+o5f9w/1HL/xH+o5b/I/1HLf9H+Y9a/o/2H7X8H+M/avk/1n/U8n+c/6jl/3j/Ucv/Cf6jlv8T/Uct/yf5j1r+T/Yftfyf4j9q+T/Vf9Tyf5r/qOX/dP9Ry/8Z/qOW/zP9Ry3/Z/mPWv7P9h+1/J/jP2r5P9d/1PJ/nv+o5f98/1HL/wX+o5b/C/1HLf8X+Y9a/i/2H7X8X+I/avm/1H/U8n+Z/6jl/3L/Ucv/Ff6jlv8r/Uct/1f5j1r+r/Yftfxf4z9q+b/Wf9Tyf53/qOX/ev9Ry/8N/qOW/xv9Ry3/N/mPWv5v9h+1/N/iP2r5v9V/1PJ/m/+o5f92/1HL/x3+o5b/O/1HLf93+Y9a/u/2H7X83+M/avm/13/U8n+f/6jl/37/Ucv/A/6jlv8H/Uct/w/5j1r+H/Yftfw/4j9q+X/Uf9Ty/5j/qOX/cf9Ry/8T/qOW/yf9Ry3/T/mPWv6f9h+1/D/jP2r5f9Z/1PL/nP+o5f95/1HL/wv+o5b/F/1HLf8v+Y9a/l/2H7X8v+I/avl/1X/U8v+a/6jl/3X/Ucv/G/6jlv83/Uct/2/5j1r+3/Yftfy/4z9q+X/Xf9Ty/57/qOX/ff9Ry/8H/qOW/w/9Ry3/H/mPWv4/9h+1/H/iP2r5/9R/1PL/mf+o5f9z/1HL/xf+/2tgUNH/l/6jlv+v/Ect/1/7j1r+v/Eftfx/6z9q+f/Of9Ty/73/qOX/B/9Ry/+P/qOW/5/8Ry3/P/uPWv5/8R+1/P/qP2r5/81/1PL/u/+o5f8P/1HL/5/+o5b/v/xHLf9/+49a/v/xH5X8jzLIf9TyP5j/qOV/cP9Ry/8Q/qOW/wH/Ucv/kP6jlv+h/Ect/0P7j1r+h/EftfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzL3t3G5lUWfhw/Xds9/dm/m3N4DRkMNt3Ela1dmQw2H+pjwVQdiwETyBZWRqUw9xDcQK0GJQZjmIwEEXWbugkkxowXwwSElUQlTkXjRDTEIaiLmBomMqJxqbnb3qW91zbrVa9rL/b5vGjvc8rvdFvy3TllawYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEqbt91yw9qOjrZNXnjhhRcDL07170xAaq9Ff6p/JAAAAAAAAAAAAAAAwEhyfDvRqf45AgAAAADA6aal9V3d1VVDTlUPPpjz87be902vXnn9nucfX1l+3//hy4e55ITBBz09PT0vNXfN7D+cVBRF6bNN7z+eXDkuXb+z6/LtfUeh+O2zza3btjcf3PmVrz88d+r0ObW9Z2uLNde1d7QtmVAUobq22Fo6aKgqijCxttheOmgsHUyqLe4vHSztPZhSHCgdXHjtho51pRMnfGo47bS0fraoHlJsMeR3g8H9d3Zt2lV+P8oly1erKfr7r2v+4d6Kj5WN0H/5+qGqsv8x/wSBEY2t/9sXlt+PcskT7v+PttetGu5jI/dfvn6YoH9IZ5jn/yGN9j7v79k/Y4Tn/7nDXHJg/9O/rOwq9X/TL1+o7z9VczLP/6XP13cUqiv7nzDk+b/0HF9Tfv6fVBShdpy/HHBaaWn9XPdo9//K7of2X3NWxaZqcP9HV+2pLvV/+K4H3t9/qvak+h+4fqgZ5f5f9ZkDQ3+swNi0tO7uqbj/j6H/YsEwlxzof/7uY1eV+j9j55F9gz42lv5rK/tfvOXGTyzevO2W+vYb165vW992U2NjQ9PSZU2NFy1f3PtI0Pd2nL8qcHoY3/2/mFqxqSqKtoH9og8ve6nU/8Fz//G3/lOTx9j/xFHv/8+5/8Owzp9QTJxYbF27Zcumhr635cPGvrd9/9kw/Z/49f+I/c8r/3/A8tfdpS/IB/a/eedXP1Lq/95Jqx7oPzVxjP1PGq3/ztc+LxBhnPf/dRWbIf23v/qddaX+//TK8UP9p8b69f/kUfvf5f4P49HSWvEXfv7HSv2v/tfh4f6c4CSEKf78D9LJ0f/Wab/4Ztw6TNU/pJOj/6Wb2yL/sm34P/1DOjn6/9WOqiNx63CG/iGdHP1/rfvBjXHrME3/kE6O/vfPfuSpuHX4f/1DOjn6P75++lVx61Cnf0gnR/+XfWnv6rh1mK5/SCdH/1WvTHsibh1m6B/SydF/fdXZn4pbh9fpH9LJ0f91nQ+/GLcOM/UP6eTo//M7fx35fTrh9fqHdHL0/9Qft+6IW4dZ+od0cvT/wqz2+rh1OFP/kE6O/u+/4YlH4tbhDfqHdHL0//S3Pngsbh2C/iGdHP1/49kja+LWYbb+IZ0c/e9beOwPcetwlv4hnRz9//ujV38gbh3eqH9IJ0f/Yf/y78atw9n6h3Ry9H/Fk3c1xK3DHP1DOjn671xx251x63CO/iGdHP03NS+cHbcO5+of0snR/4w///3uuHWYq39IJ0f/H7vvvZX/7vdJCufpH9LJ0f/NG1Y/GrcO5+sf0snR/8oZPRfErcM8/UM6Ofo/fPS+H8Wtw3z9Qzo5+r/7ziVXxK3Dm/QP6eTo/we3ntcdtw5v1j+kk6P/l2vvuDVuHRboH9LJ0f+Xf1azLG4dFuof0snR/48f+v6uuHV4i/4hnRz9v/i+x86JW4cL9A/p5Oh/98Wzvhi3Dm/VP6STo/93P7Nxfdw6LNI/pJOj/8l7f380bh3q9Q/p5Oh//qqDH4pbhwv1D+nk6H/DojW/i1uHxfqHdHL0/8yBpw/FrcMS/UM6Ofrf8dinm+PWoUH/kE6O/h+/rOM/cevQqH9IJ0f//2z6ycfj1mGp/iGdHP2feejbX4hbhyb9Qzo5+r/6wckz49bhIv1DOjn633jN7O/FrcMy/UM6Ofq/ZO5Dl8atw9v0D+nk6P89f11xc9w6XKx/SCdH/3X33PNc3Dos1z+kk6P/edfefk3cOlyif0gnR//Xz6l/Mm4dLtU/pJOj/zuOtyyIW4cV+od0cvTfddvz++LWYaX+IZ0c/Xd/8uW6uHV4u/4hnRz9751y5b1x6/AO/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD//xDC0no=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0xc6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x3d0) fallocate(r1, 0x10, 0x10c01, 0x8000) 4.793471028s ago: executing program 1 (id=3090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 4.705441159s ago: executing program 1 (id=3091): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000300), 0x37db, r4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r4}, 0x4) 4.70479241s ago: executing program 9 (id=3092): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x22000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020603000000be870000000006000002090005000200008005000400000000000c000900020073797a3000000000050001000700000014000300686173683a69702c706f72742c69700000000000000000000000d648965d0f966c2a7ea3b5af54e67414cbdb3347af9f04de262f0e9e83f2d2cd"], 0x58}}, 0x4000000) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) r6 = syz_open_dev$dri(0x0, 0x9ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x46, 0x0, &(0x7f0000000000)='\x00', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 4.595472152s ago: executing program 8 (id=3093): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd2(0x9, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "89c5a938cab61257"}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) 3.544520975s ago: executing program 8 (id=3095): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(0xffffffffffffffff, 0x5, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYBLOB="6e5824b395c6", @ANYBLOB="99939317f305e417746fc1ae5895c62275a431ce0abc1356bde42930f5ab41d76abd7c211ebfe7e8bad9a0fedbb89032ace8c649597d4c95d04d821e0af9953960636a5297b35c265b7c2e867eeb5212056de04ffab8e875bac8d5c76747c3d9480b428a3cfdd503feb53276ba47847999e99103b73df04b2d032e406be0732d5d86a7bc15cee3ad58f04487765819d38101223bdb4ca5a40bafb60bf2e8f3cfe3a8b1608235950221f1e07213e54f57b5923832e6c6923b4e8bb5e6d627bdc7aff1b0510e739e56e63eff"], 0x28}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)="7d063178e096f71f1287f1a49ae61b9dc182a873864d365540c9607c174f4d437404b459080431646b691790475a14ea6fbd72c9de5f1032e8b6f28f00b468fd3d3493911db9bf58989c2f407d6d51dc8b8bb7666d", 0x55}, {0x0}, {&(0x7f0000000440)="0e42c167481b9e8a8ec88bf3766d862bbb48c0593efe82b5e951e4b4e42f4c9949e680fba2bb5bb429019b7acc56033b1cdcb0ad7fef6ce836e9d014b4477f9754045e2e63e35b829e87b96ca88c31a41b0fdfab1457087aba2c73ff82608b77c6c499f85a957fa5e8256b7e3578278822e026586414a2409b199f3bbac79be23a22db56eada04809f6d679f5e", 0x8d}, {&(0x7f0000000500)="c28c175f7c900fff57d89c8bfc871ffebb81d1b8a816840cfbefc31d978204f0f4a6b8f0d90687edd20c7ea3c6ad90f136a351a0a9e8a323966f2fb9efb4a0815fc14ec3185e28abddc9892adc7ab2a980504068be8cf06715cc6c3eb91a089cce2248cbde334ce426cab25282a9433d386aabf0636a0ba72aeb57aa1ce7aca6af84e6f23553d8b2e04bacb5246b19c80226053d7a5dbe699ea32b84b2c0", 0x9e}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="872e2469cae0cf638a23df7116ed9f154e91ed9cd5955b4d92c915053401ccf279c37f3a2a46474bc52d237e0f8174e9966d97a2b96f9383f55db9e839ad460031b2ec8dbe224ff4cfea60c54d1f500db892c16c23666d1017ebe93e35a1a7affd9d37ccbe5bcabc66f2fc48d162555272f6b3745b6dd7ec197b4444898c138c01a37d18b67ba3af234d6026eee5d0425a60af89", 0x94}, {&(0x7f0000001680)="c47d5c13cb0f345c631e538bb1eab4abe969038f359305d8ed832fd462706d7424de9f32bcbc99c4a8eab6ff4d231d867909b81723248b7567423c9c23f46fce433b72a2e0419ff8ca628b5b94c835f5016621b506d8edfd1f18f525e89fa3da56b20e20ab79dfa219c9b8e767f7b88a3ff3554d6b9ce06ffbec47e0a310d75551e8b1c1790ea463ef6b29a9", 0x8c}, {&(0x7f0000001740)}], 0x8, &(0x7f0000001800)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x87, 0x12, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xc1, 0x7, [0xaf1, 0x5, 0x5]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x9b}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x1, 0xe, 0xb, 0x6, [0xe, 0x5, 0x1, 0x0, 0x7, 0xc2b, 0xfffffffffffff4c3]}}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0xe, 0x0, [@local]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@ra={0x5, 0x2, 0x7fff}]}}}], 0x110}}, {{&(0x7f00000019c0)={0xa, 0x4e24, 0x8, @mcast2, 0x8}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001a00)="2a4774a4fecae6f532ca8a8cb26b6b4fa0597081f4d1ad73d35ee07f7b3611b520e4196fca9413aed38af055d8d1d9e266c075651afd9064b446afb680e7d505f6018d4105c25dcfdaa3d64701a1665b6d279852b3c6e74f", 0x58}, {&(0x7f0000001a80)="dfe2163bb6e68b5fa81b36d63c06af", 0xf}, {&(0x7f0000001ac0)="676fb1557b0b1294f2536028df2eeb902c13cd0ef1b679bf9ec2d52f2710ff2cf34f1adb1b1d04e715cf65547bb5627d943378df33dfc138e4fc6c22d95b21860a7784f7fc9a104f0ab35c683285a6afd8175cb659bcb7eee0387540fdfb2bf687a605cb1128b933f2a21e43a4779cc3a65fc0af98dce861ca5a3648c4386cf0e53408c4e51f37d0ffa48d585da7a23d23a527c720c50f33d807c023a53143fc1af4ba14c40c1d8fb4ca34194f5004966b828f742bcfd7c3", 0xb8}, {&(0x7f0000001b80)="422d23baedd8f2f6c0dce4d256f0a877087ff2bcf986dfbb53bd957d0f237903572106688f08807ed6a3a60abea9c4c7932e163a56efd1f84d96933efaa78a608cc461c893d7b4c48bef4f1344e0f0b90fb6a5db68c545717c1587c8e23126694bd2409d8cb1cf", 0x67}, {&(0x7f0000001c00)="7954e79e1a9604975e9ec2a3b0fb9947b6c7cdff5ea5d0d3a7bfc163d03872ff85aad814170a6300fa7a322bf1c41717c9e475084c4308fd8496fed7889e4682ece22157f1f2bd3492c1282a15dcd0c68b9d0b88fb84b252206e7638735063182e2460cacd23593357fa36a68ffb25378cb35fa97b4843a68dbd51089d8f2c9bb09434bd97e562823da5be5d79cf41f65c429441f30806efa903312c359c1a313a837007937b0fb5b544f8a289b5ca7189fd", 0xb2}, {&(0x7f0000001cc0)="a430dc9f08ae2ea1cddd0266c8dcc25b3622759cc867e832c8f37ba171f1b4dc8e5120e081a6a68f2a68cf8a65eb6d7ae9400c4097da48f898defabae427f3b47aa9658f76b44b2b05e6e230855847e66c180153287391a8d19797b83bb1b678bd6d4b98ff041e10d793ebfa7caf1db4cdb4b0b5befb774a5c981b1bbb81151ac705f2ba61eae4806cd029acbb37d5312c71f48eb0a9cce679", 0x99}, {&(0x7f0000001d80)="8ba5f7861902bd618510430631fad4aea16c70dc773a15cfb5a1ef17a63024511321cdeda67e7aba6171bb9e8c9536869667bb11adcee95566d5adbff64be48a91cd", 0x42}], 0x7, &(0x7f0000001f40)=[@tclass={{0x14, 0x29, 0x43, 0xe59}}], 0x18}}], 0x3, 0x4041) 3.193313222s ago: executing program 9 (id=3096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r0, 0x1) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 2.488030377s ago: executing program 0 (id=3097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x6495e2608cdd7f70}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="b805000000b9060000000f01d90fc71b0f0766baa000b802d90000ef0f2b9d070000000f01c58fc938943d0a000000260f01cb0f1cbf0a000000c4e37904f300", 0x40}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.486719127s ago: executing program 8 (id=3098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$eJzs3T9sFNkdAOA3YyfYBIhNKIgUKSsFJVESWTYViZFijMHY4BCRQJFmWdsLOFl7kb2OUlA4SoOUKlKKKAW6k65zhdxdxTUnXXnNlVyNdFdcc9JJiD3t7qy9M+vFe9wuPtD3SXh23n/8m3n7phi/OFG5t7KRW9nIFdZy5aU7G2dzfy+XNleLIc76sC2lJ7run0PVjziJ/eG5fvHyn26dDeGD5U+eVavVaqgZDPuaaPn85RcPllqPTXHryb8a7e7fWq/8JYRwqm1cNQMhhKHk84XkOJ0ch0MIJ0IIUQjh1oN/3871aDSPnxbP558vPNyZPDO//Win8/89CuH/pR//5u7qZz8bmPz0Vz3qHgAAAAAAAAAAAAAAAACAN9zsjes3/zg+EZ5EYXA7an9fdzY5dno/ttozP+04xl69mwsAAAAAAAAAAAAAAAAAAADfVXvv/+eik/u8/z+THKc61K/+vrt+fv4tx0l/zP3h+syl8Ylk//eoLf9ckvT5hYEw2txf/aPO+79fyNTff//39n5eVXN8zX5HQhSPpc7jeGwshHeTjd9PR0fjUnmj8us75c215Z4N442Vjn9j9/5UdJIN/VPxf8n+/9OZ9vu///+P2q6m2vnt3l1ib7V0/Ac6lnvvn9FL4v/93XIXM/VeR/x5den4D9bThlsLTDUmgFr8/zN48P0/k2m/X/E/EULIRbWx5lIzQG0NU0vvtF4hLR3/79XTUlNn8ovsdP9/lYn/pUz7hzX/b2W/iNhXOv6NeXwoVWLv/h+ND77/L2faP4z418a/5fu/K+n4H2kkDqaK1H+T3c7/s5n2s/F/Ua1WezHum3EyzhNR6grYjhrp/mZcd9LxH2rL33v+i7ta/1/J1H9dz3/NfpvPf83p/5dR4/mP/e3Gfyc8q1aHO5br9v6fy9Tr9/w/VV//tTl3qp+dvkXS9//Relp67TxS/9kp/tVM/Ocz7b9C/N/v/BS6p74qGWrGf28+eXGkkf6O9V9X0vH/QSMxbi2xVf9ZX/9FB6//r2baP4z1X238W3F/e31bpON/rGO5Wvw/7uL7/1qmXv/jH8J48wJoX75wgHT8j3csV7//hw6O/0KmXr/j/4t+Ng4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwBphOjiMhisdS53E8NhbCxeT8dDgaLRaW84ul8tLfNkKYSdJz4WR0t1ReLJTyK2vl5WK+UCqVl0K4lOSfCkPRRqlcya8W7l/ebWs4ulcsrFcWi4VKCGE2Sf9JON5sa3Glslq4H0K4spv3w7i8fv9eYS2/vLL+u/Hx8fEwtzuG0aj4j0pxrdLovZEbwvxu3ZGoZXD17Ku7YzkW/bW8ub5WKNXTr7XUKZWXCqWWOgtJ3n/DaFRZ31xbKlSK+VL5brO/wzSVHGfmbvz5xrWJtvzbUeM4/XqHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA39GTyt/8LIQw2zuIQQi5KPkTJv5THT4vn888XHu5MnpnffrTzbL8yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXTpGiRiIwgD8ZlJo6TGsQtLZRhTRwojgCfQYHkaP4iW8g4WFrcWysDuBkGwgzW71fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsN7dc//y1LQRKc43ZxFfb98/4/yh1I/rw/erE8zI8dw/9je3TVv+Pc3yq3L02+Vd+v/3/lqVGqM6+JzsyXSf9uZ9ppb2bWm+oe9FpFxHRFfyy5RzXa97CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//4VrJTc=") write$cgroup_devices(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@rodir}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x280b851, 0x0, 0x1, 0x0, &(0x7f00000000c0)) chdir(&(0x7f00000003c0)='./bus\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2228018, 0x0, 0x1, 0x0, &(0x7f0000000000)) unlinkat(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.430893338s ago: executing program 1 (id=3099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x14, 0x6, 0x0, @local, @private1, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe, 0x0, 0x1001}}}}}}}, 0x0) 2.405819189s ago: executing program 9 (id=3100): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(0xffffffffffffffff, 0x5, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYBLOB="6e5824b395c6", @ANYBLOB="99939317f305e417746fc1ae5895c62275a431ce0abc1356bde42930f5ab41d76abd7c211ebfe7e8bad9a0fedbb89032ace8c649597d4c95d04d821e0af9953960636a5297b35c265b7c2e867eeb5212056de04ffab8e875bac8d5c76747c3d9480b428a3cfdd503feb53276ba47847999e99103b73df04b2d032e406be0732d5d86a7bc15cee3ad58f04487765819d38101223bdb4ca5a40bafb60bf2e8f3cfe3a8b1608235950221f1e07213e54f57b5923832e6c6923b4e8bb5e6d627bdc7aff1b0510e739e56e63eff"], 0x28}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)="7d063178e096f71f1287f1a49ae61b9dc182a873864d365540c9607c174f4d437404b459080431646b691790475a14ea6fbd72c9de5f1032e8b6f28f00b468fd3d3493911db9bf58989c2f407d6d51dc8b8bb7666d", 0x55}, {0x0}, {&(0x7f0000000440)="0e42c167481b9e8a8ec88bf3766d862bbb48c0593efe82b5e951e4b4e42f4c9949e680fba2bb5bb429019b7acc56033b1cdcb0ad7fef6ce836e9d014b4477f9754045e2e63e35b829e87b96ca88c31a41b0fdfab1457087aba2c73ff82608b77c6c499f85a957fa5e8256b7e3578278822e026586414a2409b199f3bbac79be23a22db56eada04809f6d679f5e", 0x8d}, {&(0x7f0000000500)="c28c175f7c900fff57d89c8bfc871ffebb81d1b8a816840cfbefc31d978204f0f4a6b8f0d90687edd20c7ea3c6ad90f136a351a0a9e8a323966f2fb9efb4a0815fc14ec3185e28abddc9892adc7ab2a980504068be8cf06715cc6c3eb91a089cce2248cbde334ce426cab25282a9433d386aabf0636a0ba72aeb57aa1ce7aca6af84e6f23553d8b2e04bacb5246b19c80226053d7a5dbe699ea32b84b2c0", 0x9e}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="872e2469cae0cf638a23df7116ed9f154e91ed9cd5955b4d92c915053401ccf279c37f3a2a46474bc52d237e0f8174e9966d97a2b96f9383f55db9e839ad460031b2ec8dbe224ff4cfea60c54d1f500db892c16c23666d1017ebe93e35a1a7affd9d37ccbe5bcabc66f2fc48d162555272f6b3745b6dd7ec197b4444898c138c01a37d18b67ba3af234d6026eee5d0425a60af89", 0x94}, {&(0x7f0000001680)="c47d5c13cb0f345c631e538bb1eab4abe969038f359305d8ed832fd462706d7424de9f32bcbc99c4a8eab6ff4d231d867909b81723248b7567423c9c23f46fce433b72a2e0419ff8ca628b5b94c835f5016621b506d8edfd1f18f525e89fa3da56b20e20ab79dfa219c9b8e767f7b88a3ff3554d6b9ce06ffbec47e0a310d75551e8b1c1790ea463ef6b29a9", 0x8c}, {&(0x7f0000001740)}], 0x8, &(0x7f0000001800)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x87, 0x12, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xc1, 0x7, [0xaf1, 0x5, 0x5]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x9b}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x1, 0xe, 0xb, 0x6, [0xe, 0x5, 0x1, 0x0, 0x7, 0xc2b, 0xfffffffffffff4c3]}}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0xe, 0x0, [@local]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@ra={0x5, 0x2, 0x7fff}]}}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a00)="2a4774a4fecae6f532ca8a8cb26b6b4fa0597081f4d1ad73d35ee07f7b3611b520e4196fca9413aed38af055d8d1d9e266c075651afd9064b446afb680e7d505f6018d4105c25dcfdaa3d64701a1665b6d279852b3c6e74f", 0x58}, {&(0x7f0000001a80)="dfe2163bb6e68b5fa81b36d63c06af", 0xf}, {&(0x7f0000001ac0)="676fb1557b0b1294f2536028df2eeb902c13cd0ef1b679bf9ec2d52f2710ff2cf34f1adb1b1d04e715cf65547bb5627d943378df33dfc138e4fc6c22d95b21860a7784f7fc9a104f0ab35c683285a6afd8175cb659bcb7eee0387540fdfb2bf687a605cb1128b933f2a21e43a4779cc3a65fc0af98dce861ca5a3648c4386cf0e53408c4e51f37d0ffa48d585da7a23d23a527c720c50f33d807c023a53143fc1af4ba14c40c1d8fb4ca34194f5004966b828f742bcfd7c3", 0xb8}, {&(0x7f0000001b80)="422d23baedd8f2f6c0dce4d256f0a877087ff2bcf986dfbb53bd957d0f237903572106688f08807ed6a3a60abea9c4c7932e163a56efd1f84d96933efaa78a608cc461c893d7b4c48bef4f1344e0f0b90fb6a5db68c545717c1587c8e23126694bd2409d8cb1cf", 0x67}, {&(0x7f0000001c00)="7954e79e1a9604975e9ec2a3b0fb9947b6c7cdff5ea5d0d3a7bfc163d03872ff85aad814170a6300fa7a322bf1c41717c9e475084c4308fd8496fed7889e4682ece22157f1f2bd3492c1282a15dcd0c68b9d0b88fb84b252206e7638735063182e2460cacd23593357fa36a68ffb25378cb35fa97b4843a68dbd51089d8f2c9bb09434bd97e562823da5be5d79cf41f65c429441f30806efa903312c359c1a313a837007937b0fb5b544f8a289b5ca7189fd", 0xb2}, {&(0x7f0000001cc0)="a430dc9f08ae2ea1cddd0266c8dcc25b3622759cc867e832c8f37ba171f1b4dc8e5120e081a6a68f2a68cf8a65eb6d7ae9400c4097da48f898defabae427f3b47aa9658f76b44b2b05e6e230855847e66c180153287391a8d19797b83bb1b678bd6d4b98ff041e10d793ebfa7caf1db4cdb4b0b5befb774a5c981b1bbb81151ac705f2ba61eae4806cd029acbb37d5312c71f48eb0a9cce679", 0x99}, {&(0x7f0000001d80)="8ba5f7861902bd618510430631fad4aea16c70dc773a15cfb5a1ef17a63024511321cdeda67e7aba6171bb9e8c9536869667bb11adcee95566d5adbff64be48a91cd", 0x42}, {&(0x7f0000001e00)="e18e79c54bc4298af8fa2a4ee4b385987fa3b24f62f2dcce79039205dda65058b37ca59a7800666ed5014288a23c1cf64bd319c3add5f6c192ed353fcf9de501676672b6bc22fcf6d5100a563c25cd2cdf55b64b04361bbafa4092bbd4bbd4bc1664c62e6fcc3fb875c3cc10d4cf6bbcf99c2189fd94067ec27c5f40a8d14a3d8e1e6ae230f3107e753ea276e5767e0beb8486efee", 0x95}], 0x8, &(0x7f0000001f40)=[@tclass={{0x14, 0x29, 0x43, 0xe59}}], 0x18}}], 0x3, 0x4041) 1.39251171s ago: executing program 0 (id=3101): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 1.242342924s ago: executing program 9 (id=3102): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='environ\x00') syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) pread64(r2, 0x0, 0x0, 0x10000) 1.187139195s ago: executing program 6 (id=3103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 1.129271906s ago: executing program 0 (id=3104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac46", 0x2}], 0x1}, 0x8804) 717.903005ms ago: executing program 0 (id=3105): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd2(0x9, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "89c5a938cab61257"}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) 523.037589ms ago: executing program 6 (id=3106): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x22000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020603000000be870000000006000002090005000200008005000400000000000c000900020073797a3000000000050001000700000014000300686173683a69702c706f72742c69700000000000000000000000d648965d0f966c2a7ea3b5af54e67414cbdb3347af9f04de262f0e9e83f2d2cd"], 0x58}}, 0x4000000) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) r6 = syz_open_dev$dri(0x0, 0x9ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x46, 0x0, &(0x7f0000000000)='\x00', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 396.630831ms ago: executing program 0 (id=3107): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_ublk_setup_io_uring(0x538b, &(0x7f0000000340)={0x0, 0x0, 0x101, 0x2, 0x1e5}, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) 258.649145ms ago: executing program 9 (id=3108): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) r1 = syz_kvm_add_vcpu$x86(0x0, 0x0) pipe2(&(0x7f0000000bc0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="470f23fc48b8e7320000000000000f21f866baf80cb83c76858fef66bafc0cb8965e7813eff8440f014a000f2221c7c4c3fd01ce0020650f01f824f30f556797f6c44383fd00e702ea02ea7b478f097880581be4", 0x54}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="0002020100000000ff0200000000000001a88e11f19139540546dfc43c53cae91165d186140d72a3c45eecfb2989bf9a684253d2b226a8bbb9a4bbbf25be1d07abd4edd8d51a959716bd5366a711920c607d9a6abe55801e4c6ed815a5b765ae380f46524aaed8ac4a6328ceb6d698af85dd9fc818322eee6bc4656905179a0bc07c0642ecc7abbd2095ed694c8d166aa78be490"], 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 0s ago: executing program 0 (id=3109): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000440)={[{@nodecompose}, {@barrier}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@gid}, {@type={'type', 0x3d, "59e5131f"}}, {@nls={'nls', 0x3d, 'cp874'}}]}, 0xfe, 0x5e5, &(0x7f0000001080)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)={[{@type={'type', 0x3d, "54a10fb2"}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) kernel console output (not intermixed with test programs): th:syzkaller0> [ 1161.081002][ T4590] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1161.111627][T13246] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1161.923522][ T4590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.054627][ T4590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.288152][ T4590] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1163.106056][ T4590] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1163.126469][ T4590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.333991][T10222] usb 10-1: USB disconnect, device number 3 [ 1163.354706][ T4590] usb 7-1: config 0 descriptor?? [ 1164.107822][ T4590] usb 7-1: can't set config #0, error -71 [ 1164.134391][ T4590] usb 7-1: USB disconnect, device number 5 [ 1164.280379][T13264] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1164.672707][T13273] tipc: Enabled bearer , priority 0 [ 1164.742649][T13276] device syzkaller0 entered promiscuous mode [ 1164.810375][T13273] tipc: Resetting bearer [ 1164.831392][T13271] loop8: detected capacity change from 0 to 4096 [ 1164.855798][T13272] tipc: Resetting bearer [ 1164.986818][T13272] tipc: Disabling bearer [ 1165.033296][T13282] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1168.502390][T13318] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1169.157907][T13324] loop4: detected capacity change from 0 to 512 [ 1169.296854][T13324] EXT4-fs: Ignoring removed nobh option [ 1169.350524][T13324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1169.373562][T12788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1169.386620][T12788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1169.555174][T12788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1169.576753][T12788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1169.588816][T12788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1169.598986][T12788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1170.052437][T13324] EXT4-fs (loop4): 1 truncate cleaned up [ 1170.069069][T13324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1170.531957][ T4830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.978006][ T4830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.520718][ T4830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.883602][T13351] loop6: detected capacity change from 0 to 4096 [ 1171.929677][T13354] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1172.092036][T12788] Bluetooth: hci3: command 0x0409 tx timeout [ 1172.499769][ T4830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.318861][T13328] chnl_net:caif_netlink_parms(): no params data found [ 1173.333931][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1173.628765][T13377] device syzkaller0 entered promiscuous mode [ 1174.181514][T12788] Bluetooth: hci3: command 0x041b tx timeout [ 1174.667244][ T4830] tipc: Left network mode [ 1174.676488][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.764818][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.826593][T13328] device bridge_slave_0 entered promiscuous mode [ 1175.116766][T13408] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1176.261036][T12788] Bluetooth: hci3: command 0x040f tx timeout [ 1176.300687][ T4830] bond1: (slave ip6erspan0): Releasing active interface [ 1176.428379][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.445003][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.765183][T13328] device bridge_slave_1 entered promiscuous mode [ 1177.375908][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.472339][T13425] loop8: detected capacity change from 0 to 4096 [ 1177.547417][T13432] siw: device registration error -23 [ 1177.576072][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.613985][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.641019][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.863718][T13422] tipc: Enabled bearer , priority 0 [ 1178.118221][T13426] device syzkaller0 entered promiscuous mode [ 1178.218397][T13428] can: request_module (can-proto-3) failed. [ 1178.338615][T12788] Bluetooth: hci3: command 0x0419 tx timeout [ 1178.370591][T13441] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1180.414112][T13442] tipc: Resetting bearer [ 1180.430297][T13420] tipc: Resetting bearer [ 1180.540000][T13420] tipc: Disabling bearer [ 1180.766918][T13465] input: syz1 as /devices/virtual/input/input13 [ 1181.326522][T13328] team0: Port device team_slave_0 added [ 1181.498903][ T9] tipc: Subscription rejected, illegal request [ 1181.608366][T13328] team0: Port device team_slave_1 added [ 1182.557794][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.678477][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.764782][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.881795][T13487] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1182.892376][T13487] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1183.746797][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.762618][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.928022][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.201771][T13328] device hsr_slave_0 entered promiscuous mode [ 1184.411634][T13328] device hsr_slave_1 entered promiscuous mode [ 1184.515511][T13328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1184.577981][T13328] Cannot create hsr debugfs directory [ 1185.008332][T13505] tipc: Enabled bearer , priority 0 [ 1185.043498][T13505] device syzkaller0 entered promiscuous mode [ 1185.997311][T13505] tipc: Resetting bearer [ 1186.039725][T13504] tipc: Resetting bearer [ 1186.178561][T13504] tipc: Disabling bearer [ 1188.352727][T13533] loop6: detected capacity change from 0 to 4096 [ 1188.416477][T13533] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1188.451394][ T4830] device hsr_slave_0 left promiscuous mode [ 1188.487267][ T4830] device hsr_slave_1 left promiscuous mode [ 1188.542614][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.579131][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.740046][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.757811][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.971100][ T26] audit: type=1800 audit(1784699387.530:12): pid=13548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1952" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1189.192360][ T4830] device bridge_slave_1 left promiscuous mode [ 1189.201698][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.231418][ T4830] device bridge_slave_0 left promiscuous mode [ 1189.239422][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.282927][ T4830] device veth1_macvtap left promiscuous mode [ 1189.289176][ T4830] device veth0_macvtap left promiscuous mode [ 1189.297086][ T4830] device veth1_vlan left promiscuous mode [ 1189.304117][ T4830] device veth0_vlan left promiscuous mode [ 1189.372053][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1190.623864][T13571] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1190.780987][T11099] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1190.973331][T11099] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1191.003603][T11099] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.076328][T11099] usb 10-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1191.140206][T11099] usb 10-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1191.184757][T11099] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.214470][T11099] usb 10-1: Product: syz [ 1191.229176][T11099] usb 10-1: Manufacturer: syz [ 1191.241058][T11099] usb 10-1: SerialNumber: syz [ 1191.938165][T11099] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 1192.293677][ T4830] bond1 (unregistering): Released all slaves [ 1192.365561][T11099] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 1192.949965][T11099] snd-usb-audio: probe of 10-1:1.2 failed with error -22 [ 1192.961990][T11099] usb 10-1: USB disconnect, device number 4 [ 1193.232708][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.671287][T10216] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1193.872944][T10216] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.888764][T10216] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1193.908237][T10216] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1193.928487][T10216] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1193.940045][T10216] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.997301][T10216] usb 10-1: invalid MIDI out EP 0 [ 1197.130385][T10216] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1197.147486][ T6965] udevd[6965]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.403954][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 1197.485141][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 1197.556872][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.629238][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.638394][ T14] infiniband syz1: ib_query_port failed (-19) [ 1197.840367][ T14] usb 10-1: USB disconnect, device number 5 [ 1198.833029][ T4830] bond0 (unregistering): Released all slaves [ 1199.020313][ T9844] bond0 speed is unknown, defaulting to 1000 [ 1199.038688][T13572] tipc: Enabling of bearer rejected, failed to enable media [ 1199.681476][T10352] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1199.901422][T10352] usb 5-1: Using ep0 maxpacket: 16 [ 1199.926202][T10352] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1200.110571][T10352] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.281066][T10352] usb 5-1: config 0 has no interface number 0 [ 1200.289866][T13633] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1200.373739][T10352] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1200.457972][T10352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.518154][T10352] usb 5-1: Product: syz [ 1200.548940][T10352] usb 5-1: Manufacturer: syz [ 1200.576498][T10352] usb 5-1: SerialNumber: syz [ 1200.621330][T10352] usb 5-1: config 0 descriptor?? [ 1200.672979][T13645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1200.686021][T13645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1200.948824][T10352] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 1201.049075][T10352] usb 5-1: No valid video chain found. [ 1201.341085][T10352] usb 5-1: USB disconnect, device number 6 [ 1201.360330][T13643] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1201.677800][T10222] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1201.891293][T10222] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1201.903698][T10222] usb 10-1: not running at top speed; connect to a high speed hub [ 1202.028081][T10222] usb 10-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1202.057695][T10222] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.096553][T10222] usb 10-1: Product: syz [ 1202.123504][T10222] usb 10-1: Manufacturer: syz [ 1202.130339][T10222] usb 10-1: SerialNumber: syz [ 1202.471558][T10216] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1202.716793][T10216] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.791376][T10216] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1203.010395][T10216] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1203.478134][T10216] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1203.709374][T10216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.824888][T10216] usb 5-1: invalid MIDI out EP 0 [ 1203.861274][T13650] netlink: 'syz.9.1978': attribute type 49 has an invalid length. [ 1204.144081][T10216] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1204.181820][ T6823] udevd[6823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1205.175050][T13650] device ip6gretap0 entered promiscuous mode [ 1205.367933][T10222] usb 10-1: failed waiting for Axe-Fx III to boot: -71 [ 1205.385962][T10222] snd-usb-audio: probe of 10-1:1.0 failed with error -71 [ 1205.450988][T10222] usb 10-1: USB disconnect, device number 6 [ 1205.751014][T13675] tipc: Enabled bearer , priority 0 [ 1205.771694][T13680] device syzkaller0 entered promiscuous mode [ 1205.805404][T13682] tipc: Resetting bearer [ 1205.843443][T13674] tipc: Resetting bearer [ 1205.908948][T13674] tipc: Disabling bearer [ 1206.555212][ T6876] usb 5-1: USB disconnect, device number 7 [ 1206.903858][T13328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1207.009081][T13695] loop4: detected capacity change from 0 to 4096 [ 1207.021686][T13328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1207.073859][T13328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1207.100163][T13695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1208.340401][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1208.587495][T13328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1208.830109][T13704] can: request_module (can-proto-3) failed. [ 1209.745527][T13713] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1210.410999][T12788] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.817569][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.844787][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.891535][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1210.957020][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1210.970074][T13737] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1211.014326][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1211.087252][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1211.132459][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.139999][ T4830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.170171][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1211.204052][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1211.227060][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1211.246785][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.254288][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.268006][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1211.288228][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1211.307000][T13328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1211.323472][T13328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1211.344916][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1211.365665][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1211.377071][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1211.393046][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1211.408111][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1211.410986][T10352] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1211.418477][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1211.423813][ T4315] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1211.473695][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1211.492763][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1211.514917][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1211.544690][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1211.628309][ T4315] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.652149][ T4315] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1211.676223][T10352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1211.689063][ T4315] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.709560][T10352] usb 5-1: not running at top speed; connect to a high speed hub [ 1211.717545][ T4315] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1211.732412][ T4315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.748907][T10352] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1211.770057][T10352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.794476][ T4315] usb 10-1: invalid MIDI out EP 0 [ 1211.811444][T10352] usb 5-1: Product: syz [ 1211.825699][T10352] usb 5-1: Manufacturer: syz [ 1211.839434][T10352] usb 5-1: SerialNumber: syz [ 1211.863500][ T4315] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1211.919967][ T6823] udevd[6823]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.083020][T13740] netlink: 'syz.4.1995': attribute type 49 has an invalid length. [ 1212.183061][T10352] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 1212.893993][T10352] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 1212.936906][T13757] binder: 13756:13757 ioctl c0306201 200000000080 returned -22 [ 1212.997567][T13759] device syzkaller1 entered promiscuous mode [ 1213.062064][T10352] usb 5-1: USB disconnect, device number 8 [ 1213.138934][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1213.192543][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1213.287589][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.226811][ T9844] usb 10-1: USB disconnect, device number 7 [ 1214.348615][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1214.418510][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1214.654394][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1214.677335][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1214.719295][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1214.737169][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1214.747779][T13774] loop4: detected capacity change from 0 to 4096 [ 1214.763933][T13328] device veth0_vlan entered promiscuous mode [ 1214.820459][T13774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1214.857404][T13328] device veth1_vlan entered promiscuous mode [ 1215.208869][T13328] device veth0_macvtap entered promiscuous mode [ 1215.727851][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1215.742012][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1215.799842][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1215.831666][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1215.853197][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1215.880179][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1215.924439][T13328] device veth1_macvtap entered promiscuous mode [ 1216.459119][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.494906][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.511027][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.546346][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.577240][T13803] siw: device registration error -23 [ 1216.717298][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.917338][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.084985][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.213452][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.301561][T13798] can: request_module (can-proto-3) failed. [ 1217.346523][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.395022][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.406053][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.416801][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.428073][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.439334][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.457944][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.468171][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.485424][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.501865][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.512067][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1217.536452][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.553295][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1217.568193][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1217.589622][T13328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.600200][T13328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.618072][T13328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.626964][T13328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.682435][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1217.791656][ T4757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.816026][ T4757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.825564][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1217.879413][ T6813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.888365][ T6813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.899096][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 1217.908711][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1217.917707][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 1217.950076][ T7] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1217.960066][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.986247][ T7] usb 5-1: config 0 descriptor?? [ 1218.360289][T13833] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1218.579118][ T4856] Bluetooth: hci5: Frame reassembly failed (-84) [ 1219.247854][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 1219.255372][T13840] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1219.262542][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 1219.286214][ T7] usb 5-1: USB disconnect, device number 9 [ 1220.264867][T13861] loop8: detected capacity change from 0 to 4096 [ 1220.401261][T13861] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1220.581111][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1220.864481][ T26] audit: type=1800 audit(1784699419.530:13): pid=13875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2015" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1221.389674][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1221.534038][T13890] siw: device registration error -23 [ 1222.181098][T13884] can: request_module (can-proto-3) failed. [ 1223.160967][T10222] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1223.355689][T10222] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.381004][T10222] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1223.411203][T10222] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1223.455899][T10222] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1223.487019][T10222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.536860][T10222] usb 7-1: invalid MIDI out EP 0 [ 1223.673841][T10222] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1223.758937][ T6965] udevd[6965]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1226.374567][ T14] usb 7-1: USB disconnect, device number 6 [ 1226.761219][T13956] loop9: detected capacity change from 0 to 4096 [ 1226.868905][T13956] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1227.086270][T13961] can: request_module (can-proto-3) failed. [ 1227.287413][T13967] siw: device registration error -23 [ 1227.760958][ T26] audit: type=1800 audit(1784699426.410:14): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2032" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1227.904007][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1227.925067][T13978] tipc: Enabling of bearer rejected, failed to enable media [ 1228.761654][T13997] loop4: detected capacity change from 0 to 4096 [ 1228.848664][T13997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1229.631028][ T26] audit: type=1800 audit(1784699428.220:15): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2041" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1229.725029][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1230.021166][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1230.331517][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 1230.332813][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1230.440739][ T4315] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.466339][ T4315] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1230.498186][ T4315] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1230.531063][ T4315] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1230.540252][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.569912][T14033] loop8: detected capacity change from 0 to 4096 [ 1230.864937][ T4315] usb 1-1: invalid MIDI out EP 0 [ 1230.885964][T14036] netlink: 'syz.9.2049': attribute type 5 has an invalid length. [ 1230.925944][T14033] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1230.938355][T14036] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2049'. [ 1230.979721][ T4315] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1231.123420][T14031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1231.169033][ T6823] udevd[6823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.525541][ T26] audit: type=1800 audit(1784699430.200:16): pid=14033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2050" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1232.492585][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1232.854287][T14051] tipc: Enabled bearer , priority 0 [ 1232.958454][T14055] device syzkaller0 entered promiscuous mode [ 1233.160441][ T9844] usb 1-1: USB disconnect, device number 2 [ 1233.420647][T14051] tipc: Resetting bearer [ 1234.061140][T14049] tipc: Resetting bearer [ 1234.354850][T14049] tipc: Disabling bearer [ 1234.367767][ T4315] tipc: Node number set to 1424120509 [ 1234.472111][T10352] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1234.691357][T10352] usb 5-1: Using ep0 maxpacket: 8 [ 1234.814264][T10352] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1234.921675][T10352] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1235.007675][T10352] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1235.056389][T10352] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.122239][T10352] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.151818][T14077] device bridge0 entered promiscuous mode [ 1235.170316][T10352] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1235.191339][T10352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.672845][T10352] usb 5-1: usb_control_msg returned -32 [ 1235.678787][T10352] usbtmc 5-1:16.0: can't read capabilities [ 1235.934928][T14092] netlink: 'syz.9.2063': attribute type 5 has an invalid length. [ 1235.943022][T14092] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2063'. [ 1236.697352][T14089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1237.211331][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1237.402007][T10222] usb 5-1: USB disconnect, device number 10 [ 1237.661098][T10352] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1238.320960][T10222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1238.442311][T10352] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.743126][T10222] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.125781][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.137227][T14121] virtio-fs: tag not found [ 1239.176800][T14121] "syz.9.2066" (14121) uses obsolete ecb(arc4) skcipher [ 1239.840976][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.852775][T10352] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1239.864043][T10352] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.874118][T10222] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1239.877283][T10352] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.898344][T10352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.919311][T10222] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.929679][T10352] usb 7-1: invalid MIDI out EP 0 [ 1239.944501][T10222] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.955930][T10222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.051986][T10352] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1240.056685][T10222] usb 1-1: invalid MIDI out EP 0 [ 1240.218148][ T6823] udevd[6823]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.993730][T10222] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1241.080061][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.611458][T13795] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1241.824378][T13795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.847473][T13795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.905315][T13795] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1241.970234][T13795] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1242.007673][T13795] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.134495][T13795] usb 9-1: config 0 descriptor?? [ 1242.142911][ T6876] usb 1-1: USB disconnect, device number 3 [ 1242.778849][T13795] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 1242.788491][T13795] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1242.803411][T13795] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1242.899513][ T66] Bluetooth: hci5: Frame reassembly failed (-84) [ 1243.127077][T14169] netlink: 'syz.9.2076': attribute type 5 has an invalid length. [ 1243.135518][T14169] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2076'. [ 1243.205342][ T27] usb 9-1: USB disconnect, device number 2 [ 1243.819191][T14167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.486258][T14164] fido_id[14164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1244.971018][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1244.971511][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 1245.218789][T14189] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1246.259635][ T6876] usb 7-1: USB disconnect, device number 7 [ 1246.902146][ T6876] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1247.183312][ T6876] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.195032][ T6876] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1247.224771][ T6876] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1247.250526][ T6876] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1248.210992][ T6876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.242966][ T6876] usb 10-1: invalid MIDI out EP 0 [ 1248.328860][T14230] siw: device registration error -23 [ 1250.693527][ T6876] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1250.795640][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.817814][ T6876] usb 10-1: USB disconnect, device number 8 [ 1252.734763][T12788] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1252.850936][ T6876] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1252.887489][T14265] loop9: detected capacity change from 0 to 1024 [ 1252.932103][T14265] EXT4-fs: Ignoring removed bh option [ 1252.997215][T14265] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1253.061031][ T6876] usb 7-1: Using ep0 maxpacket: 8 [ 1253.072588][ T6876] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1253.753649][ T6876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.793422][ T6876] usb 7-1: Product: syz [ 1253.797693][ T6876] usb 7-1: Manufacturer: syz [ 1253.890186][T14278] loop8: detected capacity change from 0 to 512 [ 1253.906740][T14278] EXT4-fs: Ignoring removed nobh option [ 1253.927708][T14278] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1253.958290][ T6876] usb 7-1: SerialNumber: syz [ 1253.959416][T14278] EXT4-fs (loop8): 1 truncate cleaned up [ 1253.976088][T14278] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1253.980675][ T6876] usb 7-1: config 0 descriptor?? [ 1254.184335][ T6876] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1254.195672][ T6876] dvb-usb: bulk message failed: -22 (2/0) [ 1254.203101][ T6876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1254.222317][ T6876] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1254.268995][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.458693][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1254.474801][ T6876] usb 7-1: media controller created [ 1254.501829][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.553934][ T6876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1254.850145][ T6876] dvb-usb: bulk message failed: -22 (1/0) [ 1254.861308][ T6876] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1255.219836][ T6876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 1255.331448][ T6876] dvb-usb: schedule remote query interval to 50 msecs. [ 1255.405161][ T6876] dvb-usb: bulk message failed: -22 (2/0) [ 1255.431523][ T6876] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1255.484671][ T6876] usb 7-1: USB disconnect, device number 8 [ 1255.587471][T14291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1256.264653][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1256.464086][ T6876] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1256.811042][T10222] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1257.012486][T10222] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.039998][T10222] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1257.077981][T10222] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.107825][T10222] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1257.133149][T10222] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.231833][T14311] siw: device registration error -23 [ 1258.771393][T10222] usb 10-1: invalid MIDI out EP 0 [ 1258.808744][T10222] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1258.914758][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1259.810382][T14329] loop6: detected capacity change from 0 to 1024 [ 1259.897439][T14329] EXT4-fs: Ignoring removed bh option [ 1259.991824][T14329] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1260.055490][T14343] loop4: detected capacity change from 0 to 4096 [ 1260.095241][T14343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1260.686490][ T26] audit: type=1800 audit(1784699459.340:17): pid=14350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2108" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1260.924625][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1260.940418][T10221] usb 10-1: USB disconnect, device number 9 [ 1261.027063][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1261.117866][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1261.615242][ T8014] Bluetooth: hci4: command 0x0406 tx timeout [ 1262.952334][T14387] siw: device registration error -23 [ 1263.177452][T10222] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1263.926993][T10222] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.938898][T10222] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1263.955618][T10222] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.975125][T10222] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1263.994956][T10222] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.075292][T10222] usb 10-1: invalid MIDI out EP 0 [ 1264.170948][ T27] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1264.344714][T10222] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1264.391587][ T27] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.412075][ T27] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1264.428860][ T27] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.545671][ T27] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1264.581193][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.102209][ T27] usb 9-1: invalid MIDI out EP 0 [ 1266.547166][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.443694][ T27] snd-usb-audio: probe of 9-1:27.0 failed with error -22 [ 1267.606772][ T27] usb 10-1: USB disconnect, device number 10 [ 1268.274119][ T9844] usb 9-1: USB disconnect, device number 3 [ 1268.715593][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.136760][T14468] loop8: detected capacity change from 0 to 4096 [ 1271.298234][T14468] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1272.721259][ T26] audit: type=1800 audit(1784699471.310:18): pid=14483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2136" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1272.877248][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1272.946299][T14484] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1273.001555][ T4856] Bluetooth: hci5: Frame reassembly failed (-84) [ 1273.441776][T10352] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1273.887574][T10352] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.921021][T10352] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.962634][T10352] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.078361][T10352] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1274.100634][T10352] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.160350][T10352] usb 9-1: invalid MIDI out EP 0 [ 1274.992937][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1275.749460][T10352] snd-usb-audio: probe of 9-1:27.0 failed with error -22 [ 1275.857721][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1276.354311][T14514] overlayfs: failed to resolve './file0': -2 [ 1276.788000][ T7] usb 9-1: USB disconnect, device number 4 [ 1280.261209][T14549] netlink: 'syz.9.2150': attribute type 5 has an invalid length. [ 1280.269224][T14549] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2150'. [ 1280.508980][T14546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1281.617224][T14561] siw: device registration error -23 [ 1282.271584][T14556] can: request_module (can-proto-3) failed. [ 1282.459187][T14569] overlayfs: failed to resolve './file0': -2 [ 1284.886211][T14600] device syzkaller0 entered promiscuous mode [ 1287.599071][T14614] netlink: 'syz.6.2165': attribute type 5 has an invalid length. [ 1287.607441][T14614] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2165'. [ 1288.271403][T14611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1288.928490][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2166'. [ 1289.127689][T14628] siw: device registration error -23 [ 1290.589197][T14622] can: request_module (can-proto-3) failed. [ 1290.630488][T14639] overlayfs: failed to resolve './file0': -2 [ 1291.109649][T14653] overlayfs: overlapping lowerdir path [ 1291.187533][T14649] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1291.710987][ T129] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1291.931019][ T129] usb 7-1: Using ep0 maxpacket: 32 [ 1291.938789][ T129] usb 7-1: config 0 has no interfaces? [ 1291.947844][ T129] usb 7-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice=5f.40 [ 1291.957656][ T129] usb 7-1: New USB device strings: Mfr=217, Product=141, SerialNumber=237 [ 1291.967820][ T129] usb 7-1: Product: syz [ 1291.972882][ T129] usb 7-1: Manufacturer: syz [ 1291.977949][ T129] usb 7-1: SerialNumber: syz [ 1291.985531][ T129] usb 7-1: config 0 descriptor?? [ 1292.238019][ T129] usb 7-1: USB disconnect, device number 9 [ 1292.641158][T12788] Bluetooth: hci3: command 0x0406 tx timeout [ 1293.782815][T14671] loop8: detected capacity change from 0 to 1024 [ 1293.789967][T14671] EXT4-fs: Ignoring removed bh option [ 1293.858399][T14671] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1295.408373][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1295.601973][T14692] netlink: 'syz.4.2179': attribute type 5 has an invalid length. [ 1295.610384][T14692] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2179'. [ 1296.337441][T14688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.431473][T14723] tipc: Enabling of bearer rejected, failed to enable media [ 1298.637113][T14726] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1306.087458][ T8014] Bluetooth: hci5: command 0x1003 tx timeout [ 1306.094800][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1306.101796][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.108165][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.940999][T14710] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1308.280523][T14710] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.295415][T14710] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1308.352268][T14710] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1308.377544][T14710] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1308.387120][T14710] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.464452][T14710] usb 10-1: invalid MIDI out EP 0 [ 1308.615167][T14710] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1310.592795][T14777] loop4: detected capacity change from 0 to 4096 [ 1310.729508][T14777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1310.754770][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.558842][ T4590] usb 10-1: USB disconnect, device number 11 [ 1312.638249][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1312.792975][T14790] tipc: Enabled bearer , priority 0 [ 1312.832640][T14790] device syzkaller0 entered promiscuous mode [ 1313.983553][ T4590] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1314.010461][T14790] tipc: Resetting bearer [ 1314.032376][T14789] tipc: Resetting bearer [ 1314.186240][ T4590] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.228396][ T4590] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1314.282361][T14789] tipc: Disabling bearer [ 1314.293902][ T4590] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1314.361300][ T4590] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1314.370500][ T4590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.423290][ T4590] usb 10-1: invalid MIDI out EP 0 [ 1314.634869][T14820] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1315.551245][ T4590] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1315.589083][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1316.420997][ T8014] Bluetooth: hci5: command 0x1003 tx timeout [ 1316.421177][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1318.771017][ T27] usb 10-1: USB disconnect, device number 12 [ 1319.048088][T14856] loop9: detected capacity change from 0 to 4096 [ 1320.426071][T14856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1321.180947][ T26] audit: type=1800 audit(1784699519.840:19): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2217" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1321.266615][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1321.683051][T14891] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1322.976191][T14894] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1323.164267][T14905] virtio-fs: tag not found [ 1325.501610][T14912] loop9: detected capacity change from 0 to 4096 [ 1325.611735][T10222] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1325.649595][T14912] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1325.804041][T14930] siw: device registration error -23 [ 1325.867616][T10222] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.542224][T14926] can: request_module (can-proto-3) failed. [ 1326.689007][T10222] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1326.701321][T10222] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1326.722387][T10222] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1326.732042][T10222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.774763][T10222] usb 9-1: invalid MIDI out EP 0 [ 1327.092444][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1327.834249][T10222] snd-usb-audio: probe of 9-1:27.0 failed with error -22 [ 1327.847507][ T7385] udevd[7385]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.403134][T14943] loop4: detected capacity change from 0 to 4096 [ 1328.525593][T14943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1328.980880][ T4320] usb 9-1: USB disconnect, device number 5 [ 1329.299387][ T26] audit: type=1800 audit(1784699527.970:20): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2233" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1329.428267][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1329.519889][T14961] tipc: Enabled bearer , priority 0 [ 1329.560443][T14961] device syzkaller0 entered promiscuous mode [ 1329.903096][T14969] tipc: Resetting bearer [ 1330.055521][T14960] tipc: Resetting bearer [ 1330.104791][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 1330.158183][T14960] tipc: Disabling bearer [ 1331.742042][T14992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.170963][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 1332.178414][T12788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1332.755990][T15009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1333.000938][ T7] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1333.193111][ T7] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.214464][ T7] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1333.240495][ T7] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.260625][ T7] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1333.275415][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.305244][ T7] usb 10-1: invalid MIDI out EP 0 [ 1333.346582][ T7] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1333.416215][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.609786][T15024] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2249'. [ 1335.172033][T15040] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1335.989793][T14710] usb 10-1: USB disconnect, device number 13 [ 1336.189244][T15044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.985416][T15052] virtio-fs: tag not found [ 1338.656373][T15062] loop6: detected capacity change from 0 to 4096 [ 1338.730562][T14612] Bluetooth: hci5: Frame reassembly failed (-84) [ 1338.747266][T15074] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1338.818282][T15062] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1339.200987][ T26] audit: type=1800 audit(1784699537.860:21): pid=15086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2258" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1339.519637][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1339.895017][T15098] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1340.210993][T10352] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1340.429172][T10352] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.731022][T12788] Bluetooth: hci5: command 0x1003 tx timeout [ 1340.738327][T10352] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1340.739513][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1340.918186][T15102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.013531][T10352] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.199869][T10352] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1341.507974][T10352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.646217][T10352] usb 1-1: invalid MIDI out EP 0 [ 1342.189528][T15110] virtio-fs: tag not found [ 1343.038111][T10352] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1343.078183][T12225] udevd[12225]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1344.941085][T10352] usb 1-1: USB disconnect, device number 4 [ 1346.892168][T15149] loop6: detected capacity change from 0 to 4096 [ 1347.463101][T15156] virtio-fs: tag not found [ 1348.117435][T15149] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1348.501167][ T26] audit: type=1800 audit(1784699547.100:22): pid=15162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2276" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1349.040232][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1349.701344][T15167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1350.190960][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1350.442120][ T7] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.471180][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1350.531764][ T7] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1350.723044][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1350.809245][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.861797][ T7] usb 1-1: invalid MIDI out EP 0 [ 1352.041651][T15198] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1352.058793][T15196] loop4: detected capacity change from 0 to 4096 [ 1352.079895][ T7] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1352.190262][ T6823] udevd[6823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1352.199419][ T4397] Bluetooth: hci5: Frame reassembly failed (-84) [ 1352.278847][T15196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1352.308505][ T4397] Bluetooth: hci5: Frame reassembly failed (-84) [ 1352.709298][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1352.999730][ T9844] usb 1-1: USB disconnect, device number 5 [ 1353.127320][T15213] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1354.628037][ T8014] Bluetooth: hci5: command 0x1003 tx timeout [ 1354.632505][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1355.211999][T15227] loop8: detected capacity change from 0 to 4096 [ 1355.451474][T15227] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1356.109918][ T26] audit: type=1800 audit(1784699554.780:23): pid=15236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2290" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1356.334825][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1358.187814][T15249] virtio-fs: tag not found [ 1359.969801][T15256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.058209][ T9844] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1361.268469][ T9844] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.333674][ T9844] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1361.460940][ T9844] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1362.670831][ T9844] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1362.732324][ T9844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.888956][ T9844] usb 10-1: invalid MIDI out EP 0 [ 1362.915603][T15281] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1363.053320][ T9844] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1363.218277][T12225] udevd[12225]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.752576][T15291] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1364.976918][T10222] usb 10-1: USB disconnect, device number 14 [ 1366.810995][ T8014] Bluetooth: hci5: command 0x1003 tx timeout [ 1366.811081][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1367.144621][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.151530][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.597762][T15312] netlink: 'syz.4.2307': attribute type 5 has an invalid length. [ 1367.605810][T15312] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2307'. [ 1369.209956][T15315] loop8: detected capacity change from 0 to 4096 [ 1369.359621][T15315] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1369.742017][ T26] audit: type=1800 audit(1784699568.410:24): pid=15334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2302" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1371.275772][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1374.894901][T15371] netlink: 'syz.8.2320': attribute type 5 has an invalid length. [ 1374.902821][T15371] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2320'. [ 1375.273892][T15365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1376.622862][T15393] loop9: detected capacity change from 0 to 512 [ 1376.666699][T15393] EXT4-fs: Ignoring removed nobh option [ 1376.692980][T15393] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1376.788171][T15393] EXT4-fs (loop9): 1 truncate cleaned up [ 1376.796336][T15393] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1377.668522][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1379.260342][T15415] loop4: detected capacity change from 0 to 4096 [ 1379.311336][T15416] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1379.768969][ T4315] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1381.245971][ T4315] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.663724][ T4315] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1382.010598][ T4315] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1382.133969][T15433] netlink: 'syz.6.2333': attribute type 5 has an invalid length. [ 1382.142474][T15433] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2333'. [ 1382.588283][T15434] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2335'. [ 1382.900672][ T4315] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1382.910044][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.954147][ T4315] usb 9-1: can't set config #27, error -71 [ 1382.962332][ T4315] usb 9-1: USB disconnect, device number 6 [ 1383.286877][T15446] loop4: detected capacity change from 0 to 512 [ 1383.322794][T15446] EXT4-fs: Ignoring removed nobh option [ 1383.379757][T15446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1383.451867][T15446] EXT4-fs (loop4): 1 truncate cleaned up [ 1383.459874][T15446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1385.172828][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1385.742236][T15473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1387.036376][T15485] loop9: detected capacity change from 0 to 4096 [ 1387.096078][T15486] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1388.801981][T15504] virtio-fs: tag not found [ 1389.435490][T10352] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1389.540453][T15506] netlink: 'syz.9.2348': attribute type 5 has an invalid length. [ 1389.548670][T15506] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2348'. [ 1389.672632][T10352] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.775471][T10352] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1389.778085][T15499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.786983][T10352] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.823294][T10352] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1389.834537][T10352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.849860][T10352] usb 7-1: invalid MIDI out EP 0 [ 1389.921634][T10352] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1389.977114][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1391.136369][T15522] loop8: detected capacity change from 0 to 512 [ 1391.154528][T15522] EXT4-fs: Ignoring removed nobh option [ 1391.164645][T15522] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1392.068769][T15522] EXT4-fs (loop8): 1 truncate cleaned up [ 1392.079448][T15522] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1392.089866][T10222] usb 7-1: USB disconnect, device number 10 [ 1392.767746][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1392.910058][T15532] can: request_module (can-proto-3) failed. [ 1393.145893][T15547] loop8: detected capacity change from 0 to 4096 [ 1393.189554][T15552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2350'. [ 1393.243837][T15555] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1394.661091][ T4320] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1394.866673][ T4320] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.898512][ T4320] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1394.931277][ T4320] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1394.994942][ T4320] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1395.529131][T15576] virtio-fs: tag not found [ 1396.174401][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.203920][ T4320] usb 7-1: invalid MIDI out EP 0 [ 1396.228348][ T4320] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1396.315751][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.393299][T15600] netlink: 'syz.4.2365': attribute type 5 has an invalid length. [ 1398.401291][T15600] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2365'. [ 1399.144718][T15594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.438678][ T4318] usb 7-1: USB disconnect, device number 11 [ 1399.884625][T15610] siw: device registration error -23 [ 1400.014504][T15608] can: request_module (can-proto-3) failed. [ 1400.241739][ T4318] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1400.432387][ T4318] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.461692][ T4318] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1400.500984][ T4318] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.550915][ T4318] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1400.560145][ T4318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.644301][ T4318] usb 7-1: invalid MIDI out EP 0 [ 1400.748730][ T4318] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1400.815901][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.671795][T15651] virtio-fs: tag not found [ 1404.475383][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2375'. [ 1404.531030][ T4320] usb 7-1: USB disconnect, device number 12 [ 1404.722831][T15647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1405.173415][T15662] netlink: 'syz.8.2379': attribute type 5 has an invalid length. [ 1405.181733][T15662] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2379'. [ 1405.867241][T15659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.412118][T15665] siw: device registration error -23 [ 1406.624006][T15663] can: request_module (can-proto-3) failed. [ 1407.293861][T15689] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1410.762251][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2389'. [ 1410.959728][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2390'. [ 1410.968924][T10352] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1411.054632][T15715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1411.162824][T10352] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.189811][T10352] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1411.256597][T10352] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1411.300692][T10352] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1411.335114][T15728] siw: device registration error -23 [ 1411.386211][T10352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.433951][T15723] can: request_module (can-proto-3) failed. [ 1411.456650][T10352] usb 7-1: invalid MIDI out EP 0 [ 1411.552600][T15720] block device autoloading is deprecated and will be removed. [ 1411.561051][T15727] block device autoloading is deprecated and will be removed. [ 1411.613692][T10352] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1411.719691][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1412.092905][T15736] block device autoloading is deprecated and will be removed. [ 1412.108321][T15736] md: invalid raid superblock magic on ram32 [ 1412.117427][T15736] md: ram32 does not have a valid v0.0 superblock, not importing! [ 1412.230612][T15736] md: md_import_device returned -22 [ 1413.113642][T15744] virtio-fs: tag not found [ 1413.865575][ T9768] usb 7-1: USB disconnect, device number 13 [ 1413.922088][T15747] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1414.108747][T15749] loop6: detected capacity change from 0 to 4096 [ 1414.184974][T15749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1418.391825][T15777] netlink: 'syz.8.2398': attribute type 5 has an invalid length. [ 1418.660873][T15777] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2398'. [ 1419.236612][ T26] audit: type=1800 audit(1784699617.910:25): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2396" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1419.333224][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1419.388733][T15776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.521592][T15794] overlayfs: overlapping lowerdir path [ 1420.594171][T15791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1421.741007][T10352] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1421.933693][T10352] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.962488][T10352] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1422.010861][T10352] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1422.073219][T10352] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1422.093078][T10352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.934634][T10352] usb 1-1: invalid MIDI out EP 0 [ 1423.110329][T15831] loop4: detected capacity change from 0 to 4096 [ 1423.166691][T10352] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1423.291919][T15831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1423.366410][ T6823] udevd[6823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.259783][ T26] audit: type=1800 audit(1784699622.930:26): pid=15831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2413" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1425.568455][T10222] usb 1-1: USB disconnect, device number 6 [ 1425.633003][T15858] netlink: 'syz.6.2419': attribute type 5 has an invalid length. [ 1425.641169][T15858] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2419'. [ 1425.672407][T15855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.910404][ T4287] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1427.283220][T15890] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1427.299161][T15887] vxcan0: tx address claim with dlc 0 [ 1429.361494][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.367908][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.149122][ T4287] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1430.195350][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1432.318286][T15938] xt_hashlimit: size too large, truncated to 1048576 [ 1435.122971][T15965] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1438.386894][T15984] netlink: 'syz.6.2451': attribute type 5 has an invalid length. [ 1438.457412][T15984] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2451'. [ 1439.961902][T15983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.022964][ T4287] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1444.108059][T16054] netlink: 'syz.4.2472': attribute type 5 has an invalid length. [ 1444.116020][T16054] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2472'. [ 1444.157155][T16053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.333052][T16056] loop8: detected capacity change from 0 to 4096 [ 1444.400260][T16056] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1444.783366][ T26] audit: type=1800 audit(1784699643.440:27): pid=16068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2473" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1445.147734][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1446.137909][ T4287] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1447.315594][T16095] virtio-fs: tag not found [ 1449.381042][T16107] siw: device registration error -23 [ 1449.715203][T16104] can: request_module (can-proto-3) failed. [ 1451.032613][T16123] loop4: detected capacity change from 0 to 4096 [ 1451.071762][T16121] netlink: 'syz.9.2486': attribute type 5 has an invalid length. [ 1451.147352][T16123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1451.166380][T16121] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2486'. [ 1451.247780][T16119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.830976][ T26] audit: type=1800 audit(1784699650.500:28): pid=16133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2485" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1451.940684][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1453.159758][T16137] loop6: detected capacity change from 0 to 4096 [ 1453.325211][T16137] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1453.816298][ T4287] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1454.514759][T16160] virtio-fs: tag not found [ 1456.200055][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1456.460870][ T9768] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1457.524325][ T9768] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.587842][ T9768] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.711503][ T9768] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1457.750205][ T9768] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1457.777251][ T9768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.805324][ T9768] usb 10-1: invalid MIDI out EP 0 [ 1457.816721][T16204] siw: device registration error -23 [ 1457.910044][ T9768] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1457.956015][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1459.018403][T16200] can: request_module (can-proto-3) failed. [ 1459.116855][T16214] netlink: 'syz.8.2500': attribute type 5 has an invalid length. [ 1459.139050][T16214] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2500'. [ 1459.192574][T16213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.485390][T16222] can: request_module (can-proto-3) failed. [ 1459.560141][T16224] siw: device registration error -23 [ 1459.914480][ T7] usb 10-1: USB disconnect, device number 15 [ 1461.152830][T16229] virtio-fs: tag not found [ 1461.198630][ T4287] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1462.728569][T16273] siw: device registration error -23 [ 1462.843420][T16271] can: request_module (can-proto-3) failed. [ 1463.919400][T16283] device syzkaller0 entered promiscuous mode [ 1463.921595][T16284] netlink: 'syz.8.2514': attribute type 5 has an invalid length. [ 1463.951394][T16284] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2514'. [ 1464.180204][T16281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.392008][T16297] siw: device registration error -23 [ 1465.918884][T16294] can: request_module (can-proto-3) failed. [ 1466.962308][T16304] virtio-fs: tag not found [ 1469.909015][T16368] Bluetooth: MGMT ver 1.22 [ 1470.629050][T16367] loop6: detected capacity change from 0 to 4096 [ 1470.798454][ T4287] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1470.818069][T16367] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1472.338766][ T26] audit: type=1800 audit(1784699671.010:29): pid=16390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2528" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1472.383534][T16385] virtio-fs: tag not found [ 1472.512998][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1474.822159][T16414] device syzkaller1 entered promiscuous mode [ 1479.228838][T16456] virtio-fs: tag not found [ 1480.029567][T16482] netlink: 'syz.8.2554': attribute type 1 has an invalid length. [ 1480.257973][T16482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1480.417608][T16485] bond2: (slave gretap1): making interface the new active one [ 1480.453473][T16485] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1481.472710][T16501] siw: device registration error -23 [ 1481.718610][T16498] can: request_module (can-proto-3) failed. [ 1482.685193][T16487] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1482.911350][T16487] bond2 (unregistering): Released all slaves [ 1483.045287][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2555'. [ 1483.105489][T16489] bond1: option mode: unable to set because the bond device is up [ 1485.957087][T16570] virtio-fs: tag not found [ 1486.397646][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2574'. [ 1486.498707][T16595] bond1: option mode: unable to set because the bond device is up [ 1488.310913][T13795] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1488.371639][ T26] audit: type=1800 audit(1784699687.040:30): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2584" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1489.152882][T13795] usb 5-1: config 0 has no interfaces? [ 1489.171094][T13795] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1489.180291][T13795] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1489.204884][T13795] usb 5-1: Product: syz [ 1489.221788][T13795] usb 5-1: Manufacturer: syz [ 1489.235684][T13795] usb 5-1: SerialNumber: syz [ 1489.252294][T13795] usb 5-1: config 0 descriptor?? [ 1490.039808][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.055559][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.877486][T16635] virtio-fs: tag not found [ 1491.043183][T13795] usb 5-1: can't set config #0, error -71 [ 1491.052907][T13795] usb 5-1: USB disconnect, device number 11 [ 1491.062010][T16640] fuse: Unknown parameter 'grou00000000000000000000' [ 1491.225467][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 1491.262846][T16645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1492.609666][T16664] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2595'. [ 1492.909441][T16677] fuse: Unknown parameter 'grou00000000000000000000' [ 1493.816634][T16671] virtio-fs: tag not found [ 1494.292483][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2604'. [ 1494.338059][T16686] bond1: option mode: unable to set because the bond device is up [ 1495.837968][T16713] comedi comedi2: Minor 47 could not be opened [ 1496.249175][T16721] fuse: Unknown parameter 'grou00000000000000000000' [ 1497.095370][T16718] virtio-fs: tag not found [ 1497.474469][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2616'. [ 1498.251352][T16730] bond1: option mode: unable to set because the bond device is up [ 1499.888536][T16775] fuse: Bad value for 'fd' [ 1500.871361][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 1500.965094][T16800] siw: device registration error -23 [ 1501.210024][T16791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1501.355350][T16795] can: request_module (can-proto-3) failed. [ 1506.746990][T16870] siw: device registration error -23 [ 1506.837511][T16864] can: request_module (can-proto-3) failed. [ 1507.345411][T16887] fuse: Bad value for 'fd' [ 1507.862364][T16891] kvm [16890]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1507.947729][T16891] kvm [16890]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 1507.974274][T16891] kvm [16890]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1508.014267][T16891] kvm [16890]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1509.470827][T16918] overlayfs: overlapping lowerdir path [ 1509.534623][T16919] overlayfs: overlapping lowerdir path [ 1511.518668][T16934] loop6: detected capacity change from 0 to 4096 [ 1511.595052][T16934] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1511.873073][ T26] audit: type=1800 audit(1784699710.550:31): pid=16941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2657" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1512.244999][T16951] siw: device registration error -23 [ 1512.440072][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1513.163930][T16948] can: request_module (can-proto-3) failed. [ 1517.234067][T17006] siw: device registration error -23 [ 1517.959756][T17003] can: request_module (can-proto-3) failed. [ 1518.551070][T10222] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1522.179655][T17078] siw: device registration error -23 [ 1522.924333][T17075] can: request_module (can-proto-3) failed. [ 1523.341502][T17089] overlayfs: overlapping lowerdir path [ 1523.398462][T17090] overlayfs: overlapping lowerdir path [ 1527.134129][T17134] fuse: Bad value for 'user_id' [ 1527.218897][T17136] device syzkaller0 entered promiscuous mode [ 1529.254209][T17151] can: request_module (can-proto-3) failed. [ 1530.626498][T17188] overlayfs: overlapping lowerdir path [ 1530.653008][T17188] overlayfs: overlapping lowerdir path [ 1533.062756][T17204] fuse: Bad value for 'user_id' [ 1535.891460][T17238] device syzkaller1 entered promiscuous mode [ 1538.061313][T17259] fuse: Bad value for 'fd' [ 1539.729444][T17286] overlayfs: overlapping lowerdir path [ 1539.776347][T17286] overlayfs: overlapping lowerdir path [ 1540.707818][T17295] loop8: detected capacity change from 0 to 4096 [ 1540.874017][T17295] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1541.632587][ T26] audit: type=1800 audit(1784699740.310:32): pid=17295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2734" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1541.712506][T17304] fuse: Bad value for 'fd' [ 1541.720099][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1545.340935][ T4590] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1545.641225][ T4590] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.747505][ T4590] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1545.954162][ T4590] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.100829][ T4590] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1546.151229][ T4590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.205125][ T4590] usb 5-1: invalid MIDI out EP 0 [ 1546.333608][T17364] netlink: 'syz.0.2753': attribute type 5 has an invalid length. [ 1546.341611][T17364] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2753'. [ 1547.069199][T17360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1547.673840][ T4590] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1547.699378][ T4590] usb 5-1: USB disconnect, device number 12 [ 1547.701678][T12225] udevd[12225]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1547.812831][T17373] fuse: Bad value for 'fd' [ 1549.010301][T17389] loop4: detected capacity change from 0 to 4096 [ 1549.420197][T17389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1549.790146][ T26] audit: type=1800 audit(1784699748.460:33): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2758" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1549.994997][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1551.375175][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.385338][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.288961][T17424] netlink: 'syz.9.2765': attribute type 5 has an invalid length. [ 1553.297006][T17424] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2765'. [ 1553.886498][T17416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1554.834451][T17428] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1555.033465][T13287] Bluetooth: hci5: Frame reassembly failed (-84) [ 1555.573262][T17436] fuse: Bad value for 'fd' [ 1555.739992][T17438] loop8: detected capacity change from 0 to 4096 [ 1555.830062][T17438] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1556.684322][T17447] loop9: detected capacity change from 0 to 4096 [ 1556.768303][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1556.892945][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1556.899809][T12788] Bluetooth: hci5: command 0x1003 tx timeout [ 1557.175412][T17447] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1557.328600][ T26] audit: type=1800 audit(1784699756.000:34): pid=17447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2771" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1557.380389][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1560.049413][T17487] netlink: 'syz.9.2778': attribute type 5 has an invalid length. [ 1560.057674][T17487] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2778'. [ 1560.788828][T17481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1561.362069][T17490] fuse: Bad value for 'fd' [ 1563.191053][T17503] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1564.670040][T17515] binder: 17514:17515 ioctl 4018620d 0 returned -22 [ 1565.211232][T12788] Bluetooth: hci5: command 0x1003 tx timeout [ 1565.221820][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1567.251632][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2793'. [ 1568.305875][T17548] fuse: Bad value for 'fd' [ 1569.770281][T17560] loop8: detected capacity change from 0 to 4096 [ 1570.703091][T17560] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1570.704037][T17571] binder: 17570:17571 ioctl c0306201 0 returned -14 [ 1570.805141][ T26] audit: type=1800 audit(1784699769.480:35): pid=17560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2785" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1570.862830][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1572.574449][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2808'. [ 1572.660838][T13795] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1572.720187][T17611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2809'. [ 1572.846755][T13795] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.033496][T13795] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1573.045996][T13795] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1573.060505][T13795] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1573.070202][T13795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.106458][T13795] usb 10-1: invalid MIDI out EP 0 [ 1573.535665][T17623] fuse: Invalid rootmode [ 1573.729847][T13795] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1573.769387][ T7385] udevd[7385]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.466934][T17638] loop6: detected capacity change from 0 to 4096 [ 1574.480507][T17641] binder: 17640:17641 ioctl c0306201 0 returned -14 [ 1574.554404][T17638] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1574.626967][ T26] audit: type=1800 audit(1784699773.300:36): pid=17638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2814" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1574.718588][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1575.732272][T17666] afs: Unknown parameter 'dy' [ 1576.787330][T17676] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2821'. [ 1576.809606][T17678] fuse: Invalid rootmode [ 1577.505651][T17692] binder: 17690:17692 ioctl c0306201 0 returned -14 [ 1578.660076][ T6876] usb 10-1: USB disconnect, device number 16 [ 1578.783596][T17706] loop4: detected capacity change from 0 to 4096 [ 1578.900601][T17706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1580.222807][T17733] afs: Unknown parameter 'dy' [ 1581.751221][T17741] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1582.218998][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1583.271071][T17175] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1583.469386][T17175] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.530897][T17175] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1583.568140][T17175] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.632377][T17175] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1583.663151][T17175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.718624][T17175] usb 1-1: invalid MIDI out EP 0 [ 1584.243988][T17175] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1584.456587][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1584.484011][T17799] loop9: detected capacity change from 0 to 512 [ 1584.675984][T17799] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1585.575661][T17799] EXT4-fs (loop9): 1 truncate cleaned up [ 1585.631665][T17799] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1586.249949][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1587.278661][T17828] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2849'. [ 1588.349142][T17838] loop8: detected capacity change from 0 to 4096 [ 1588.387442][T17838] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1589.177815][T10216] usb 1-1: USB disconnect, device number 8 [ 1589.910559][ T26] audit: type=1800 audit(1784699788.580:37): pid=17854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2850" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1593.083337][T17876] can: request_module (can-proto-3) failed. [ 1594.989039][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1595.055979][T17902] loop6: detected capacity change from 0 to 512 [ 1595.129146][T17902] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1595.215544][T17902] EXT4-fs (loop6): 1 truncate cleaned up [ 1595.275386][T17902] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1595.536000][T17910] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2863'. [ 1596.062490][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1596.394531][T13795] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1597.974287][T13795] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.240850][T13795] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1598.320076][T13795] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1598.386252][T13795] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1598.478350][T13795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.523417][T13795] usb 1-1: invalid MIDI out EP 0 [ 1600.422520][T13795] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1600.553844][ T6965] udevd[6965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1600.587740][T13795] usb 1-1: USB disconnect, device number 9 [ 1600.992168][ T8014] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1601.013514][ T8014] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1601.023939][ T8014] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1601.095175][T17973] siw: device registration error -23 [ 1601.163604][ T8014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1601.221931][ T8014] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1601.237675][ T8014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1601.611817][T17963] can: request_module (can-proto-3) failed. [ 1602.843547][T17521] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1603.446375][T17521] Bluetooth: hci5: command 0x0409 tx timeout [ 1604.132948][T18008] loop9: detected capacity change from 0 to 4096 [ 1604.234150][T18008] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1604.543934][ T4460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.568759][T14420] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1604.625941][T17968] chnl_net:caif_netlink_parms(): no params data found [ 1604.677786][ T6876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1604.901509][ T6876] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.973988][ T6876] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1605.046730][ T6876] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1605.104481][ T6876] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1605.143546][ T6876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.200794][T14420] usb 7-1: device descriptor read/64, error -71 [ 1605.223974][ T6876] usb 1-1: invalid MIDI out EP 0 [ 1605.290069][ T6876] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1605.333399][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1605.352442][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.408586][ T4460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.411048][T18025] fuse: Unknown parameter 'use00000000000000000000' [ 1605.472014][T14420] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1605.573119][T17521] Bluetooth: hci5: command 0x041b tx timeout [ 1606.768872][T14420] usb 7-1: device descriptor read/64, error -71 [ 1606.943355][T14420] usb usb7-port1: attempt power cycle [ 1607.319862][ T4460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.371027][T14420] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1607.454838][ T4460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.610789][T17521] Bluetooth: hci5: command 0x040f tx timeout [ 1607.847345][ T6876] usb 1-1: USB disconnect, device number 10 [ 1608.217112][T18035] can: request_module (can-proto-3) failed. [ 1608.217512][T14420] usb 7-1: device not accepting address 16, error -71 [ 1608.408469][T17968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.486946][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.522410][T17968] device bridge_slave_0 entered promiscuous mode [ 1609.147115][T17968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.172266][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.217859][T17968] device bridge_slave_1 entered promiscuous mode [ 1609.328494][T17968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.433232][T17968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.478263][ T4460] tipc: Left network mode [ 1609.553431][T17968] team0: Port device team_slave_0 added [ 1609.592915][T17968] team0: Port device team_slave_1 added [ 1609.691700][T17521] Bluetooth: hci5: command 0x0419 tx timeout [ 1609.998211][T17968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.999961][T18076] loop9: detected capacity change from 0 to 4096 [ 1610.017839][T18080] binder: 18079:18080 ioctl c0306201 0 returned -14 [ 1610.017857][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.107085][T18076] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1610.134519][T17968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.404449][T17968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.616269][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.844368][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1610.949447][T17968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.351733][T17968] device hsr_slave_0 entered promiscuous mode [ 1611.388449][T17968] device hsr_slave_1 entered promiscuous mode [ 1611.490481][T17968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1611.502567][T18105] siw: device registration error -23 [ 1611.555509][T17968] Cannot create hsr debugfs directory [ 1611.590760][T14420] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1612.266971][T18102] can: request_module (can-proto-3) failed. [ 1612.464115][T14420] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.489601][T14420] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1612.507041][T14420] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1612.520603][T14420] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1612.541459][T14420] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.568311][T14420] usb 7-1: invalid MIDI out EP 0 [ 1612.692421][T14420] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1612.822219][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.860969][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.879319][ T6968] udevd[6968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1615.181058][ T7] usb 7-1: USB disconnect, device number 18 [ 1617.546105][T18157] loop9: detected capacity change from 0 to 4096 [ 1617.676104][T18165] siw: device registration error -23 [ 1618.380499][T18160] can: request_module (can-proto-3) failed. [ 1618.492406][T18157] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1620.210916][T14420] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1620.373807][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1620.379782][T14420] usb 1-1: device descriptor read/64, error -71 [ 1620.655068][T14420] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1620.697312][T18194] loop9: detected capacity change from 0 to 4096 [ 1620.768029][ T4460] device hsr_slave_0 left promiscuous mode [ 1620.792712][ T4460] device hsr_slave_1 left promiscuous mode [ 1620.809151][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.817162][T14420] usb 1-1: device descriptor read/64, error -71 [ 1620.827395][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.860448][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.921189][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.929490][ T4460] device bridge_slave_1 left promiscuous mode [ 1620.930325][T18194] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1620.936407][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.950956][T14420] usb usb1-port1: attempt power cycle [ 1620.959843][ T4460] device bridge_slave_0 left promiscuous mode [ 1620.966407][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.026817][ T4460] device veth1_macvtap left promiscuous mode [ 1621.033299][ T4460] device veth0_macvtap left promiscuous mode [ 1621.041048][ T4460] device veth1_vlan left promiscuous mode [ 1621.047360][ T4460] device veth0_vlan left promiscuous mode [ 1621.381192][T14420] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1621.431480][T14420] usb 1-1: device descriptor read/8, error -71 [ 1621.454418][ T26] audit: type=1800 audit(1784699820.130:38): pid=18207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2915" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1621.771002][T14420] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1621.841367][T14420] usb 1-1: device descriptor read/8, error -71 [ 1621.961010][T14420] usb usb1-port1: unable to enumerate USB device [ 1622.362292][ T4460] bond1 (unregistering): Released all slaves [ 1622.473945][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1624.965109][T18230] netlink: 'syz.9.2923': attribute type 5 has an invalid length. [ 1624.973200][T18230] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2923'. [ 1625.348387][T18226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1627.133850][T18242] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2926'. [ 1627.473583][T18247] loop8: detected capacity change from 0 to 4096 [ 1627.615379][T18247] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1628.750509][T18268] netlink: 'syz.6.2934': attribute type 5 has an invalid length. [ 1628.758436][T18268] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2934'. [ 1629.508983][T18264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.295155][ T26] audit: type=1800 audit(1784699828.970:39): pid=18270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2929" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1631.120206][T12514] EXT4-fs (loop8): unmounting filesystem. [ 1631.297858][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 1631.815471][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 1631.972009][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1632.081851][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.015300][ T4460] bond0 (unregistering): Released all slaves [ 1633.736529][T18302] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2941'. [ 1634.723665][T18315] netlink: 'syz.0.2944': attribute type 5 has an invalid length. [ 1634.731719][T18315] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1635.456430][T18313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.383972][T18317] loop9: detected capacity change from 0 to 4096 [ 1636.490507][T17968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1636.650023][T18331] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1637.636273][T18326] can: request_module (can-proto-3) failed. [ 1637.684852][T18317] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1637.832556][T17968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1638.014963][T17968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1638.250328][T17968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1638.721551][T18353] binder: BINDER_SET_CONTEXT_MGR already set [ 1638.727681][T18353] binder: 18349:18353 ioctl 4018620d 200000000040 returned -16 [ 1638.903054][T18356] virtio-fs: tag not found [ 1640.274483][T18364] overlayfs: missing 'lowerdir' [ 1640.349280][T18366] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1641.009082][T17968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.465714][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1641.632218][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1641.674158][T17968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.690461][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1641.743701][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1641.860184][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.867462][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1642.166069][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1642.313384][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1642.495916][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1642.575424][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.583294][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.717461][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1642.872937][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1643.003788][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1643.035668][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1643.053773][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1643.069682][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1643.088313][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1643.234002][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1643.271644][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1643.298451][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1643.327574][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1643.376204][T17968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1643.776845][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1645.608626][T18413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2965'. [ 1645.842362][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1645.871153][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1645.930925][T17968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1646.429633][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1646.548313][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1646.837021][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1646.861078][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1646.890023][T18423] loop6: detected capacity change from 0 to 4096 [ 1646.945311][T17968] device veth0_vlan entered promiscuous mode [ 1646.975856][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1647.077866][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1647.154473][T18440] overlayfs: missing 'lowerdir' [ 1647.218575][T18441] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1647.751103][T18423] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1647.876633][T17968] device veth1_vlan entered promiscuous mode [ 1648.739136][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1648.788556][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1648.845264][T17968] device veth0_macvtap entered promiscuous mode [ 1648.874796][T17968] device veth1_macvtap entered promiscuous mode [ 1648.887285][T18446] loop9: detected capacity change from 0 to 4096 [ 1648.934353][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.945504][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.956515][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.968075][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.980029][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.993047][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.003907][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.017258][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.028125][T18446] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1649.188836][T17968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.266244][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1649.305668][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1649.320512][ T26] audit: type=1800 audit(1784699848.000:40): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2970" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1649.437026][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1649.463603][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1649.517932][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.608570][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.739904][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.800208][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.846482][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.878012][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.940746][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.952161][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.972517][T17968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.099156][T17968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.141163][T17968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.149928][T17968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.236585][T17968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.374775][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1650.399682][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1650.609688][T18483] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2977'. [ 1650.638176][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.656213][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.752474][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1650.867576][T13287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.896303][T13287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.952488][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1651.077122][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1652.934487][T18507] loop9: detected capacity change from 0 to 4096 [ 1652.996639][T18507] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1653.896070][T18534] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2989'. [ 1654.361559][T18540] virtio-fs: tag not found [ 1654.862870][T18548] loop6: detected capacity change from 0 to 4096 [ 1655.012481][T18548] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1655.470874][ T6876] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1655.523472][ T26] audit: type=1800 audit(1784699854.200:41): pid=18554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2991" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1655.710892][ T6876] usb 9-1: Using ep0 maxpacket: 8 [ 1655.719341][ T6876] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.793336][ T6876] usb 9-1: config 0 has no interfaces? [ 1655.823432][ T6876] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1655.873874][ T6876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.915226][ T6876] usb 9-1: config 0 descriptor?? [ 1657.284383][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1658.378195][T14710] usb 9-1: USB disconnect, device number 7 [ 1659.505548][T18590] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3000'. [ 1659.802621][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1660.891136][T14710] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1661.136481][T14710] usb 9-1: Using ep0 maxpacket: 8 [ 1661.335421][T14710] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.442067][T18614] loop9: detected capacity change from 0 to 4096 [ 1661.457235][T14710] usb 9-1: config 0 has no interfaces? [ 1661.489597][T14710] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1661.556901][T18614] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1661.689963][T14710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.754487][T14710] usb 9-1: config 0 descriptor?? [ 1661.813048][T18626] virtio-fs: tag not found [ 1661.881034][T18632] fuse: Bad value for 'fd' [ 1663.344559][T18644] netlink: 'syz.6.3015': attribute type 5 has an invalid length. [ 1663.352566][T18644] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3015'. [ 1664.084978][T18642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.719143][ T7] usb 9-1: USB disconnect, device number 8 [ 1664.742196][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1667.313937][T18662] loop9: detected capacity change from 0 to 4096 [ 1667.483015][T18662] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1667.781832][T18686] netlink: 'syz.0.3027': attribute type 5 has an invalid length. [ 1667.789749][T18686] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1667.813679][T18683] loop6: detected capacity change from 0 to 4096 [ 1668.403151][T18683] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1668.501377][T18684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1669.371010][ T4315] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1669.452661][ T26] audit: type=1800 audit(1784699868.130:42): pid=18699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3021" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1669.570976][ T4315] usb 2-1: Using ep0 maxpacket: 8 [ 1669.578291][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.620729][ T4315] usb 2-1: config 0 has no interfaces? [ 1669.626603][ T4315] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1669.677636][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.704018][ T4315] usb 2-1: config 0 descriptor?? [ 1671.371052][T18710] virtio-fs: tag not found [ 1672.226861][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1672.405611][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1673.626986][T10222] usb 2-1: USB disconnect, device number 2 [ 1673.802911][T18731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3035'. [ 1674.253558][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.260022][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.696348][T18734] loop9: detected capacity change from 0 to 4096 [ 1674.923728][T18734] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1675.645795][T18742] netlink: 'syz.8.3039': attribute type 5 has an invalid length. [ 1675.653740][T18742] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3039'. [ 1675.672433][T18741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1677.252432][T12574] EXT4-fs (loop9): unmounting filesystem. [ 1677.900879][T18773] virtio-fs: tag not found [ 1678.115505][T17521] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1678.487280][T18796] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3049'. [ 1681.149769][T18813] netlink: 'syz.9.3053': attribute type 5 has an invalid length. [ 1681.157902][T18813] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3053'. [ 1681.867447][T18811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1683.606740][T17521] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1683.737884][T18832] siw: device registration error -23 [ 1684.461411][T18829] can: request_module (can-proto-3) failed. [ 1687.019686][T18852] loop6: detected capacity change from 0 to 4096 [ 1687.157987][T18852] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1690.177823][T18879] netlink: 'syz.0.3068': attribute type 5 has an invalid length. [ 1690.186059][T18879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3068'. [ 1690.952982][T18877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1691.592787][T17521] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1691.769130][T18890] siw: device registration error -23 [ 1692.010326][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1692.553785][T18887] can: request_module (can-proto-3) failed. [ 1693.054041][T18905] virtio-fs: tag not found [ 1694.943459][T18927] netlink: 'syz.0.3080': attribute type 5 has an invalid length. [ 1694.951568][T18927] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3080'. [ 1695.766233][T18926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.890985][T17521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1696.897749][ T8014] Bluetooth: hci0: command 0x1003 tx timeout [ 1698.883691][T18969] siw: device registration error -23 [ 1699.633818][T18963] can: request_module (can-proto-3) failed. [ 1699.960298][T18980] netlink: 'syz.9.3092': attribute type 5 has an invalid length. [ 1699.968700][T18980] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3092'. [ 1699.983455][T18979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.949086][T18982] virtio-fs: tag not found [ 1701.088024][T17521] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1703.457757][T19023] loop6: detected capacity change from 0 to 512 [ 1703.541599][T19023] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1703.554076][T19002] loop8: detected capacity change from 0 to 32768 [ 1703.561148][T19023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1703.577352][T19023] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1703.636649][T19023] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #13: comm syz.6.3103: iget: bad i_size value: 12154761577498 [ 1703.718510][T19023] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3103: couldn't read orphan inode 13 (err -117) [ 1703.741368][T19023] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1703.793645][T19023] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.3103: dx entry: limit 65535 != root limit 120 [ 1703.857249][T19023] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3103: Corrupt directory, running e2fsck is recommended [ 1703.880393][T19002] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 1703.941419][ T7116] EXT4-fs (loop6): unmounting filesystem. [ 1704.060948][T19002] JBD2: Ignoring recovery information on journal [ 1704.136052][T19037] netlink: 'syz.6.3106': attribute type 5 has an invalid length. [ 1704.143886][T19037] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3106'. [ 1704.159843][T19036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.285168][T19002] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1704.477923][T17521] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1704.608296][T19000] [ 1704.610727][T19000] ====================================================== [ 1704.618024][T19000] WARNING: possible circular locking dependency detected [ 1704.625414][T19000] syzkaller #0 Not tainted [ 1704.630052][T19000] ------------------------------------------------------ [ 1704.637182][T19000] syz.8.3098/19000 is trying to acquire lock: [ 1704.643445][T19000] ffff888071e8bf60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x266/0x980 [ 1704.653758][T19000] [ 1704.653758][T19000] but task is already holding lock: [ 1704.661130][T19000] ffff888058e5a4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 1704.671527][T19000] [ 1704.671527][T19000] which lock already depends on the new lock. [ 1704.671527][T19000] [ 1704.682117][T19000] [ 1704.682117][T19000] the existing dependency chain (in reverse order) is: [ 1704.691139][T19000] [ 1704.691139][T19000] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1704.699680][T19000] down_read+0x42/0x2d0 [ 1704.704576][T19000] ocfs2_start_trans+0x3a4/0x6f0 [ 1704.710059][T19000] ocfs2_reserve_local_alloc_bits+0xaad/0x2770 [ 1704.716766][T19000] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 1704.724011][T19000] ocfs2_mknod+0x1211/0x2580 [ 1704.729145][T19000] ocfs2_mkdir+0x1b6/0x4b0 [ 1704.734117][T19000] vfs_mkdir+0x386/0x570 [ 1704.739160][T19000] do_mkdirat+0x1d8/0x440 [ 1704.744042][T19000] __x64_sys_mkdirat+0x85/0x90 [ 1704.749436][T19000] do_syscall_64+0x4c/0xa0 [ 1704.754434][T19000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.760871][T19000] [ 1704.760871][T19000] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 1704.768451][T19000] ocfs2_start_trans+0x2a5/0x6f0 [ 1704.773901][T19000] ocfs2_extend_dir+0x11bd/0x4c40 [ 1704.779600][T19000] ocfs2_prepare_dir_for_insert+0x3217/0x5600 [ 1704.786181][T19000] ocfs2_rename+0x1942/0x3930 [ 1704.791368][T19000] vfs_rename+0xd57/0x10f0 [ 1704.796346][T19000] do_renameat2+0x8ac/0xc80 [ 1704.801360][T19000] __x64_sys_rename+0x82/0x90 [ 1704.806547][T19000] do_syscall_64+0x4c/0xa0 [ 1704.811572][T19000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.818003][T19000] [ 1704.818003][T19000] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 1704.825897][T19000] __lock_acquire+0x2d18/0x7c40 [ 1704.831299][T19000] lock_acquire+0x1bb/0x4a0 [ 1704.836318][T19000] down_read+0x42/0x2d0 [ 1704.840991][T19000] ocfs2_read_virt_blocks+0x266/0x980 [ 1704.846968][T19000] ocfs2_find_entry+0x3a8/0x2080 [ 1704.852689][T19000] ocfs2_rename+0x1e64/0x3930 [ 1704.857898][T19000] vfs_rename+0xd57/0x10f0 [ 1704.862909][T19000] do_renameat2+0x8ac/0xc80 [ 1704.868030][T19000] __x64_sys_rename+0x82/0x90 [ 1704.873228][T19000] do_syscall_64+0x4c/0xa0 [ 1704.878161][T19000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.884578][T19000] [ 1704.884578][T19000] other info that might help us debug this: [ 1704.884578][T19000] [ 1704.894973][T19000] Chain exists of: [ 1704.894973][T19000] &oi->ip_alloc_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 1704.894973][T19000] [ 1704.908872][T19000] Possible unsafe locking scenario: [ 1704.908872][T19000] [ 1704.916487][T19000] CPU0 CPU1 [ 1704.922747][T19000] ---- ---- [ 1704.928232][T19000] lock(&journal->j_trans_barrier); [ 1704.933506][T19000] lock(sb_internal#4); [ 1704.940252][T19000] lock(&journal->j_trans_barrier); [ 1704.948148][T19000] lock(&oi->ip_alloc_sem); [ 1704.952807][T19000] [ 1704.952807][T19000] *** DEADLOCK *** [ 1704.952807][T19000] [ 1704.961136][T19000] 5 locks held by syz.8.3098/19000: [ 1704.966346][T19000] #0: ffff88802f2dc460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1704.975644][T19000] #1: ffff888071e8c2c8 (&sb->s_type->i_mutex_key#33/1){+.+.}-{3:3}, at: do_renameat2+0x43c/0xc80 [ 1704.986353][T19000] #2: ffff88802f2dc650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_rename+0x1a42/0x3930 [ 1704.995739][T19000] #3: ffff888058e5a4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 1705.006733][T19000] #4: ffff8880750f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 1705.016555][T19000] [ 1705.016555][T19000] stack backtrace: [ 1705.022602][T19000] CPU: 1 PID: 19000 Comm: syz.8.3098 Not tainted syzkaller #0 [ 1705.030051][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1705.040372][T19000] Call Trace: [ 1705.043740][T19000] [ 1705.047018][T19000] dump_stack_lvl+0x188/0x24e [ 1705.051726][T19000] ? load_image+0x410/0x410 [ 1705.056355][T19000] ? show_regs_print_info+0x12/0x12 [ 1705.061570][T19000] ? print_circular_bug+0x12b/0x1a0 [ 1705.067188][T19000] check_noncircular+0x296/0x330 [ 1705.072256][T19000] ? add_chain_block+0x9b0/0x9b0 [ 1705.077216][T19000] ? _find_first_zero_bit+0xd2/0x100 [ 1705.082536][T19000] ? add_lock_to_list+0x191/0x280 [ 1705.087557][T19000] __lock_acquire+0x2d18/0x7c40 [ 1705.092410][T19000] ? verify_lock_unused+0x140/0x140 [ 1705.097595][T19000] ? mark_lock+0x94/0x320 [ 1705.102183][T19000] lock_acquire+0x1bb/0x4a0 [ 1705.106688][T19000] ? ocfs2_read_virt_blocks+0x266/0x980 [ 1705.112254][T19000] ? __might_sleep+0xd0/0xd0 [ 1705.116906][T19000] ? __lock_acquire+0x1465/0x7c40 [ 1705.121931][T19000] ? read_lock_is_recursive+0x10/0x10 [ 1705.127331][T19000] ? verify_lock_unused+0x140/0x140 [ 1705.132531][T19000] down_read+0x42/0x2d0 [ 1705.136679][T19000] ? ocfs2_read_virt_blocks+0x266/0x980 [ 1705.142414][T19000] ocfs2_read_virt_blocks+0x266/0x980 [ 1705.147780][T19000] ? ocfs2_validate_dx_leaf+0x200/0x200 [ 1705.153327][T19000] ? ocfs2_seek_data_hole_offset+0x990/0x990 [ 1705.159299][T19000] ? mark_lock+0x94/0x320 [ 1705.163713][T19000] ? verify_lock_unused+0x140/0x140 [ 1705.168934][T19000] ocfs2_find_entry+0x3a8/0x2080 [ 1705.174009][T19000] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 1705.180171][T19000] ? jbd2_write_access_granted+0x69/0x300 [ 1705.186116][T19000] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1705.191837][T19000] ? mutex_unlock+0x10/0x10 [ 1705.196434][T19000] ? do_raw_spin_lock+0x128/0x2f0 [ 1705.201554][T19000] ? jbd2_journal_dirty_metadata+0x3de/0xd70 [ 1705.207818][T19000] ? ocfs2_journal_dirty+0x41e/0x680 [ 1705.213141][T19000] ? ocfs2_journal_access_di+0x40/0x40 [ 1705.218619][T19000] ? ocfs2_journal_access+0x40/0x40 [ 1705.223846][T19000] ? rcu_is_watching+0x11/0xa0 [ 1705.228710][T19000] ? __mark_inode_dirty+0x7f0/0xe80 [ 1705.233987][T19000] ocfs2_rename+0x1e64/0x3930 [ 1705.238692][T19000] ? ocfs2_mknod+0x2580/0x2580 [ 1705.243548][T19000] ? mark_lock+0x94/0x320 [ 1705.247887][T19000] ? __lock_acquire+0x1465/0x7c40 [ 1705.252925][T19000] ? ocfs2_inode_lock_full_nested+0x149/0x1b10 [ 1705.259076][T19000] ? mark_lock+0x94/0x320 [ 1705.263408][T19000] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 1705.269558][T19000] ? mark_lock+0x94/0x320 [ 1705.274129][T19000] ? __lock_acquire+0x1465/0x7c40 [ 1705.279348][T19000] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 1705.285080][T19000] ? __lock_acquire+0x7c40/0x7c40 [ 1705.290129][T19000] ? verify_lock_unused+0x140/0x140 [ 1705.295384][T19000] ? verify_lock_unused+0x140/0x140 [ 1705.300673][T19000] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 1705.306561][T19000] ? __lock_acquire+0x7c40/0x7c40 [ 1705.311681][T19000] ? __rwlock_init+0x140/0x140 [ 1705.316470][T19000] ? vfs_rename+0x752/0x10f0 [ 1705.321057][T19000] ? __lock_acquire+0x7c40/0x7c40 [ 1705.326703][T19000] ? __rwlock_init+0x140/0x140 [ 1705.331553][T19000] ? bpf_lsm_inode_permission+0x5/0x10 [ 1705.337163][T19000] ? take_dentry_name_snapshot+0x3f/0xf0 [ 1705.342795][T19000] ? do_raw_spin_unlock+0x11d/0x230 [ 1705.348012][T19000] ? ocfs2_mknod+0x2580/0x2580 [ 1705.352765][T19000] vfs_rename+0xd57/0x10f0 [ 1705.357259][T19000] ? __ia32_sys_link+0x90/0x90 [ 1705.362113][T19000] ? _raw_spin_unlock+0x24/0x40 [ 1705.367041][T19000] ? bpf_lsm_path_rename+0x5/0x10 [ 1705.372106][T19000] ? security_path_rename+0x178/0x200 [ 1705.377642][T19000] do_renameat2+0x8ac/0xc80 [ 1705.382230][T19000] ? fsnotify_move+0x4e0/0x4e0 [ 1705.387231][T19000] ? __check_object_size+0x4f6/0xa70 [ 1705.392634][T19000] ? strncpy_from_user+0x1dc/0x340 [ 1705.397840][T19000] ? getname_flags+0x206/0x500 [ 1705.402803][T19000] __x64_sys_rename+0x82/0x90 [ 1705.407597][T19000] do_syscall_64+0x4c/0xa0 [ 1705.412019][T19000] ? clear_bhb_loop+0x60/0xb0 [ 1705.416695][T19000] ? clear_bhb_loop+0x60/0xb0 [ 1705.421393][T19000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1705.427758][T19000] RIP: 0033:0x7f11d219de99 [ 1705.432241][T19000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1705.452023][T19000] RSP: 002b:00007f11d2f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1705.460422][T19000] RAX: ffffffffffffffda RBX: 00007f11d2425fa0 RCX: 00007f11d219de99 [ 1705.468403][T19000] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000f00 [ 1705.476457][T19000] RBP: 00007f11d2233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1705.484504][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1705.492593][T19000] R13: 00007f11d2426038 R14: 00007f11d2425fa0 R15: 00007ffed605e1c8 [ 1705.501450][T19000] [ 1705.756601][T12514] ocfs2: Unmounting device (7,8) on (node local) [ 1705.822071][T19063] virtio-fs: tag not found [ 1706.158669][T19060] loop1: detected capacity change from 0 to 32768