last executing test programs: 2m57.721212644s ago: executing program 32 (id=194): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) setuid(r1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) 1m44.274372612s ago: executing program 33 (id=763): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m42.650955882s ago: executing program 4 (id=775): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x101, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x29) 1m42.509932719s ago: executing program 4 (id=778): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x30c407a, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 1m40.87106s ago: executing program 4 (id=787): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRESDEC=r1], 0x0) 1m39.021936921s ago: executing program 4 (id=798): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x4013) 1m38.513477116s ago: executing program 4 (id=800): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/4086, 0xff6}, 0xf8d}], 0x1, 0x140, 0x0) 1m37.616674361s ago: executing program 4 (id=804): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x5e29ee14, 0x4) 1m37.276993397s ago: executing program 34 (id=804): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x5e29ee14, 0x4) 1m22.309031665s ago: executing program 3 (id=890): memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) 1m22.061205787s ago: executing program 3 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m21.773959032s ago: executing program 3 (id=899): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m18.865726414s ago: executing program 3 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m18.815747967s ago: executing program 3 (id=931): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x4040000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 1m18.490336193s ago: executing program 3 (id=935): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m18.209114477s ago: executing program 35 (id=935): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 55.942890634s ago: executing program 6 (id=1102): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "86315950"}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 53.278736475s ago: executing program 6 (id=1126): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002540)=""/4096, 0x1000) 53.115832523s ago: executing program 6 (id=1128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x8}) r3 = fcntl$dupfd(r1, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)) 52.878180985s ago: executing program 6 (id=1130): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 51.844580356s ago: executing program 6 (id=1141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x60}}, 0x20004000) 51.244466035s ago: executing program 6 (id=1148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="660fc77482e765f30f1effedc5b8dc010000002e0f015e2c0f01c8660f7e6e013e0f01c965263ef3d8320f01c9", 0x2d}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x1, 0x0, 0x2080, {0x0, 0x54000, {}, 0x0, 0xffffffffffffffff}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098a2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.972656049s ago: executing program 36 (id=1148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="660fc77482e765f30f1effedc5b8dc010000002e0f015e2c0f01c8660f7e6e013e0f01c965263ef3d8320f01c9", 0x2d}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x1, 0x0, 0x2080, {0x0, 0x54000, {}, 0x0, 0xffffffffffffffff}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098a2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.53431228s ago: executing program 7 (id=1167): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a242, 0x1a1) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r1, 0x0, 0x0, 0x1001ed) fallocate(r0, 0x3, 0x3, 0x10000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 48.846681783s ago: executing program 7 (id=1169): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xfffffff7, 0x0, "05000801000000d510017b00000f3600", 0x0, 0x7ff}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) 48.524702899s ago: executing program 7 (id=1171): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) tkill(r0, 0x14) 47.673376321s ago: executing program 7 (id=1175): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x627b, &(0x7f0000000200)="$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") syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000400)='./file0\x00', 0x20ee02, 0x0) r1 = openat(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) lseek(r1, 0x102, 0x1) 46.728757818s ago: executing program 7 (id=1180): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r2, 0x0, 0x0) 45.354456506s ago: executing program 7 (id=1187): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./bus\x00', 0x3200041, &(0x7f0000000780)=ANY=[@ANYBLOB="6561733d6e6f2c6572726f72733d636f6e74696e75652c6572726f72733d72656d6f756e742d726f2c636865636b3d6e6f6e652c00076f3a0f9d8935b4d91c8ce96292849df91aaec1b5b143a4030067c9c746face505fd3c79169da7a899e259d6d91420646b0c5ddaf54d1381d9ba59c207b67321a6ea74a3f07d5e4c8a1665ff057b8dd25e1a231ade8c0c72d13a2858d28bcab6085567a3f11c5e289760ae9109f81b7635c86398c0ada9c72ded9494066d5d67ff19f2ca1531a94a376c9e7e6b542e395148f81fa0f544acb45b30f90e1fc3ff24a66bc91a355a4f4c993e0da9de27f94c84c9f333321dd5900e870d728f42e154a8776a9990cb47c3c63033de79ec6"], 0x1, 0x9e28, &(0x7f0000026280)="$eJwUk1MUnocSAFM3tW27ndq2bdv21P0/G6ltu0mbJrVtm6mNlPfcPWdf92F25u4BDh/giAHeM8B7BzhygPcNcNQARw/w/gE+MMAHB/jQAB8e4CMDfHSAjw3w8QE+McAnB/jUAJ8e4DMDfHaAzw3w+QG+MMAXB/jSAF8e4CsDfHWArw3w9QG+McA3B/jWAN8e4DsDfHeA7w3w/QF+MMAPB/jRAD8e4CcD/HSAnw3w8wF+McAxA/xygF8N8OsBfjPAbwf43QC/H+APA/xxgD8N8OcB/jLAXwf42wB/H+AfAxw7wD8H+NcA/x7gPwP8d4D/DXBIgOMEOG6A4wU4foATBDhhgBMFOHGAQwOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqQAJcOsBlAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OUADPCXAUwM8LcDTAzwjwDMDPCvAswMcBBgEGAYYBRgHmASYBpgFmAdYBFgGWAVYB9gE2AbYBdgHOCzAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8DhAY4I8J4A7w1wZID3BTgqwNEB3h/gAwE+GOBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBjgnwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8IcGyAfwb4V4B/B/hPgP8G+F+AQ0IcJ8RxQxwvxPFDnCDECUOcKMSJQxwa4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiES4tIhLhPisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhGuIpIZ4a4mkhnh7iGSGeGeJZIZ4d4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsRhIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0hDg9xRIj3hHhviCNDvC/EUSGODvH+EB8I8cEQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CHFMiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4hjQ/wzxL9C/DvEf0L8N8T/QhwS4TgRjhvheBGOH+EEEU4Y4UQRThzh0AgniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKkAiXjnCZCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjtAIT4nw1AhPi/D0CM+I8MwIz4rw7AgHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRDovwnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIr43wugivj/CGCG+M8KYIb47wlghvjfC2CG+P8I4I74zwrgjvjnB4hCMivCfCeyMcGeF9EY6KcHSE90f4QIQPRvhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEYyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8iHBvhnxH+FeHfEf4T4b8R/hfhkBjHiXHcGMeLcfwYJ4hxwhgninHiGIfGOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIzEuHSMy8S4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO4w/ZMj/+e4U484x7hLjrjHuFuPuMe4R454x7hXj3jHuE+O+Me4X4/4xHhDjgTEeFOPBMR4S46ExHhbj4TEeEeORMR4V49ExHhPjsTEeF+PxMZ4Q44kxnhTjyTEa4ykxnhrjaTGeHuMZMZ4Z41kxnh3jIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xmExnhPjuTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3TEOj3FEjPfEeG+MI2O8L8ZRMY6O8f4YH4jxwRgfivHhGB+J8dEYH4vx8RifiPHJGJ+K8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4nx0xg/i/HzGL+IcUyMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjGNj/DPGv2L8O8Z/Yvw3xv9iHJLgOAmOm+B4CY6f4AQJTpjgRAlOnODQBCdJcNIEJ0tw8gSnSHDKBKdKcOoEp0lw2gSnS3D6BGdIcMYEZ0pw5gRnSXDWBGdLcPYE50hwzgTnSnDuBOdJcN4E50tw/gQXSHDBBBdKcOEEF0lw0QQXS3DxBJdIcMkEl0qQBJdOcJkEl01wuQSXT3CFBFdMcKUEV05wlQRXTXC1BFdPcI0E10xwrQTXTnCdBNdNcL0E109wgwQ3THCjBDdOcJMEN01wswQ3T3CLBLdMcKsEt05wmwS3TXC7BLdPcIcEd0xwpwR3TnCXBHdNcLcEd09wjwT3THCvBPdOcJ8E901wvwT3T/CABA9M8KAED07wkAQPTfCwBA9P8IgEj0zwqASPTvCYBI9N8LgEj0/whARPTPCkBE9O0ARPSfDUBE9L8PQEz0jwzATPSvDsBAcJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gkOS/CcBM9N8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9OcHiCIxK8J8F7ExyZ4H0JjkpwdIL3J/hAgg8m+FCCDyf4SIKPJvhYgo8n+ESCTyb4VIJPJ/hMgs8m+FyCzyf4QoIvJvhSgi8n+EqCryb4WoKvJ/hGgm8m+FaCbyf4ToLvJvhegu8n+EGCHyb4UYIfJ/hJgp8m+FmCnyf4RYJjEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxIcm+CfCf6V4N8J/pPgvwn+l+CQFMdJcdwUx0tx/BQnSHHCFCdKceIUh6Y4SYqTpjhZipOnOEWKU6Y4VYpTpzhNitOmOF2K06c4Q4ozpjhTijOnOEuKs6Y4W4qzpzhHinOmOFeKc6c4T4rzpjhfivOnuECKC6a4UIoLp7hIioumuFiKi6e4RIpLprhUiqS4dIrLpLhsisuluHyKK6S4YoorpbhyiqukuGqKq6W4eoprpLhmimuluHaK66S4borrpbh+ihukuGGKG6W4cYqbpLhpipuluHmKW6S4ZYpbpbh1itukuG2K26W4fYo7pLhjijuluHOKu6S4a4q7pbh7inukuGeKe6W4d4r7pLhvivuluH+KB6R4YIoHpXhwioekeGiKh6V4eIpHpHhkikeleHSKx6R4bIrHpXh8iiekeGKKJ6V4coqmeEqKp6Z4Woqnp3hGimemeFaKZ6c4SDFIMUwxSjFOMUkxTTFLMU+xSLFMsUqxTrFJsU2xS7FPcViK56R4bornpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4rDUxyR4j0p3pviyBTvS3FUiqNTvD/FB1J8MMWHUnw4xUdSfDTFx1J8PMUnUnwyxadSfDrFZ1KSZ1N8LsXnU3whxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFT1P8LMXPU/wixTEpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKY5N8c8U/0rx7xT/SfHfFP9LcUiG42Q4bobjZTh+hhNkOGGGE2U4cYZDM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTNcLMPFM1wiwyUzXCpDMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDVTJcNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w90y3D3DPTLcM8O9Mtw7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjw5QzM8JcNTMzwtw9MzPCPDMzM8K8OzMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gc4LMNzMjw3w/MyPD/DCzK8MMOLMrw4w0syvDTDyzK8PMMrMrwyw6syvDrDazK8NsPrMrw+wxsyvDHDmzK8OcNbMrw1w9syvD3DOzK8M8O7Mrw7w+EZjsjwngzvzXBkhvdlOCrD0Rnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGX6a4WcZfp7hFxmOyfDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8hwbIZ/ZvhXhn9n+E+G/2b4X4ZDchwnx3FzHC/H8XOcIMcJc5wox4lzHJrjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumeNSOZLj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49oTDxnyfxbr5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4RY5b5rhVjlvnuE2O2+a4XY7b57hDjjvmuFOOO+e4S4675rhbjrvnuEeOe+a4V45757hPjvvmuF+O++d4QI4H5nhQjgfneEiOh+Z4WI6H53hEjkfmeFSOR+d4TI7H5nhcjsfneEKOJ+Z4Uo4n52iOp+R4ao6n5Xh6jmfkeGaOZ+V4do6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsch+V4To7n5nhejufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfneE2O1+Z4XY7X53hDjjfmeFOON+d4S4635nhbjrfneEeOd+Z41///NWbY2OE5jvi/y0OGDPn/jsxxyJAhQ0blODrH+3N8IMcH/+/+kCFDHs7xkRwfzfGxHB/P8Ykcn8zxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHD/N8bMcP8/xixzH5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+Q4Nsc/c/wrx79z/CfHf3P87/9MChynwHELHK/A8QucoMAJC5yowIkLHFrgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBVLg0gUuU+CyBW40UzN2+QJXKHDFAlcqcOUCVylw1QJXK3D1AtcocM0C1ypw7QLXKXDdAtcrcP0CNyhww//fK3DjAjcpcNMCNytw8wK3KHDLArcqcOsCtylw2wK3K3D7AncocMcCdypw5wJ3KXDXAncrcPcC9yhwzwL3KnDvAvcpcN8C9ytw/wIPKPDAAg8q8OACDynw0AIPK/DwAo8o8MgCjyrw6AKPKfDYAo8r8PgCTyjwxAJPKvDkAi3wlAJPLfC0Ak8v8IwCzyzwrALPLnBQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/gsALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfh/1v8fby/wjgLvLPCuAu8ucHiBIwq8p8B7CxxZ4H0FjipwdIH3F/hAgQ8W+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSMXTIywW+UuCrBb5W4OsFvlHgmwW+VeDbBb5T4LsFvlfg+wV+UOCHBX5U4McFflLgpwV+VuDnBX5R4JgCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAscW+GeBfxX4d4H/FPhvgf8VOKTEcUoct8TxShy/xAlKnLDEiUqcuMShJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4owlzlTizCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlLioiUuVuLiJS5R4pIlLlUiJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWOJJJZ5coiWeUuKpJZ5W4uklnlHimSWeVeLZJQ5KDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7EscVuI5JZ5b4nklnl/iBSVeWOJFJV5c4iUlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4vASR5R4T4n3ljiyxPtKHFXi6BLvL/GBEh8s8aESHy7xkRIfLfGxEh8v8YkSnyzxqRKfLvGZEp8t8bkSny/xhRJfLPGlEl8u8ZUSXy3xtRJfL/GNEt8s8a0S3y7xnRLfLfG9Et8v8YMSPyzxoxI/LvGTEj8t8bMSPy/xixLHlPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhrib+V+HuJf5Q4tsQ/S/yrxL9L/KfEf0v8r8QhFY5T4bgVjlfh+BVOUOGEFU5U4cQVDq1wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgpnrHCmCmeucJYKZ61wtgpnr3COCuescK4K565wngrnrXC+CuevcIEKF6xwoQoXrnCRChetcLEKF69wiQqXrHCpCqlw6QqXqXDZCpercPkKV6hwxQpXqnDlClepcNUKV6tw9QrXqHDNCteqcO0K16lw3QrXq3D9CjeocMMKN6pw4wo3qXDTCjercPMKt6hwywq3qnDrCrepcNsKt6tw+wp3qHDHCneqcOcKd6lw1wp3q3D3CveocM8K96pw7wr3qXDfCvercP8KD6jwwAoPqvDgCg+p8NAKD6vw8AqPqPDICo+q8OgKj6nw2AqPq/D4Ck+o8MQKT6rw5Aqt8JQKT63wtApPr/CMCs+s8KwKz65wUGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4bAKz6nw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7gqHVziiwnsqvLfCkRXeV+GoCkdXeH+FD1T4YIUPVfhwhY9U+GiFj1X4eIVPVPhkhU9V+HSFz1T4bIXPVfh8hS9U+GKFL1X4coWvVPhqha9V+HqFb1T4ZoVvVfh2he9U+G6F71X4foUfVPhhhR9V+HGFn1T4aYWfVfh5hV9UOKbCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwrEV/lnhXxX+XeE/Ff5b4X8VDqlxnBrHrXG8GsevcYIaJ6xxohonrnFojZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jUvUuGSNS9VIjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1nhSjSfXaI2n1HhqjafVeHqNZ9R4Zo1n1Xh2jYMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xqH1XhOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXOLzGETXeU+O9NY6s8b4aR9U4usb7a3ygxgdrfKjGh2t8pMZHa3ysxsdrfKLGJ2t8qsana3ymxmdrfK7G52t8ocYXa3ypxpdrfKXGV2t8rcbXa3yjxjdrfKvGt2t8p8Z3a3yvxvdr/KDGD2v8qMaPa/ykxk9r/KzGz2v8osYxNX5Z41c1fl3jNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzWOrfHPGv+q8e8a/6nx3xr/q3FIg+M0OG6D4zU4foMTNDhhgxM1OHGDQxucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocEZG5ypwZkbnKXBWRucrcHZG5yjwTkbnKvBuRucp8F5G5yvwfkbXKDBBRtcqMGFG1ykwUUbXKzBxRtcosElG1yqQRpcusFlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaXLvBdRpct8H1Gly/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tsHjGjy+wRMaPLHBkxo8uUEbPKXBUxs8rcHTGzyjwTMbPKvBsxscNBg0GDYYNRg3mDSYNpg1mDdYNFg2WDVYN9g02DbYNdg3OKzBcxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8HhDY5o8J4G721wZIP3NTiqwdEN3t/gAw0+2OBDDT7c4CMNPtrgYw0+3uATDT7Z4FMNPt3gMw0+2+BzDT7f4AsNvtjgSw2+3OArDb7a4GsNvt7gGw2+2eBbDb7d4DsNvtvgew2+3+AHDX7Y4EcNftzgJw1+2uBnDX7e4BcNjmnwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9ocGyDfzb4V4N/N/hPg/82+F+DQ1ocp8VxWxyvxfFbnKDFCVucqMWJWxza4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtztjiTC3O3OIsLc7a4mwtzt7iHC3O2eJcLc7d4jwtztvifC3O3+ICLS7Y4kItLtziIi0u2uJiLS7e4hItLtniUi3S4tItLtPisi0u1+LyLa7Q4ootrtTiyi2u0uKqLa7W4uotrtHimi2u1eLaLa7T4rotrtfi+i1u0OKGLW7U4sYtbtLipi1u1uLmLW7R4pYtbtXi1i1u0+K2LW7X4vYt7tDiji3u1OLOLe7S4q4t7tbi7i3u0eKeLe7V4t4t7tPivi3u1+L+LR7Q4oEtHtTiwS0e0uKhLR7W4uEtHtHikS0e1eLRLR7T4rEtHtfi8S2e0OKJLZ7U4skt2uIpLZ7a4mktnt7iGS2e2eJZLZ7d4qDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsVhLZ7T4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0tDm9xRIv3tHhviyNbvK/FUS2ObvH+Fh9o8cEWH2rx4RYfafHRFh9r8fEWn2jxyRafavHpFp9p8dkWn2sZ+v9uXmjxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2hxTItftvhVi1+3+E2L37b4XYvft/hDiz+2+FOLP7f4S4u/tvhbi7+3+EeLY1v8s8W/Wvy7xX9a/LfF/1oc0uE4HY7b4Xgdjt/hBB1O2OFEHU7c4dAOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+hwyQ6X6pAOl+5wmQ6X7XC5DpfvcIUOV+wYOmTIEFfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6373CHDnfscKcOd+5wlw537XC3DnfvcI8O9+xwrw737nCfDvftcL8O9+/wgA4P7PCgDg/u8JAOD+3wsA4P7/CIDo/s8KgOj+7wmA6P7fC4Do/v8IQOT+zwpA5P7tAOT+nw1A5P6/D0Ds/o8MwOz+rw7A4HHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdDuvwnA7P7fC8Ds/v8IIOL+zwog4v7vCSDi/t8LIOL+/wig6v7PCqDq/u8JoOr+3wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7nB4hyM6vKfDezsc2eF9HY7qcHSH93f4QIcPdvhQhw93+EiHj3b4WIePd/hEh092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYefdvhZh593+EWHYzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86HNvhnx3+1eHfHf7T4b8d/tfhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHof2OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3OOgx6DHsMeox7jHpMe0x6zHvseix7LHqse6x6bHtseux73FYj+f0eG6P5/V4fo8X9Hhhjxf1eHGPl/R4aY+X9Xh5j1f0eGWPV/V4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHePw3sc0eM9Pd7b48ge7+txVI+j/8fCOQTxfTAKMHWb2kptd2vbtm3bWyO1/z8btZkyaGrbtm2+eTPfeW87e94BjhzgqAGOHuCYAT40wLEDfHiAjwzw0QE+NsDHB/jEAJ8c4FMDfHqAzwzw2QE+N8DnB/jCAF8c4EsDfHmArwzw1QG+NsDXB/jGAN8c4FsDfHuA7wzw3QG+N8D3B/jBAD8c4EcD/HiAnwzw0wF+NsDPB/jFAL8c4FcD/HqA3wzw2wF+N8DvB/jDAH8c4E8D/HmAvwzw1wH+NsDfB/jHAP8c4F8D/HuA/wzw3wH+N8AhAY4T4LgBjhfg+AFOEOCEAU4U4MQBThLg0AAnDXCyACcPcIoApwxwqgCnDnCaAKcNcLoApw9whgBnDHCmAGcOcJYAZw1wWICzBTh7gHMEOGeAcwU4d4DzBDhvgPMFOH+ACwS4YIALBbhwgIsEuGiAiwW4eIBLBLhkgAS4VIBLB7hMgMsGuFyAywe4QoArBrhSgCsHuEqAqwa4WoCrB7hGgGsGuFaAawe4ToDrBrhegOsHuEGAGwa4UYAbB7hJgJsGuFmAmwe4RYBbBrhVgFsHuE2A2wa4XYDbB7hDgDsGuFOAOwe4S4C7BrhbgLsHuEeAewa4V4B7B7hPgPsGuF+A+wd4QIAHBnhQgAcHeEiAhwZ4WICHB3hEgEcGeFSARwd4TIDHBnhcgMcHeEKAJwZ4UoAGeHKApwR4aoCnBXh6gGcEeGaAZwV4doDnBDg8wHMDPC/A8wO8IMALA7wowIsDvCTASwO8LMDLA7wiwCsDHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3hVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4B3BzgiwHsCvDfA+wK8P8AHAnwwwJEBjgpwdIBjAnwowLEBPhzgIwE+GuBjAT4e4BMBPhngUwE+HeAzAT4b4HMBPh/gCwG+GOBLAb4c4CsBvhrgawG+HuAbAb4Z4FsBvh3gOwG+G+B7Ab4f4AcBfhjgRwF+HOAnAX4a4GcBfh7gFwF+GeBXAX4d4DcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeA/Af4b4H8BDglxnBDHDXG8EMcPcYIQJwxxohAnDnGSEIeGOGmIk4U4eYhThDhliFOFOHWI04Q4bYjThTh9iDOEOGOIM4U4c4izhDhriMNCnC3E2UOcI8Q5Q5wrxLlDnCfEeUOcL8T5Q1wgxAVDXCjEhUNcJMRFQ1wsxMVDXCLEJUMkxKVCXDrEZUJcNsTlQlw+xBVCXDHElUJcOcRVQlw1xNVCXD3ENUJcM8S1Qlw7xHVCXDfE9UJcP8QNQtwwxI1C3DjETULcNMTNQtw8xC1C3DLErULcOsRtQtw2xO1C3D7EHULcMcSdQtw5xF1C3DXE3ULcPcQ9QtwzxL1C3DvEfULcN8T9Qtw/xANCPDDEg0I8OMRDQjw0xMNCPDzEI0I8MsSjQjw6xGNCPDbE40I8PsQTQjwxxJNCNMSTQzwlxFNDPC3E00M8I8QzQzwrxLNDPCfE4SGeG+J5IZ4f4gUhXhjiRSFeHOIlIV4a4mUhXh7iFSFeGeIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7Eq0K8OsRrQrw2xOtCvD7EG0K8McSbQrw5xFtCvDXE20K8PcQ7QrwzxLtCvDvEESHeE+K9Id4X4v0hPhDigyGODHFUiKNDHBPiQyGODfHhEB8J8dEQHwvx8RCfCPHJEJ8K8ekQnwnx2RCfC/H5EF8I8cUQXwrx5RBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEOG6E40U4foQTRDhhhBNFOHGEk0Q4NMJJI5wswskjnCLCKSOcKsKpI5wmwmkjnC7C6SOcIcIZI5wpwpkjnCXCWSMcFuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EQ6P8NwIz4vw/AgviPDCCC+K8OIIL4nw0ggvi/DyCK+I8MoIBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRHeFeHdEY6I8J4I743wvgjvj/CBCB+McGSEoyIcHeGYCB+KcGyED0f4SISPRvhYhI9H+ESET0b4VIRPR/hMhM9G+FyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxqExThrjZDFOHuMUMU4Z41QxTh3jNDFOG+N0MU4f4wwxzhjjTDHOHOMsMc4a47AYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnGbGLeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O8ZgYj43xuBiPj/GEGE+M8aQYjfHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4lxeIznxnhejOfHeEGMF8Z4UYwXx3hJjJfGeFmMl8d4RYxXxjiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xqhivjvGaGK+N8boYr4/xhhhvjPGmGG+O8ZYYb43xthhvj/GOGO+M8a4Y745xRIz3xHhvjPfFeH+MD8T4YIwjYxwV4+gYx8T4UIxjY3w4xkdifDTGx2J8PMYnYnwyxqdifDrGZ2J8NsbnYnw+xhdifDHGl2J8OcZXYnw1xtdifD3GN2J8M8a3Ynw7xndifDfG92J8P8YPYvwwxo9i/DjGT2L8NMbPYvw8xi9i/DLGr2L8OsZvYvw2xu9i/D7GH2L8McafYvw5xl9i/DXG32L8PcY/Yvwzxr9i/DvGf2L8N8b/YhyS4DgJjpvgeAmOn+AECU6Y4EQJTpzgJAkOTXDSBCdLcPIEp0hwygSnSnDqBKdJcNoEp0tw+gRnSHDGBGdKcOYEZ0lw1gSHJThbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgksmSIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoInJWiCJyd4SoKnJnhagqcneEaCZyZ4VoJnJ3hOgsMTPDfB8xI8P8ELErwwwYsSvDjBSxK8NMHLErw8wSsSvDLBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9glcleHWC1yR4bYLXJXh9gjckeGOCNyV4c4K3JHhrgrcleHuCdyR4Z4J3JXh3giMSvCfBexO8L8H7E3wgwQcTHJngqARHJzgmwYcSHJvgwwk+kuCjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgkBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcWiKk6Y4WYqTpzhFilOmOFWKU6c4TYrTpjhditOnOEOKM6Y4U4ozpzhLirOmOCzF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVJcMkVSXCrFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTPClFUzw5xVNSPDXF01I8PcUzUjwzxbNSPDvFc1IcnuK5KZ6X4vkpXpDihSlelOLFKV6S4qUpXpbi5SlekeKVKQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTvCvFu1MckeI9Kd6b4n0p3p/iAyk+mOLIFEelODrFMSk+lOLYFB9O8ZEUH03xsRQfT/GJFJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4SYZDM5w0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWTKcNcNhGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4VsZLpLhohkuluHiGS6R4ZIZkuFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemOFJGZrhyRmekuGpGZ6W4ekZnpHhmRmeleHZGZ6T4fAMz83wvAzPz/CCDC/M8KIML87wkgwvzfCyDC/P8IoMr8xwkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4YgM78nw3gzvy/D+DB/I8MEMR2Y4KsPRGY7J8KEMx2b4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+Ob/Gn47w3cyfDfD9zJ8P8MPMvwww48y/DjDTzL8NMPPMvw8wy8y/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mvwzw78y/DvDfzL8N8P/MhyS4zg5jpvjeDmOn+MEOU6Y40Q5TpzjJDkOzXHSHCfLcfIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hyH5ThbjrPnOEeOc+Y4V45z5zhPjvPmOF+O8+e4QI4L5rhQjgvnuEiOi+a4WI6L57hEjkvmSI5L5bh0jsvkuGyOy+W4fI4r5LhijivluHKOq+S4ao6r5bh6jmvkuGaOa+W4do7r5LhujuvluH6OG+S4YY4b5bhxjpvkuGmOm+W4eY5b5LhljlvluHWO2+S4bY7b5bh9jjvkuGOOO+W4c4675LhrjrvluHuOe+S4Z4575bh3jvvkuG+O++W4f44H5HhgjgfleHCOh+R4aI6H5Xh4jkfkeGSOR+V4dI7H5HhsjsfleHyOJ+R4Yo4n5WiOJ+d4So6n5nhajqfneEaOZ+Z4Vo5n53hOjsNzPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jlfleHWO1+R4bY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Xh3jiNyvCfHe3O8L8f7c3wgxwdzHJnjqBxH5zgmx4dyHJvjwzk+kuOjOT6W4+M5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5fpPjtzl+l+P3Of6Q4485/pTjzzn+kuOvOf6W4+85/pHjnzn+lePfOf6T4785/pfjkALHKXDcAscrcPwCJyhwwgInKnDiAicpcGiBkxY4WYGTFzhFgVMWOFWBUxc4TYHTFjhdgdMXOEOBMxY4U4EzFzhLgbMWOKzA2QqcvcA5CpyzwLkKnLvAeQqct8D5Cpy/wAUKXLDAhQpcuMBFCly0wMUKXLzAJQpcskAKXKrApQtcpsBlC1yuwOULXKHAFQtcqcCVC1ylwFULXK3A1Qtco8A1C1yrwLULXKfAdQtcr8D1C9ygwA0L3KjAjQvcpMBNC9yswM0L3KLALQvcqsCtC9ymwG0L3K7A7QvcocAdC9ypwJ0L3KXAXQvcrcDdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rsDjCzyhwBMLPKlACzy5wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwocXuC5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7Au8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwscUeA9Bd5b4H0F3l/gAwU+WODIAkcVOLrAMQU+VODYAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn/+fz9D8dcCfyvw9wL/KPDPAv8q8O8C/ynw3wL/K3BIieOUOG6J45U4fokTlDhhiROVOHGJk5Q4tMRJS5ysxMlLnKJkWPC//8LUJU5T4rQlTlfi9CXOUOKMJc5U4swlzlLirCUOK3G2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcskRKXKnHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKtESTy7xlBJPLfG0Ek8v8YwSzyzxrBLPLvGcEoeXeG6J55V4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Eq8q8eoSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEkeUeE+J95Z4X4n3l/hAiQ+WOLLEUSWOLnFMiQ+VOLbEh0t8pMRHS3ysxMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EIRWOU+G4FY5X4fgVTlDhhBVOVOHEFU5S4dAKJ61wsgonr3CKCqescKoKp65wmgqnrXC6CqevcIYKZ6xwpgpnrnCWCmetcFiFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVUuFSFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFVnhyhadUeGqFp1V4eoVnVHhmhWdVeHaF51Q4vMJzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrKxxUGFQYVhhVGFeYVJhWmFWYV1hUWFZYVVhX2FTYVthV2Fd4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1c4osJ7Kry3wvsqvL/CByp8sMKRFY6qcHSFYyp8qMKxFT5c4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8j8O8K/6nw3wr/q3BIjePUOG6N49U4fo0T1DhhjRPVOHGNk9Q4tMZJa5ysxslrnOL/2RCcqsapa5ymxmlrnK7G6WucocYZa5ypxplrnKXGWWscVuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXuMSNS5ZIzUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOPGNW5S46Y1blbj5jVuUeOWNW5V49Y1blPjtjVuV+P2Ne5Q44417lTjzjXuUuOuNe5W4+417lHjnjXuVePeNe5T47417lfj/jUeUOOBNR5U48E1HlLjoTUeVuPhNR5R45E1HlXj0TUeU+OxNR5X4/E1nlDjiTWeVKM1nlzjKTWeWuNpNZ5e4xk1nlnjWTWeXeM5NQ6v8dwaz6vx/BovqPHCGi+q8eIaL6nx0hovq/HyGq+o8coaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNY6o8Z4a763xvhrvr/GBGh+scWSNo2ocXeOYGh+qcWyND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwaENTtrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4LAGZ2tw9gbnaHDOBudqcO4G52lw3gbna3D+BhdocMEGF2pw4QYXaXDRBhdrcPEGl2hwyQZpcKkGl25wmQaXbXC5BpdvcIUGV2xwpQZXbnCVBldtcLUGV29wjQbXbHCtBtducJ0G121wvQbXb3CDBjdscKMGN25wkwY3bXCzBjdvcIsGt2xwqwa3bnCbBrdtcLsGt29whwZ3bHCnBnducJcGd21wtwZ3b3CPBvdscK8G925wnwb3bXC/Bvdv8IAGD2zwoAYPbvCQBg9t8LAGD2/wiAaPbPCoBo9u8JgGj23wuAaPb/CEBk9s8KQGbfDkBk9p8NQGT2vw9AbPaPDMBs9q8OwGz2lweIPnNnheg+c3eEGDFzZ4UYMXN3hJg5c2eFmDlzd4RYNXNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G725wRIP3NHhvg/c1eH+DDzT4YIMjGxzV4OgGxzT4UINjG3y4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4jgtjtvieC2O3+IELU7Y4kQtTtziJC0ObXHSFidrcfIWp2hxyhananHqFqdpcdoWp2tx+hZnaHHGFmdqceYWZ2lx1haHtThbi7O3OEeLc7Y4V4tztzhPi/O2OF+L87e4QIsLtrhQiwu3uEiLi7a4WIuLt7hEi0u2SItLtbh0i8u0uGyLy7W4fIsrtLhiiyu1uHKLq7S4aourtbh6i2u0uGaLa7W4dovrtLhui+u1uH6LG7S4YYsbtbhxi5u0uGmLm7W4eYtbtLhli1u1uHWL27S4bYvbtbh9izu0uGOLO7W4c4u7tLhri7u1uHuLe7S4Z4t7tbh3i/u0uG+L+7W4f4sHtHhgiwe1eHCLh7R4aIuHtXh4i0e0eGSLR7V4dIvHtHhsi8e1eHyLJ7R4YosntWiLJ7d4Sountnhai6e3eEaLZ7Z4Votnt3hOi8NbPLfF81o8v8ULWrywxYtavLjFS1q8tMXLWry8xStavLLFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3iyNavKfFe1u8r8X7W3ygxQdbHNniqBZHtzimxYdaHNviwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikA7H6XDcDsfrcPwOJ+hwwg4n6nDiDifpcGiHk3Y4WYeTdzhFh1N2OFWHU3c4TYfTdjhdh9N3OEOHM3Y4U4czdzhLh7N2OKzD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTpcuMNFOly0w8U6XLzDJTpcskM6XKrDpTtcpsNlO1yuw+U7XKHDFTtcqcOVO1ylw1U7XK3D1Ttco8M1O1yrw7U7XKfDdTtcr8P1O9ygww073KjDjTvcpMNNO9ysw8073KLDLTvcqsOtO9ymw2073K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvTvcp8N9O9yvw/07PKDDAzs8qMODOzykw0M7PKzDwzs8osMjOzyqw6M7PKbDYzs8rsPjOzyhwxM7PKlDOzy5w1M6PLXD0zo8vcMzOjyzw7M6PLvDczoc3uG5HZ7X4fkdXtDhhR1e1OHFHV7S4aUdXtbh5R1e0eGVHQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Du8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzsc0eE9Hd7b4X0d3t/hAx0+2OHIDkd1OLrDMR0+1OHYDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvW7skPc7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfhw/xtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dof0OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4SY9De5y0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcdhPc7W4+w9ztHjnD3O1ePcPc7T47w9ztfj/D0u0OOCPS7U48I9LtLjoj0u1uPiPS7R45I90uNSPS7d4zI9Ltvjcj0u3+MKPa7Y40o9rtzjKj2u2uNqPa7e4xo9rtnjWj2u3eM6Pa7b43o9rt/jBj1u2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1u2+N2PW7f4w497tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT0e3eMxPR7b43E9Ht/jCT2e2ONJPdrjyT2e0uOpPZ7W4+k9ntHjmT2e1ePZPZ7T4/Aez+3xvB7P7/GCHi/s8aIeL+7xkh4v7fGyHi/v8Yoer+xx0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d44ge7+nx3h7v6/H+Hh/o8cEeR/Y4qsfRPY7p+T+W7akJ04NhtvDEtm1zxbZt27ZXNNHEtvHcNmKPY9u27V1vffsndFddB33QDh/giAGOHOCoAY4e4JgBjh3gEwN8coBPDfDpAT4zwGcH+NwAnx/gCwN8cYAvDfDlAb4ywFcH+NoAXx/gGwN8c4BvDfDtAb4zwHcH+N4A3x/gBwP8cIAfDfDjAX4ywE8H+NkAPx/gFwP8coBfDfDrAX4zwG8H+N0Avx/gDwP8cYA/DfDnAf4ywF8H+NsAfx/gHwP8c4B/DfDvAf4zwH8H+N8AhwQ4ToDjBjhegOMHOEGAEwY4UYATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgEsGuFSASwdIgMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAnBXhygKcEaICnBnhagKcHeEaAZwY4NMCzAjw7wHMCPDfA8wIcFuD5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXgIMAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALsA+wLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDHB7giABHBjgqwNEBjglwbIBPBPhkgE8F+HSAzwT4bIDPBfh8gC8E+GKALwX4coCvBPhqgK8F+HqAbwT4ZoBvBfh2gO8E+G6A7wX4foAfBPhhgB8F+HGAnwT4aYCfBfh5gF8E+GWAXwX4dYDfBPhtgN8F+H2APwT4Y4A/BfhzgL8E+GuAvwX4e4B/BPhngH8F+HeA/wT4b4D/BeM5JMRxQhw3xPFCHD/ECUKcMMSJQpw4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCXDLEpUJcOkRCXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzwpxJNDPCVEQzw1xNNCPD3EM0I8M8ShIZ4V4tkhnhPiuSGeF+KwEM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYh3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7i8BBHhDgyxFEhjg5xTIhjQ3wixCdDfCrEp0N8JsRnQ3wuxOdDfCHEF0N8KcSXQ3wlxFdDfC3E10N8I8Q3Q3wrxLdDfCfEd0N8L8T3Q/wgxA9D/CjEj0P8JMRPQ/wsxM9D/CLEL0P8KsSvQ/wmxG9D/C7E70P8IcQfQ/wpxJ9D/CXEX0P8LcTfQ/wjxD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThThxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuEeGSES4V4dIREuEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhjhSRGeHOEpERrhqRGeFuHpEZ4R4ZkRDo3wrAjPjvCcCM+N8LwIh0V4foQXRHhhhBdFeHGEl0R4aYSXRXh5hFdEeGWEV0V4dYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFOIgwiDCMMIowjjCJMI0wizCPsIiwjLCKsI6wibCNsIuwj/DuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCIdHOCLCkRGOinB0hGMiHBvhExE+GeFTET4d4TMRPhvhcxE+H+ELEb4Y4UsRvhzhKxG+GuFrEb4e4RsRvhnhWxG+HeE7Eb4b4XsRvh/hBxF+GOFHEX4c4ScRfhrhZxF+HuEXEX4Z4VcRfh3hNxF+G+F3EX4f4Q8R/hjhTxH+HOEvEf4a4W8R/h7hHxH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYl4xxqRiXjpEYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYN4lx0xg3i3HzcYcM+V9vW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SozGeGqMp8V4eoxnxHhmjENjPCvGs2M8J8ZzYzwvxmExnh/jBTFeGONFMV4c4yUxXhrjZTFeHuMVMV4Z41UxXh3jNTFeG+N1MV4f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMQ5iDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GO8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMbhMY6IcWSMo2IcHeOYGMfG+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/G+F+MQxIcJ8FxExwvwfETnCDBCROcKMGJE5wkwUkTnCzByROcIsEpE5wqwakTnCbBaROcLsHpE5whwRkTnCnBmROcJcFZE5wtwdkTnCPBOROcK8G5E5wnwXkTnC/B+RNcIMEFE1wowYUTXCTBRRNcLMHFE1wiwSUTXCrBpRMkwWUSXDbB5RJcPsEVElwxwZUSXDnBVRJcNcHVElw9wTUSXDPBtRJcO8F1Elw3wfUSXD/BDRLcMMGNEtw4wU0S3DTBzRLcPMEtEtwywa0S3DrBbRLcNsHtEtw+wR0S3DHBnRLcOcFdEtw1wd0S3D3BPRLcM8G9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEjw8wSMSPDLBoxI8OsFjEjw2weMSPD7BExI8McGTEjw5wVMSNMFTEzxt2KSenuAZCZ6Z4NAEz0rw7ATPSfDcBM9LcFiC5yd4QYIXJnhRghcneEmClyZ4WYKXJ3hFglcmeFWCVyd4TYLXJnhdgtcneEOCNyZ4U4I3J3hLgrcmeFuCtyd4R4J3JnhXgoMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wTvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEH03wsQQfT3B4giMSHJngqARHJzgmwbEJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgkBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0px6RRJcZkUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O8ZQUTfHUFE9L8fQUz0jxzBSHpnhWimeneE6K56Z4XorDUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsWrUrw6xWtSvDbF61K8PsUbUrwxxZtSvDnFW1K8NcXbUrw9xTtSvDPFu1IcpBikGKYYpRinmKSYppilmKdYpFimWKVYp9ik2KbYpdineHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpPhoio+l+HiKw1MckeLIFEelODrFMSmOTfGJFJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGi2e4RIZLZrhUhktnSIbLZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH/2v4GBB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChidmeFKGJ2d4SoZmeGqGp2V4eoZnZHhmhkMzPCvDszM8J8NzMzwvw2EZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DO8O8N7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMPhGY7IcGSGozIcneGYDMdm+ESGT2b4VIZPZ/hMhs9m+FyGz2f4QoYvZvhShi9n+EqGr2b4WoavZ/hGhm9m+FaGb2f4TobvZvhehu9n+EGGH2b4UYYfZ/hJhp9m+FmGn2f4RYZfZvhVhl9n+E2G32b4XYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+EeGf2b4V4Z/Z/hPhv9m+F+GQ3IcJ8dxcxwvx/FznCDHCXOcKMeJc5wkx0lznCzHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHmXOcJcdZc5wtx9lznCPHOXOcK8e5c5wnx3lznC/H+XNcIMcFc1wox4VzXCTHRXNcLMfFc1wixyVzXCrHpXMkx2VyXDbH5XJcPscVclwxx5VyXDnHVXJcNcfVclw9xzVyXDPHtXJcO8d1clw3x/VyXD/HDXLcMMeNctw4x01y3DTHzXLcPMctctwyx61y3DrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2x+NyPD7HE3I8MceTcjw5x1NyNMdTczwtx9NzPCPHM3McmuNZOZ6d4zk5npvjeTkOy/H8HC/I8cIcL8rx4hwvyfHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78pxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2Of49053pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5Ds9xRI4jcxyV4+gcx+Q4Nscncnwyx6dyfDrHZ3J8Nsfncnw+xxdyfDHHl3J8OcdXcnw1x9dyfD3HN3J8M8e3cnw7x3dyfDfH93J8P8cPcvwwx49y/DjHT3L8NMfPcvw8xy9y/DLHr3L8Osdvcvw2x+9y/D7HH3L8Mcefcvw5x19y/DXH33L8Pcc/cvwzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4NACzyrw7ALPKfDcAs8rcFiB5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FnhXgYMCgwLDAqMC4wKTAtMCswLzAosCy4KJhgwZYl1gU2BbYFdgX+DdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBQ4vcESBIwscVeDoAscUOLbAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/AD8b/vyP9/yx+XOAnBX5a4GcFfl7gFwV+WeBXBX5d4DcFflvgdwV+X+APBf5Y4E8F/lzgLwX+WuBvBf5e4B8F/lngXwX+XeA/Bf5b4H8FDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyxxaIlnlXh2ieeUeG6J55U4rMTzS7ygxAtLvKjEi0u8pMRLS7ysxMtLvKLEK0u8qsSrS7ymxGtLvK7E60u8ocQbS7ypxJtLvKXEW0u8rcTbS7yjxDtLvKvEQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl9iXeXeE+J95Z4X4n3l/hAiQ+W+FCJD5f4SImPlvhYiY+XOLzEESWOLHFUiaNLHFPi2BKfKPHJEp8q8ekSnynx2RKfK/H5El8o8cUSXyrx5RJfKfHVEl8r8fVJ/r/tEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3kqF/lPhniX+V+HeJ/5T4b4n/lTikwnEqHLfC8Socv8IJKpywwokqnLjCSSqctMLJKpy8wikqnLLCqSqcusJpKpy2wukqnL7CGSqcscKZKpy5wlkqnLXC2SqcvcI5KpyzwrkqnLvCeSqct8L5Kpy/wgUqXLDChSpcuMJFKly0wsUqXLzCJSpcssKlKly6QipcpsJlK1yuwuUrXKHCFStcqcKVK1ylwlUrXK3C1Stco8I1K1yrwrUrXKfCdStcr8L1K9ygwg0r3KjCjSvcpMJNK9ysws0r3KLCLSvcqsKtK9ymwm0r3K7C7SvcocIdK9ypwp0r3KXCXSvcrcLdK9yjwj0r3KvCvSvcp8J9K9yvwv0rPKDCAys8qMKDKzykwkMrPKzCwys8osIjKzyqwqMrPKbCYys8rsLjKzyhwhMrPKnCkys8pUIrPLXC0yo8vcIzKjyzwqEVnlXh2RWeU+G5FZ5X4bAKz6/wggovrPCiCi+u8JIKL63wsgovr/CKCq+s8KoKr67wmgqvrfC6Cq+v8IYKb6zwpgpvrvCWCm+t8LYKb6/wjgrvrPCuCgcVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hXeXeE9Fd5b4X0V3l/hAxU+WOFDFT5c4SMVPlrhYxU+XuHwCkdUOLLCURWOrnBMhWMrfKLCJyt8qsKnK3ymwmcrfK7C5yt8ocIXK3ypwpcrfKXCVyt8rcLXK3yjwjcrfKvCtyt8p8J3K3yvwvcr/KDCDyv8qMKPK/ykwk8r/KzCzyv8osIvK/yqwq8r/KbCbyv8rsLvK/yhwh8r/KnCnyv8pcJfK/ytwt8r/KPCPyv8q8K/K/ynwn8r/K/CITWOU+O4NY5X4/g1TlDjhDVOVOPENU5S46Q1Tlbj5DVOUeOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojUuVuPiNS5R45I1LlXj0jVS4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNR5b43E1Hl/jCTWeWONJNZ5c4yk1WuOpNZ5W4+k1nlHjmTUOrfGsGs+u8Zwaz63xvBqH1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1Xh1jdfUeG2N19V4fY031HhjjTfVeHONt9R4a4231Xh7jXfUeGeNd9U4qDGoMawxqjGuMakxrTGrMa+xqLGssaqxrrGpsa2xq7Gv8e4a76nx3hrvq/H+Gh+o8cEaH6rx4RofqfHRGh+r8fEah9c4osaRNY6qcXSNY2ocW+MTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NQ5pcJwGx21wvAbHb3CCBidscKIGJ25wkgYnbXCyBidvcIoGp2xwqganbnCaBqdtcLoGp29whgZnbHCmBmducJYGZ21wtgZnb3COBudscK4G525wngbnbXC+BudvcIEGF2xwoQYXbnCRBhdtcLEGF29wiQaXbHCpBpdukAaXaXDZBpdrcPkGV2hwxQZXanDlBldpcNUGV2tw9QbXaHDNBtdqcO0G12lw3QbXa3D9BjdocMMGN2pw4wY3aXDTBjdrcPMGt2hwywa3anDrBrdpcNsGt2tw+wZ3aHDHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AaPa/D4Bk9o8MQGT2rw5AZPadAGT23wtAZPb/CMBs9scGiDZzV4doPnNHhug+c1OKzB8xu8oMELG7yowYsbvKTBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbG7ylwVsbvK3B2xu8o8E7G7yrwUGDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12DfYN3N3hPg/c2eF+D9zf4QIMPNvhQgw83+EiDjzb4WIOPNzi8wRENjmxwVIOjGxzT4NgGn2jwyQafavDpBp9p8NkGn2vw+QZfaPDFBl9q8OUGX2nw1QZfa/D1Bt9o8M0G32rw7QbfafDdBt9r8P0GP2jwwwY/avDjBj9p8NMGP2vw8wa/aPDLBr9q8OsGv2nw2wa/a/D7Bn9o8McGf2rw5wZ/afDXBn9r8PcG/2jwzwb/avDvBv9p8N8G/2twSIvjtDhui+O1OH6LE7Q4YYsTtThxi5O0OGmLk7U4eYtTtDhli1O1OHWL07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIuLtbh4i0u0uGSLS7W4dIu0uEyLy7a4XIvLt7hCiyu2uFKLK7e4Sourtrhai6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2eFyLx7d4QosntnhSiye3eEqLtnhqi6e1eHqLZ7R4ZotDWzyrxbNbPKfFc1s8r8VhLZ7f4gUtXtjiRS1e3OIlLV7a4mUtXt7iFS1e2eJVLV7d4jUtXtvidS1e3+INLd7Y4k0t3tziLS3e2uJtLd7e4h0t3tniXS0OWgxaDFuMWoxbTFpMW8xazFssWixbrFqsW2xabFvsWuxbvLvFe1q8t8X7Wry/xQdafLDFh1p8uMVHWny0xcdafLzF4S2OaHFki6NaHN3imBbHtvhEi0+2+FT7f16eafHZFp9r8fkWX2jxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFv/7X54Ox+lw3A7H63D8DifocMIOJ+pw4g4n6XDSDifrcPIOp+hwyg6n6nDqDqfpcNoOp+tw+g5n6HDGDmfqcOYOZ+lw1g5n63D2DufocM4O5+pw7g7n6XDeDufrcP4OF+hwwQ4X6nDhDhfpcNEOF+tw8Q6X6HDJDpfqcOkO6XCZDpftcLkOl+9whQ5X7HClDlfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6373CHDnfscKcOd+5wlw537XC3DnfvcI8O9+xwrw737nCfDvftcL8O9+/wgA4P7PCgDg/u8JAOD+3wsA4P7/CIDo/s8KgOj+7wmA6P7fC4Do/v8IQOT+zwpA5P7vCUDu3w1A5P6/D0Ds/o8MwOh3Z4Vodnd3hOh+d2eF6Hwzo8v8MLOryww4s6vLjDSzq8tMPLOry8wys6vLLDqzq8usNrOry2w+s6vL7DGzq8scObOry5w1s6vLXD2zq8vcM7Oryzw7s6HHQYdBh2GHUYd5h0mHaYdZh3WHRYdlh1WHfYdNh22HXYd3h3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h8M7HNHhyA5HdTi6wzEdju3wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw6H9DhOj+P2OF6P4/c4QY8T9jhRjxP3OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI9L90iPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKPp/Roj6f2eFqPp/d4Ro9n9ji0x7N6PLvHc3o8t8fzehzW4/k9XtDjhT1e1OPFPV7S46U9Xtbj5T1e0eOVPV7V49U9XtPjtT1e1+P1Pd7Q44093tTjzT3e0uOtPd7W4+093tHjnT3e1eOgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3sc3uOIHkf2OKrH0T2O6XFsz/9j4R678D4YZounSNoUSW3b7a5t27Zt79q2bTvX30ZtG6ltpMxZ9zrPfIb5vZs1Pj3AZwb47ACfG+DzA3xhgC8O8KUBvjzAVwb46gBfG+DrA3xjgG8O8K0Bvj3Adwb47gDfG+D7A/xggB8O8KMBjh7gxwP8ZICfDvCzAX4+wC8G+OUAvxrg1wP8ZoDfDvC7AX4/wB8G+OMAfxrgzwP8ZYC/DvC3Af4+wD8GOGaAfw7wrwH+PcB/BvjvAP8b4NgBDglwnADHDXC8AMcPcGiAwwKcIMAJAxwe4EQBThzgJAFOGuCIAEcGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WIAEuHiASwS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyABnhCgCcGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgOcGeF6A5wd4QYAXBnhRgBcHeEmAlwZ4WYCXB3hFgFcGeFWAVwd4TYDXBnhdgNcHeEOANwZ4U4A3B3hLgLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCADwf4SICPBvhYgKMCHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB/h4gE8E+GSATwX4dIDPBPhsgM8F+HyALwT4YoAvBfhygK8E+GqArwX4eoBvBPhmgG8F+HaA7wT4boDvBfh+gB8E+GGAHwU4OsCPA/wkwE8D/CzAzwP8IsAvhw3xqwC/DvCbAL8N8LsAvw/whwB/DPCnAH8O8JcAfw3wtwB/D/CPAMcE+GeAfwX4d4D/BPhvgP8FODbAISGOE+K4IY4X4vghDg1xWIgThDhhiMNDnCjEiUOcJMRJQxwR4sgQJwtx8hCnCHHKEKcKceoQpwlx2hCnC3H6EGcIccYQZwpx5hBnCXHWEGcLcfYQ5whxzhDnCnHuEOcJcd4Q5wtx/hAXCHHBEBcKceEQFwlx0RAXC5EQFw9xiRCXDHGpEJcOcZkQlw1xuRCXD3GFEFcMcaUQVw5xlRBXDXG1EFcPcY0Q1wxxrRDXDnGdENcNcb0Q1w9xgxA3DHGjEDcOcZMQNw1xsxA3D3GLELcMcasQtw5xmxC3DXG7ELcPcYcQdwxxpxB3DnGXEHcNcbcQdw9xjxD3DHGvEPcOcZ8Q9w1xvxD3D/GAEA8M8aAQDw7xkBAPDfGwEA8P8YgQjwzxqBCPDvGYEI8N8bgQjw/REE8I8cQQTwrx5BBPCfHUEE8L8fQQzwjxzBDPCvHsEM8J8dwQzwvx/BAvCPHCEC8K8eIQLwnx0hAvC/HyEK8I8coQrwrx6hCvCfHaEK8L8foQbwjxxhBvCvHmEG8J8dYQbwvx9hDvCPHOEO8K8e4Q7wnx3hDvC/H+EB8I8cEQHwrx4RAfCfHREB8LcVSIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EB8P8YkQnwzxqRCfDvGZEJ8N8bkQnw/xhRBfDPGlEF8O8ZUQXw3xtRBfD/GNEN8M8a0Q3w7xnRDfDfG9EN8P8YMQPwzxoxBHh/hxiJ+E+GmIn4X4eYhfhPhliF+F+HWI34T4bYjfhfh9iD+E+GOIP4X4c4i/hPhriL+F+HuIf4Q4JsQ/Q/wrxL9D/CfEf0P8L8SxIQ6JcJwIx41wvAjHj3BohMMinCDCCSMcHuFEEU4c4SQRThrhiAhHRjhZhJNHOEWEU0Y4VYRTRzhNhNNGOF2E00c4Q4QzRjhThDNHOEuEs0Y4W4SzRzhHhHNGOFeEc0c4T4TzRjhfhPNHuECEC0a4UIQLR7hIhItGuFiERLh4hEtEuGSES0W4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0W4eoRrRLhmhGsN/b/NRoTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRnhchMdHaIQnRHhihCdFeHKEp0R4aoSnRXh6hGdEeGaEZ0V4doTnRHhuhOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgqwkGEQYRhhFE0csSQIZhEmEaYRZhHWERYRlhFWEfYRNhG2EXYR/h4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0U4OsKPI/wkwk8j/CzCzyP8IsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCMRH+GeFf0f/9/0f4b4T/RTg2wiExjhPjuDGOF+P4MQ6NcVjMmLH/Pw6PcaIYJ45xkhgnjXFEjCNjnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLEZiXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD5GYzwhxhNjPCnGk2M8JcZTYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjfCjGh2N8JMZHY3wsxlExDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY3w8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9i/DDGj2IcHePHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjmBj/jPGvGP+O8Z8Y/43xvxjHxjgkwXESHDfB8RIcP8GhCQ5LcIIEJ0xweIITJThxgpMkOGmCIxIcmeBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJkuDiCS6R4JIJLpXg0gkuk+CyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZrgCQmemOBJCZ6c4CkJnprgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwmOSnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/g4wk+keCTCT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDbCb6T4LsJvpfg+wl+kOCHCX6U4OgEP07wkwQ/TfCzBD9P8IsEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwR/T/CPBMck+GeCfyX4d4L/JPhvgv8lODbBISmOk+K4KY6X4vgpDk1xWIoTpDhhisNTnCjFiVOcJMVJUxyR4sgUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS5EUF09xiRSXTHGpFJdOcZkUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/RFE9I8cQUT0rx5BRPSfHUFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFK9L8foUb0jxxhRvSvHmFG9J8dYUb0vx9hTvSPHOFO9K8e4U70nx3hTvS/H+FB9I8cEUH0rx4RQfSfHRFB9LcVSKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FB9P8YkUn0zxqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxRHp/hxip+k+GmKn6X4eYpfpPhlil+l+HWK36T4bYrfpfh9ij+k+GOKP6X4c4q/pPhrir+l+HuKf6Q4JsU/U/wrxb9T/CfFf1P8L8WxKQ7JcJwMx81wvAzHz3BohsMynCDDCTMcnuFEGU6c4SQZTprhiAxHZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGZLh4hktkuGSGS2W4dIbLZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGx2R4bIbHZXh8hmZ4QoYnZnhShidneEqGp2Z4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4a3ZnhbhrdneEeGd2Z4V4Z3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIajMhxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gf4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9lODrDjzP8JMNPM/wsw88z/CLDLzP8KsOvM/wmw28z/C7D7zP8IcMfM/wpw58z/CXDXzP8LcPfM/wjwzEZ/pnhXxn+neE/Gf6b4X8Zjs1wSI7j5DhujuPlOH6OQ3McluMEOU6Y4/AcJ8px4hwnyXHSHEfkODLHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFciTHxXNcIsclc1wqx6VzXCbHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M0xxNyPDHHk3I8OcdTcjw1x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x+tyvD7HG3K8Mcebcrw5x1tyvDXH23K8Pcc7crwzx7tyvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyHJXjIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsd++JAh/zPxRI5P5vhUjk/n+EyOz+b4XI7P5/hCji/m+FKOL+f4So6v5vhajq/n+EaOb+b4Vo5v5/hOju/m+F6O7+f4QY4f5vhRjqNz/DjHT3L8NMfPcvw8xy9y/DLHr3L8Osdvcvw2x+9y/D7HH3L8Mcefcvw5x19y/DXH33L8Pcc/chyT4585/pXj3zn+k+O/Of6X49gchxQ4ToHjFjhegeMXOLTAYQVOUOCEBQ4vcKICJy5wkgInLXBEgSMLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrEAKXLzAJQpcssClCly6wGUKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL5ACzyhwBMLPKnAkws8pcBTCzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswFEFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsC3y8wCcKfLLApwp8usBnCny2wOcKfL7AFwp8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwocXeDHBX5S4KcFflbg5wV+UeCXBX5V4NcFflPgtwV+V+D3Bf5Q4I8F/lTgzwX+UuCvBf5W4O8F/lHgmAL/LPCvAv8u8J8C/y3wvwLHFjikxHFKHLfE8Uocv8ShJQ4rcYISJyxxeIkTlThxiZOUOGmJI0ocWeJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlUuLiJS5R4pIlLlXi0iUuU+KyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJVriCSWeWOJJJZ5c4iklnlriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyWOKnFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/i4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4ugSPy7xkxI/LfGzEj8v8YsSvyzxqxK/LvGbEr8t8bsSvy/xhxJ/LPGnEn8u8ZcSfy3xtxJ/L/GPEseU+GeJf5X4d4n/lPhvif+VOLbEIRWOU+G4FY5X4fgVDq1wWIUTVDhhhcMrnKjCiSucpMJJKxxR4cgKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq5AKF69wiQqXrHCpCpeucJkKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IiK0aOGDPGoCo+u8JgKj63wuAqPr9AKT6jwxApPqvDkCk+p8NQKT6vw9ArPqPDMCs+q8OwKz6nw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6twVIWDCoMKwwqjCuMKkwrTCrMK8//1e8iQIWWFVYV1hU2FbYVdhX2Fj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhaMr/LjCTyr8tMLPKvy8wi8q/LLCryr8usJvKvy2wu8q/L7CHyr8scKfKvy5wl8q/LXC3yr8vcI/KhxT4Z8V/lXh3xX+U+G/Ff5X4dgKh9Q4To3j1jhejePXOLTGYTVOUOOENQ6vcaIaJ65xkhonrXFEjSNrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrEZqXLzGJWpcssalaly6xmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3LTGzWrcvMYtatyyxq1q3LrGbWrctsbtaty+xh1q3LHGnWrcucZdaty1xt1q3L3GPWrcs8a9aty7xn1q3LfG/Wrcv8YDajywxoNqPLjGQ2o8tMbDajy8xiNqPLLGo2o8usZjajy2xuNqPL5GazyhxhNrPKnGk2s8pcZTazytxtNrPKPGM2s8q8azazynxnNrPK/G82u8oMYLa7yoxotrvKTGS2u8rMbLa7yixitrvKrGq2u8psZra7yuxutrvKHGG2u8qcaba7ylxltrvK3G22u8o8Y7a7yrxrtrvKfGe2u8r8b7a3ygxgdrfKjGh2t8pMZHa3ysxlE1DmoMagxrjGqMa0xqTGvMasxrLGosa6xqrGtsamxr7Grsa3y8xidqfLLGp2p8usZnany2xudqfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2ocXePHNX5S46c1flbj5zV+UeOXNX5V49c1flPjtzV+V+P3Nf5Q4481/lTjzzX+UuOvNf5W4+81/lHjmBr/rPGvGv+u8Z8a/63xvxrH1jikwXEaHLfB8Rocv8GhDQ5rcIIGJ2xweIMTNThxg5M0OGmDIxoc2eBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GIN0uDiDS7R4JINLtXg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDdrgCQ2e2OBJDZ7c4CkNntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DZ7f4AUNXtjgRQ1e3OAlDV7a4GUNXt7gFQ1e2eBVDV7d4DUNXtvgdQ1e3+ANDd7Y4E0N3tzgLQ3e2uBtDd7e4B0N3tngXQ3e3eA9Dd7b4H0N3t/gAw0+2OBDDT7c4CMNPtrgYw2OanDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/g4w0+0eCTDT7V4NMNPtPgsw0+1+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+MBQ/bPCjBkc3+HGDnzT4aYOfNfh5g180+GWDXzX4dYPfNPhtg981+H2DPzT4Y4M/Nfhzg780+GuDvzX4e4N/NDimwT8b/KvBvxv8p8F/G/yvwbENDmlxnBbHbXG8FsdvcWiLw1qcoMUJWxze4kQtTtziJC1O2uKIFke2OFmLk7c4RYtTtjhVi1O3OE2L07Y4XYvTtzhDizO2OFOLM7c4S4uztjhbi7O3OEeLc7Y4V4tztzhPi/O2OF+L87e4QIsLtrhQiwu3uEiLi7a4WIu0uHiLS/wzjku2uFSLS7e4TIvLtrhci8u3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt2iLJ7R4YosntXhyi6e0eGqLp7V4eotntHhmi2e1eHaL57R4bovntXh+ixe0eGGLF7V4cYuXtHhpi5e1eHmLV7R4ZYtXtXh1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7U4qsVBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lj7f4RItPtvhUi0+3+EyLz7b4XIvPt/hCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRi6Nb/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/WhzT4p8t/tXi3y3+0+K/Lf7X4tgWh3Q4Tofjdjheh+N3OLTDYR1O0OGEHQ7vcKIOJ+5wkg4n7XBEhyM7nKzDyTucosMpO5yqw6k7nKbDaTucrsPpO5yhwxk7nKnDmTucpcNZO5ytw9k7nKPDOTucq8O5O5ynw3k7nK/D+TtcoMMFO1yow4U7XKTDRTtcrEM6XLzDJTpcssOlOly6w2U6XLbD5TpcvsMVOlyxw5U6XLnDVTpctcPVOly9wzU6XLPDtTpcu8N1Oly3w/U6XL/DDTrcsMONOty4w0063LTDzTrcvMMtOtyyw6063LrDbTrctsPtOty+wx063LHDnTrcucNdOty1w9063L3DPTrcs8O9Oty7w3063LfD/Trcv8MDOjyww4M6PLjDQzo8tMPDOjy8wyM6PLLDozo8usNjOjy2w+M6PL5DOzyhwxM7PKnDkzs8pcNTOzytw9M7PKPDMzs8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMPLO7yiwys7vKrDqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7fKjDhzt8pMNHO3ysw1EdDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO3y8wyc6fLLDpzp8usNnOny2w+c6fL7DFzp8scOXOny5w1c6fLXD1zp8vcM3Onyzw7c6fLvDdzp8t8P3Ony/ww86/LDDjzoc3eHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf72P89D8I8Ox3T4Z4d/dfh3h/90+G+H/3U4tsMhPY7T47g9jtfj+D0O7XFYjxP0OGGPw3ucqMeJe5ykx0l7HNHjyB4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ+tx9h7n6HHOHufqce4e5+lx3h7n63H+HhfoccEeF+px4R4X6XHRHhfrkR4X73GJHpfscakel+5xmR6X7XG5HpfvcYUeV+xxpR5X7nGVHlftcbUeV+9xjR7X7HGtHtfucZ0e1+1xvR7X73GDHjfscaMeN+5xkx437XGzHjfvcYset+xxqx637nGbHrftcbset+9xhx537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/Hvfv8YAeD+zxoB4P7vGQHg/t8bAeD+/xiB6P7PGoHo/u8Zgej+3xuB6P79EeT+jxxB5P6vHkHk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHh/p8dEeH+txVI+DHv9fAAAA//8ao8kY") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 44.998702343s ago: executing program 37 (id=1187): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./bus\x00', 0x3200041, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, 0x9e28, &(0x7f0000026280)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 42.861398818s ago: executing program 2 (id=1199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000680)='g', 0x1, 0x841, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)='+', 0x1}], 0x1, &(0x7f0000000c80)=[{0x10, 0x1, 0x8}], 0x10}}], 0x2, 0x4000045) 42.602495661s ago: executing program 2 (id=1201): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 42.388546832s ago: executing program 2 (id=1202): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xb65, 0x0, 0x4}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.098828146s ago: executing program 2 (id=1205): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f00000036c0)="$eJzs3M+LW1UUB/CTae20U+eHWqstiAfd6ObRmYUb3QwyBWlAaTtCKwivTkbDPJNhXhiIiNWVW/8OEURwJ4g73czG/0BwNxuXFcQnk2in1RStlKaUz2eTA/d+k3MTErjh3bf/ymfvb23WxWY5iJlWK2a2I/JGRsZM/OXjePHl73945tKVqxdW2+21i5nnVy8vv5SZC89++9aHXzz33eDkm18vfDMbe0tv7/+y8vPe6b0z+79ffq9bZ7fOXn+QZV7r9wfltaqTG916q8h8o+qUdSe7vbqzc9v4ZtXf3h5m2duYn9ve6dR1lr1hbnWGOejnYGeY5btlt5dFUeT8XHD3jt6s1j+PpmkimuaROBbNkaY5EXNxMh6N+ViIxViKx+LxeCJOxZNxOp6Kp+Orn74cHiQAAAAAAAAAAAAAAAAAAACAe+fGref/m38//39mNGvaXQMAAAAAAAAAAAAAAAAAAMDD5dKVqxdW2+21i5nHI6pPd9d318eP4/HVzehGFZ04F4vxW4xO/4+N6/OvtdfOtSIzcyk+qa7/mb++u34kIk4c5pdHtxOYmF/OsdvzszE3fv3WKL8Si3Fqcn5lYv54vPD8Lf0XsRg/vhP9qGIjDrKH+Y+WM199vf23/NnRPAAAAHgYFHnThP17RFHcaXyc/0//D0zYnx9kzx6d6tKJiHr4wVZZVZ0dxQNfHJtuG782TTP9N2FKxZ2/KbMR8b+fuRURD8YC/1FM+5eJ++HwQ592JwAAAAAAAAAAANyN+3E54bTXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7ADxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArwIAAP//zBPQiw==") syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x200c17a) 41.087153136s ago: executing program 2 (id=1212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 39.682541605s ago: executing program 2 (id=1218): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 39.442061827s ago: executing program 38 (id=1218): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 7.598602026s ago: executing program 9 (id=1474): mknodat$loop(0xffffffffffffffff, 0x0, 0x20, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 6.802277185s ago: executing program 5 (id=1482): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x84, @multicast2, 0x4e24, 0x3, 'rr\x00', 0x24, 0x0, 0x7b}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0xb}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e26, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.537665228s ago: executing program 5 (id=1486): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'batadv0\x00', {'wlan1\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 6.220622254s ago: executing program 5 (id=1488): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.724922838s ago: executing program 5 (id=1491): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 5.101063419s ago: executing program 9 (id=1494): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r1, 0x0, r1, &(0x7f0000000500)=0xffff, 0x9, 0x0) fallocate(r0, 0x3, 0x40005, 0x8000c61) 4.497630209s ago: executing program 9 (id=1499): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.259216129s ago: executing program 9 (id=1514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001000210400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000a000100e7"], 0x2c}}, 0x0) 2.259082889s ago: executing program 5 (id=1515): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='B', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x9}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="26d47656", 0x4}], 0x1, &(0x7f00000007c0)}}], 0x1, 0x1000000) 1.996520932s ago: executing program 9 (id=1517): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x802808, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48400, 0x100) fadvise64(r0, 0x100, 0xfffffffffffffe01, 0x1) 1.920701005s ago: executing program 8 (id=1518): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x260) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x9362, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 1.809225741s ago: executing program 8 (id=1520): socket(0x10, 0x803, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x2020) 1.749865374s ago: executing program 9 (id=1521): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000180)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.713570846s ago: executing program 8 (id=1522): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.697747826s ago: executing program 0 (id=1523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.565624893s ago: executing program 0 (id=1524): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x20000800, 0x1000, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 1.468332998s ago: executing program 8 (id=1525): unshare(0x2a020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x19) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) 1.442916649s ago: executing program 1 (id=1526): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 1.350068054s ago: executing program 8 (id=1527): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x7e, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f6", 0x13, 0x0, 0x0, 0x0) 1.349423544s ago: executing program 5 (id=1528): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) pipe(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 1.140610064s ago: executing program 1 (id=1529): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0x3, 0x5, 0x2, 0x1, "d32984bd1ca44c066af5160e9617018077609475b78411e89309de050000000000f2170e65e3f503270000000000001200000000001900", 0xb}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r2, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r1) 936.520084ms ago: executing program 1 (id=1530): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @broadcast}, 0x10) 679.012877ms ago: executing program 1 (id=1531): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 657.790248ms ago: executing program 0 (id=1532): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 460.650457ms ago: executing program 0 (id=1533): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/180, 0xb4}], 0x1}, 0x40000100) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, 0x0, 0x0, 0x8010}, 0x80) 204.60443ms ago: executing program 1 (id=1534): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) 159.097603ms ago: executing program 0 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 90.151846ms ago: executing program 1 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="0f7873f9b8010000000f01c10f221e0f011ef0281f66baf80cb8318e2586ef66bafc0cecf0096f952e0f435dd40f09660f0093f1510000", 0x37}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 69.379497ms ago: executing program 8 (id=1537): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) socket(0x11, 0xa, 0x5) get_robust_list(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1538): recvmsg(0xffffffffffffffff, 0x0, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) kernel console output (not intermixed with test programs): [ 167.478638][ T6935] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.600661][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.858169][ T6951] loop4: detected capacity change from 0 to 512 [ 167.916486][ T6951] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.959781][ T6951] EXT4-fs (loop4): 1 truncate cleaned up [ 167.971315][ T6951] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 167.984826][ T6828] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.101591][ T6828] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.201455][ T6828] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.258685][ T4189] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 168.267620][ T6828] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 168.551603][ T6961] loop2: detected capacity change from 0 to 40427 [ 168.617918][ T6961] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 168.626489][ T6961] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 168.637447][ T6961] F2FS-fs (loop2): invalid crc value [ 168.667770][ T6961] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.729398][ T6961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.811132][ T6961] attempt to access beyond end of device [ 168.811132][ T6961] loop2: rw=2049, want=45104, limit=40427 [ 168.942093][ T4190] attempt to access beyond end of device [ 168.942093][ T4190] loop2: rw=2049, want=45112, limit=40427 [ 169.138067][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.250766][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.264743][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.314418][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.364266][ T6977] loop1: detected capacity change from 0 to 1024 [ 169.377025][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.390698][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 169.406600][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.457407][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.464593][ T4969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.478694][ T6977] EXT4-fs (loop1): Ignoring removed bh option [ 169.490814][ T6977] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.581161][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.635362][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.661342][ T6977] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,inode_readahead_blks=0x0000000000000004,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 169.690205][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.735280][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.742687][ T4969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.923708][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.946138][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.042131][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.059541][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.143221][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.162739][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.175792][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.208532][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.271840][ T6828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.329498][ T6828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.395209][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.415783][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.434602][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.577246][ T6999] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 170.602882][ T6999] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 170.682981][ T5812] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 170.886413][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.910693][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.930660][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 170.985182][ T6995] chnl_net:caif_netlink_parms(): no params data found [ 171.014513][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.185046][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.192477][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.202119][ T6995] device bridge_slave_0 entered promiscuous mode [ 171.210810][ T5812] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 171.220279][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.267036][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.277273][ T7001] loop3: detected capacity change from 0 to 32768 [ 171.288181][ T5812] usb 2-1: Product: syz [ 171.302605][ T5812] usb 2-1: Manufacturer: syz [ 171.316029][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.324200][ T5812] usb 2-1: SerialNumber: syz [ 171.328715][ T6995] device bridge_slave_1 entered promiscuous mode [ 171.369535][ T7001] XFS (loop3): Mounting V5 Filesystem [ 171.460853][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 171.517138][ T6995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.551790][ T7001] XFS (loop3): Ending clean mount [ 171.569145][ T7001] XFS (loop3): Quotacheck needed: Please wait. [ 171.592760][ T6995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.683688][ T7001] XFS (loop3): Quotacheck: Done. [ 171.801585][ T6995] team0: Port device team_slave_0 added [ 171.854782][ T6995] team0: Port device team_slave_1 added [ 171.947782][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.962833][ T4185] XFS (loop3): Unmounting Filesystem [ 171.965459][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.994219][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.114162][ T6995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.207472][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.243238][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.278272][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.313106][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.359919][ T6995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.410695][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.428694][ T6524] Bluetooth: hci2: command 0x0409 tx timeout [ 172.438193][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.480327][ T6828] device veth0_vlan entered promiscuous mode [ 172.504509][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.526751][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.584107][ T6995] device hsr_slave_0 entered promiscuous mode [ 172.621071][ T6995] device hsr_slave_1 entered promiscuous mode [ 172.630300][ T6995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.645447][ T6995] Cannot create hsr debugfs directory [ 172.686979][ T6828] device veth1_vlan entered promiscuous mode [ 172.710766][ T5812] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 172.730294][ T5812] usb 2-1: USB disconnect, device number 15 [ 172.848313][ T6828] device veth0_macvtap entered promiscuous mode [ 172.909475][ T6828] device veth1_macvtap entered promiscuous mode [ 172.940194][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.961810][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.986023][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.001515][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.020988][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.083429][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.158712][ T7068] loop2: detected capacity change from 0 to 256 [ 173.174147][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.202264][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.220556][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.260503][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.278732][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.289365][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.341641][ T7068] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 173.377700][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.437536][ T4250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.591891][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.602691][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.657707][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.680909][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.703691][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.730596][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.770472][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.794444][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.830926][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.868196][ T4250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.933983][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.953425][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.002488][ T6828] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.032146][ T6828] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.050824][ T6828] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.079920][ T6828] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.137076][ T4250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.284915][ T4250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.410854][ T4954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.418780][ T4954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.479871][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.510925][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 174.555443][ T4961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.577396][ T4961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.605085][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.834898][ T7097] loop2: detected capacity change from 0 to 32768 [ 174.865933][ T6995] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.928268][ T7097] JBD2: Ignoring recovery information on journal [ 175.014715][ T6995] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 175.043879][ T6995] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.054381][ T6995] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.158718][ T7097] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 175.449793][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.514210][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.554198][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.582521][ T6995] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.597458][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 175.698693][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.761440][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.788718][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.795969][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.858521][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.928072][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.983341][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.032768][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.039891][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.156247][ T7154] loop3: detected capacity change from 0 to 512 [ 176.191890][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.245086][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.264790][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.332051][ T7154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.836: inode #1: comm syz.3.836: iget: illegal inode # [ 176.351178][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.361067][ T7154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.836: error while reading EA inode 1 err=-117 [ 176.374199][ T7154] EXT4-fs (loop3): 1 orphan inode deleted [ 176.380079][ T7154] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.403018][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.462129][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.523950][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.727288][ T7163] loop2: detected capacity change from 0 to 2048 [ 176.796216][ T7163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.973271][ T7153] loop1: detected capacity change from 0 to 32768 [ 177.012120][ T7153] XFS: attr2 mount option is deprecated. [ 177.129372][ T7153] XFS (loop1): Mounting V5 Filesystem [ 177.248044][ T7153] XFS (loop1): Ending clean mount [ 177.274846][ T7153] XFS (loop1): Quotacheck needed: Please wait. [ 177.353316][ T7153] XFS (loop1): Quotacheck: Done. [ 177.465849][ T7161] loop3: detected capacity change from 0 to 131072 [ 177.478773][ T6526] Bluetooth: hci2: command 0x040f tx timeout [ 177.488556][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.523909][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.531710][ T4193] XFS (loop1): Unmounting Filesystem [ 177.556028][ T6995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.614352][ T7161] F2FS-fs (loop3): invalid crc value [ 177.647276][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.684109][ T7161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.724658][ T7161] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 177.770641][ T7161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 177.828108][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.846421][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.425134][ T4250] device hsr_slave_0 left promiscuous mode [ 178.431949][ T4250] device hsr_slave_1 left promiscuous mode [ 178.480889][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.492225][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.561080][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.579123][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.637945][ T4250] device bridge_slave_1 left promiscuous mode [ 178.666233][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.704397][ T4250] device bridge_slave_0 left promiscuous mode [ 178.720743][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.790993][ T4250] device veth1_macvtap left promiscuous mode [ 178.805634][ T4250] device veth0_macvtap left promiscuous mode [ 178.823291][ T4250] device veth1_vlan left promiscuous mode [ 178.848453][ T4250] device veth0_vlan left promiscuous mode [ 179.323404][ T7222] loop2: detected capacity change from 0 to 512 [ 179.397715][ T7222] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 179.429339][ T7222] EXT4-fs (loop2): 1 truncate cleaned up [ 179.465003][ T7222] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 179.503096][ T4250] team0 (unregistering): Port device team_slave_1 removed [ 179.545326][ T6763] Bluetooth: hci2: command 0x0419 tx timeout [ 179.562952][ T4250] team0 (unregistering): Port device team_slave_0 removed [ 179.577812][ T4250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.597791][ T4250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.661372][ T7228] loop2: detected capacity change from 0 to 1024 [ 179.843250][ T4250] bond0 (unregistering): Released all slaves [ 179.905667][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.921898][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.931328][ T7211] bridge0: port 3(macsec0) entered blocking state [ 179.942227][ T7211] bridge0: port 3(macsec0) entered disabled state [ 179.954470][ T7211] device macsec0 entered promiscuous mode [ 179.961168][ T7211] bridge0: port 3(macsec0) entered blocking state [ 179.968317][ T7211] bridge0: port 3(macsec0) entered forwarding state [ 179.995163][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.221838][ T7237] tipc: Started in network mode [ 180.250882][ T7237] tipc: Node identity 2a4e0b6ed2ae, cluster identity 4711 [ 180.269102][ T7237] tipc: Enabled bearer , priority 0 [ 180.323742][ T7241] tipc: Disabling bearer [ 180.705028][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.857'. [ 180.732539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.745976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.859501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.881546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.938317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.968914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.001903][ T6995] device veth0_vlan entered promiscuous mode [ 181.037829][ T7228] hfsplus: walked past end of dir [ 181.058130][ T6995] device veth1_vlan entered promiscuous mode [ 181.170102][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.213655][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.269628][ T6995] device veth0_macvtap entered promiscuous mode [ 181.336875][ T6995] device veth1_macvtap entered promiscuous mode [ 181.465172][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.517569][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.548110][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.587422][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.613682][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.630312][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.682059][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.706767][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.731377][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.758105][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.809016][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.836143][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.847247][ T5799] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 181.882352][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.910200][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.974241][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.010723][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.034667][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.067606][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.106456][ T5799] usb 3-1: Using ep0 maxpacket: 8 [ 182.130742][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.149985][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.171763][ T6995] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.187505][ T6995] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.220565][ T6995] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.231304][ T5799] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 182.259178][ T6995] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.271976][ T5799] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 182.305840][ T5799] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.326285][ T5799] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.346379][ T5799] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.355690][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.575911][ T4943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.593133][ T4943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.611236][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.640728][ T5799] usb 3-1: usb_control_msg returned -32 [ 182.646736][ T5799] usbtmc 3-1:16.0: can't read capabilities [ 182.697104][ T4969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.706084][ T4969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.748610][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.796220][ T7306] loop6: detected capacity change from 0 to 128 [ 182.962305][ T7309] loop3: detected capacity change from 0 to 2048 [ 183.093308][ T7309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.584364][ T7329] loop6: detected capacity change from 0 to 8192 [ 183.622971][ T7334] loop7: detected capacity change from 0 to 4096 [ 183.647701][ T7329] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 183.679412][ T7329] REISERFS (device loop6): using ordered data mode [ 183.701680][ T7329] reiserfs: using flush barriers [ 183.721212][ T7329] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.838102][ T7329] REISERFS (device loop6): checking transaction log (loop6) [ 183.881890][ T7329] REISERFS (device loop6): Using r5 hash to sort names [ 183.913742][ T7329] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 184.064612][ T6995] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 184.079153][ T6995] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 184.614506][ T23] usb 3-1: USB disconnect, device number 12 [ 184.767302][ T7364] loop2: detected capacity change from 0 to 1024 [ 184.842739][ T7370] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.894'. [ 185.383261][ T6763] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 185.492357][ T7395] loop2: detected capacity change from 0 to 4096 [ 185.615166][ T7407] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.705827][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 185.705843][ T26] audit: type=1800 audit(1774031404.476:188): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.902" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 185.841632][ T7412] loop6: detected capacity change from 0 to 2048 [ 185.979000][ T7412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.990817][ T6763] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.028270][ T6763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.082136][ T6763] usb 4-1: Product: syz [ 186.106652][ T6763] usb 4-1: Manufacturer: syz [ 186.130932][ T7419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.149435][ T6763] usb 4-1: SerialNumber: syz [ 186.211961][ T6763] usb 4-1: config 0 descriptor?? [ 186.223215][ T6524] Bluetooth: hci1: command 0x0406 tx timeout [ 186.231047][ T6524] Bluetooth: hci3: command 0x0406 tx timeout [ 186.496669][ T6763] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.859439][ T7451] loop6: detected capacity change from 0 to 64 [ 186.965874][ T26] audit: type=1800 audit(1774031405.736:189): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.918" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 187.440876][ T6763] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 187.457216][ T6763] usb 4-1: USB disconnect, device number 12 [ 188.384199][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.415905][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.544331][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.557760][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.647033][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.739980][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.974813][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.985994][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.586009][ T7527] chnl_net:caif_netlink_parms(): no params data found [ 189.867886][ T7547] loop6: detected capacity change from 0 to 32768 [ 189.888552][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.900585][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.962196][ T7527] device bridge_slave_0 entered promiscuous mode [ 190.032731][ T7547] JBD2: Ignoring recovery information on journal [ 190.105366][ T7547] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 190.147181][ T7547] (syz.6.945,7547,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 190.156602][ T7547] (syz.6.945,7547,0):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 190.168602][ T7547] (syz.6.945,7547,0):ocfs2_double_lock:1188 ERROR: status = -12 [ 190.176713][ T7547] (syz.6.945,7547,0):ocfs2_rename:1297 ERROR: status = -12 [ 190.184023][ T7547] (syz.6.945,7547,0):ocfs2_rename:1687 ERROR: status = -12 [ 190.234716][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.256896][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.276282][ T7527] device bridge_slave_1 entered promiscuous mode [ 190.294022][ T6828] ocfs2: Unmounting device (7,6) on (node local) [ 190.473612][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.491827][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.699938][ T7527] team0: Port device team_slave_0 added [ 190.734040][ T7527] team0: Port device team_slave_1 added [ 190.862686][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.896356][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.980515][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.982103][ T5812] Bluetooth: hci1: command 0x0409 tx timeout [ 191.007028][ T7557] loop7: detected capacity change from 0 to 32768 [ 191.032143][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.055328][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.081318][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.091701][ T7557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.947 (7557) [ 191.135030][ T7557] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 191.157474][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.172198][ T7557] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 191.218881][ T7557] BTRFS info (device loop7): trying to use backup root at mount time [ 191.268856][ T7557] BTRFS info (device loop7): setting nodatasum [ 191.285071][ T7557] BTRFS info (device loop7): force zlib compression, level 3 [ 191.306972][ T7557] BTRFS info (device loop7): turning off barriers [ 191.336758][ T7527] device hsr_slave_0 entered promiscuous mode [ 191.356705][ T7557] BTRFS info (device loop7): disabling tree log [ 191.365095][ T7527] device hsr_slave_1 entered promiscuous mode [ 191.389417][ T7587] loop6: detected capacity change from 0 to 512 [ 191.397104][ T7557] BTRFS info (device loop7): using free space tree [ 191.407663][ T7527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.427378][ T7557] BTRFS info (device loop7): has skinny extents [ 191.434067][ T7527] Cannot create hsr debugfs directory [ 191.492626][ T7587] FAT-fs (loop6): Directory bread(block 199916) failed [ 191.544193][ T7587] FAT-fs (loop6): Directory bread(block 199917) failed [ 191.587811][ T7573] loop2: detected capacity change from 0 to 32768 [ 191.595772][ T7587] FAT-fs (loop6): Directory bread(block 199918) failed [ 191.620298][ T7587] FAT-fs (loop6): Directory bread(block 199919) failed [ 191.661085][ T7587] FAT-fs (loop6): Directory bread(block 199920) failed [ 191.668046][ T7587] FAT-fs (loop6): Directory bread(block 199921) failed [ 191.720616][ T7587] FAT-fs (loop6): Directory bread(block 199922) failed [ 191.730814][ T7573] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.952 (7573) [ 191.739727][ T7587] FAT-fs (loop6): Directory bread(block 199923) failed [ 191.803250][ T7587] FAT-fs (loop6): Directory bread(block 199916) failed [ 191.851451][ T7587] FAT-fs (loop6): Directory bread(block 199917) failed [ 191.969025][ T4533] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4533) [ 192.214234][ T7618] loop2: detected capacity change from 0 to 128 [ 192.297186][ T154] device hsr_slave_0 left promiscuous mode [ 192.308304][ T154] device hsr_slave_1 left promiscuous mode [ 192.367053][ T7618] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 192.490714][ T7618] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.736255][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.736323][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.750036][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.750070][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.750895][ T154] device bridge_slave_1 left promiscuous mode [ 192.751026][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.760082][ T154] device bridge_slave_0 left promiscuous mode [ 192.760203][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.776641][ T154] device veth1_macvtap left promiscuous mode [ 192.776744][ T154] device veth0_macvtap left promiscuous mode [ 192.776843][ T154] device veth1_vlan left promiscuous mode [ 192.776917][ T154] device veth0_vlan left promiscuous mode [ 193.070798][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 193.557941][ T7670] loop6: detected capacity change from 0 to 128 [ 193.584122][ T154] team0 (unregistering): Port device team_slave_1 removed [ 193.623993][ T154] team0 (unregistering): Port device team_slave_0 removed [ 193.652753][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.704841][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.938692][ T7680] loop2: detected capacity change from 0 to 512 [ 193.986444][ T154] bond0 (unregistering): Released all slaves [ 194.014590][ T7680] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.977: inode has both inline data and extents flags [ 194.032047][ T7680] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.977: couldn't read orphan inode 15 (err -117) [ 194.044711][ T7680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 194.081801][ T7680] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.977: invalid size [ 194.186937][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.201531][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.323215][ T7527] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 194.381229][ T7527] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 194.457258][ T7527] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 194.489730][ T7527] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 194.891997][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.927136][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.940743][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.029114][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.055574][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.075035][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.123916][ T4954] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.131210][ T4954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.151060][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 195.162103][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.172025][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.181304][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.194850][ T4954] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.202048][ T4954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.211454][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.240774][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.258622][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.289775][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.308169][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.328317][ T7723] loop2: detected capacity change from 0 to 1024 [ 195.336316][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.373395][ T7527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.384397][ T7527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.419664][ T7723] EXT4-fs (loop2): inline encryption not supported [ 195.441018][ T7723] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.460526][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.469451][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.489495][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.537146][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.566486][ T7723] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,barrier=0x0000000000000006,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,discard,data_err=ignore,errors=remount-ro,. Quota mode: writeback. [ 195.626114][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.675262][ T26] audit: type=1800 audit(1774031414.446:190): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 195.711019][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.724352][ T7723] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.990: Allocating blocks 257-513 which overlap fs metadata [ 195.829303][ T7723] EXT4-fs (loop2): Remounting filesystem read-only [ 195.920737][ T7735] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.990: Allocating blocks 497-513 which overlap fs metadata [ 195.998939][ T7735] EXT4-fs (loop2): Remounting filesystem read-only [ 196.030802][ T7735] EXT4-fs (loop2): pa ffff888059117540: logic 256, phys. 369, len 9 [ 196.038922][ T7735] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 196.115847][ T7735] EXT4-fs (loop2): Remounting filesystem read-only [ 196.170581][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.205885][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.229696][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.260883][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 196.966652][ T7738] loop6: detected capacity change from 0 to 32768 [ 196.999820][ T7738] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.992 (7738) [ 197.076619][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.123723][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.139137][ T7738] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 197.153885][ T7738] BTRFS info (device loop6): setting nodatasum [ 197.166623][ T7738] BTRFS info (device loop6): force zlib compression, level 3 [ 197.176306][ T7738] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 197.215635][ T7738] BTRFS info (device loop6): use lzo compression, level 0 [ 197.220934][ T5799] Bluetooth: hci1: command 0x0419 tx timeout [ 197.244124][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.277865][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.291523][ T7738] BTRFS info (device loop6): turning on flush-on-commit [ 197.328385][ T7738] BTRFS info (device loop6): enabling auto defrag [ 197.355556][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.373151][ T7738] BTRFS info (device loop6): max_inline at 4096 [ 197.388049][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.405467][ T7738] BTRFS info (device loop6): using free space tree [ 197.430758][ T7527] device veth0_vlan entered promiscuous mode [ 197.450200][ T7738] BTRFS info (device loop6): has skinny extents [ 197.491704][ T7527] device veth1_vlan entered promiscuous mode [ 197.648689][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.672252][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.685339][ T7527] device veth0_macvtap entered promiscuous mode [ 197.717696][ T7738] BTRFS info (device loop6): enabling ssd optimizations [ 197.774663][ T7527] device veth1_macvtap entered promiscuous mode [ 197.822841][ T7804] loop7: detected capacity change from 0 to 512 [ 197.876771][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.920465][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.951020][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.980475][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.012810][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.045821][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.072188][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.105549][ T7808] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 198.173473][ T7808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.216947][ T7804] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 198.262134][ T7804] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.411734][ T7809] bond2: (slave ip6erspan0): making interface the new active one [ 198.446860][ T7809] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 198.551432][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.582838][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.608738][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.638219][ T7777] loop2: detected capacity change from 0 to 40427 [ 198.658538][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.702160][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 198.750861][ T7777] F2FS-fs (loop2): invalid crc value [ 198.770058][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.785785][ T7777] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.804745][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.821894][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.861334][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.916105][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.948982][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.984887][ T7777] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.000085][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.035248][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.056108][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.094993][ T7527] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.128605][ T7527] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.180452][ T7527] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.189213][ T7527] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.292628][ T7777] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 199.531665][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.539534][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.621154][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.648558][ T7840] netlink: 'syz.1.1012': attribute type 4 has an invalid length. [ 199.720259][ T4961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.758821][ T4961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.811106][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.163156][ T7858] loop7: detected capacity change from 0 to 2048 [ 200.262513][ T7858] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.282700][ T4523] udevd[4523]: incorrect nilfs2 checksum on /dev/loop7 [ 200.370041][ T7871] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.020644][ T5799] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 201.148298][ T7894] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 201.197078][ T7894] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 201.260594][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 201.380945][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.416160][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.457267][ T5799] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 201.521309][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.575719][ T5799] usb 3-1: config 0 descriptor?? [ 201.598041][ T7923] ALSA: seq fatal error: cannot create timer (-16) [ 201.779420][ T7926] loop8: detected capacity change from 0 to 4096 [ 202.099686][ T5799] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 202.243626][ T7951] loop6: detected capacity change from 0 to 512 [ 202.340887][ T7951] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 202.393707][ T7958] netlink: 'syz.7.1046': attribute type 19 has an invalid length. [ 202.428207][ T23] usb 3-1: USB disconnect, device number 13 [ 202.440889][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1046'. [ 202.452808][ T7952] fido_id[7952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1E7D:2D5A.000B/report_descriptor': No such file or directory [ 202.477523][ T7951] EXT4-fs (loop6): invalid journal inode [ 202.483712][ T6763] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 202.496098][ T7958] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.503048][ T7951] EXT4-fs (loop6): can't get journal size [ 202.506820][ T7958] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.519368][ T7958] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.528151][ T7958] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.575451][ T7958] netlink: 'syz.7.1046': attribute type 19 has an invalid length. [ 202.584477][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1046'. [ 202.598336][ T7951] EXT4-fs (loop6): 1 truncate cleaned up [ 202.606466][ T7951] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none. [ 202.762699][ T6763] usb 9-1: Using ep0 maxpacket: 32 [ 202.799397][ T7968] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1050'. [ 202.818130][ T7970] netlink: 'syz.7.1049': attribute type 4 has an invalid length. [ 202.930843][ T6763] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 202.938986][ T6763] usb 9-1: config 0 has no interface number 0 [ 203.171170][ T6763] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.180272][ T6763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.243031][ T6763] usb 9-1: Product: syz [ 203.259679][ T6763] usb 9-1: Manufacturer: syz [ 203.270556][ T26] audit: type=1326 audit(1774031422.026:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.6.1054" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7e15a5799 code=0x0 [ 203.303916][ T6763] usb 9-1: SerialNumber: syz [ 203.345738][ T6763] usb 9-1: config 0 descriptor?? [ 203.411960][ T6763] smsc95xx v2.0.0 [ 203.750795][ T4743] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 203.856419][ T6763] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 203.879538][ T6763] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 204.170428][ C1] sched: RT throttling activated [ 204.191174][ T4743] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 204.227941][ T4743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.280566][ T4743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.314282][ T4743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.368657][ T4743] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.429839][ T4743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.510078][ T4743] usb 2-1: config 0 descriptor?? [ 204.630912][ T6763] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 204.662576][ T6763] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 204.723723][ T6763] usb 9-1: USB disconnect, device number 2 [ 205.041726][ T7990] loop7: detected capacity change from 0 to 262144 [ 205.044988][ T4743] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 205.102380][ T4743] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 205.147000][ T7990] F2FS-fs (loop7): invalid crc value [ 205.252788][ T4743] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 205.273776][ T7990] F2FS-fs (loop7): Found nat_bits in checkpoint [ 205.335092][ T7990] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 205.385811][ T4743] usb 2-1: USB disconnect, device number 16 [ 205.503711][ T26] audit: type=1804 audit(1774031424.276:192): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1053" name="/newroot/39/file0/file1" dev="loop7" ino=7 res=1 errno=0 [ 205.618861][ T8029] fido_id[8029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 206.017196][ T8013] loop2: detected capacity change from 0 to 32768 [ 206.067102][ T8013] XFS: attr2 mount option is deprecated. [ 206.209774][ T8013] XFS (loop2): Mounting V5 Filesystem [ 206.267357][ T8017] loop6: detected capacity change from 0 to 40427 [ 206.366959][ T8017] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 206.398025][ T8017] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 206.540346][ T8017] F2FS-fs (loop6): Found nat_bits in checkpoint [ 206.559076][ T8013] XFS (loop2): Ending clean mount [ 206.568293][ T8013] XFS (loop2): Quotacheck needed: Please wait. [ 206.777319][ T8013] XFS (loop2): Quotacheck: Done. [ 206.841138][ T8017] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 206.848233][ T8017] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 206.984717][ T8013] XFS (loop2): Unmounting Filesystem [ 207.339303][ T8078] loop8: detected capacity change from 0 to 512 [ 207.427297][ T8078] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 207.459748][ T8078] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 207.539911][ T8078] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 207.572603][ T8078] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 207.612907][ T8078] EXT4-fs (loop8): 1 truncate cleaned up [ 207.618620][ T8078] EXT4-fs (loop8): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 207.819998][ T8078] EXT4-fs (loop8): shut down requested (2) [ 208.105528][ T8096] loop8: detected capacity change from 0 to 512 [ 208.236051][ T8096] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 208.301397][ T8096] EXT4-fs (loop8): invalid journal inode [ 208.308987][ T8096] EXT4-fs (loop8): can't get journal size [ 208.372325][ T8096] EXT4-fs (loop8): 1 truncate cleaned up [ 208.378017][ T8096] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none. [ 208.711044][ T8106] loop6: detected capacity change from 0 to 4096 [ 209.315468][ T6828] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 209.346917][ T6828] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 209.426119][ T8094] loop2: detected capacity change from 0 to 40427 [ 209.537325][ T8094] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 209.557426][ T8094] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 209.590708][ T8143] netlink: 'syz.1.1088': attribute type 2 has an invalid length. [ 209.630919][ T8094] F2FS-fs (loop2): LFS not compatible with checkpoint=disable [ 209.644575][ T8148] loop8: detected capacity change from 0 to 1024 [ 209.710683][ T6763] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 209.980480][ T6763] usb 8-1: Using ep0 maxpacket: 32 [ 210.047671][ T8162] loop6: detected capacity change from 0 to 256 [ 210.109331][ T6763] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 210.119445][ T6763] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 210.138403][ T6763] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 210.165934][ T6763] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 210.274222][ T6763] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.295077][ T4743] Process accounting resumed [ 210.321327][ T4743] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 210.355565][ T4743] FAT-fs (loop6): Filesystem has been set read-only [ 210.403093][ T4743] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 210.467680][ T6763] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 210.497454][ T6763] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 210.534222][ T6763] usb 8-1: Product: syz [ 210.580644][ T6763] usb 8-1: Manufacturer: syz [ 210.585396][ T6763] usb 8-1: SerialNumber: syz [ 210.631906][ T6763] usb 8-1: config 0 descriptor?? [ 210.642695][ T8180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1098'. [ 210.687044][ T6763] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 210.724054][ T6763] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 210.946326][ T8191] loop2: detected capacity change from 0 to 1024 [ 211.027308][ T8191] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.151312][ T8191] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000003,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 211.216374][ T6763] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 211.323554][ T4743] usb 8-1: USB disconnect, device number 2 [ 211.342488][ T8198] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 211.395852][ T4743] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 211.424286][ T8191] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 211.494668][ T8191] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.624075][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 211.663586][ T6763] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.692402][ T6763] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.729001][ T6763] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 211.739801][ T6763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.765558][ T6763] usb 7-1: config 0 descriptor?? [ 211.887953][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 212.014153][ T23] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 212.060525][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.107700][ T23] usb 2-1: config 0 descriptor?? [ 212.172916][ T23] gspca_main: sq930x-2.14.0 probing 041e:403c [ 212.407799][ T8256] loop7: detected capacity change from 0 to 128 [ 212.442618][ T8256] FAT-fs (loop7): Unrecognized mount option "syzkaller1" or missing value [ 212.665340][ T26] audit: type=1804 audit(1774031431.436:193): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1124" name="/newroot/33/file0/file1" dev="overlay" ino=208 res=1 errno=0 [ 212.730656][ T6763] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 212.786838][ T6763] hid-led 0003:27B8:01ED.000D: ThingM blink(1) v1 initialized [ 212.800886][ T5812] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 212.964134][ T6763] usb 7-1: USB disconnect, device number 2 [ 213.009787][ T8250] loop2: detected capacity change from 0 to 40427 [ 213.037330][ T8250] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 213.050124][ T8250] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 213.078660][ T8250] F2FS-fs (loop2): Found nat_bits in checkpoint [ 213.186037][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.207786][ T8250] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 213.217327][ T8250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 213.230052][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.258053][ T5812] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 213.294963][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.331880][ T5812] usb 8-1: config 0 descriptor?? [ 213.730487][ T23] gspca_sq930x: reg_w 0105 bc00 failed -71 [ 213.736422][ T23] sq930x: probe of 2-1:0.0 failed with error -71 [ 213.776524][ T23] usb 2-1: USB disconnect, device number 17 [ 213.829286][ T5812] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 213.887377][ T5812] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 213.998001][ T8296] loop6: detected capacity change from 0 to 512 [ 214.032024][ T5812] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 214.079084][ T5812] usb 8-1: USB disconnect, device number 3 [ 214.143718][ T8296] EXT4-fs (loop6): orphan cleanup on readonly fs [ 214.158127][ T5812] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 214.169889][ T8296] EXT4-fs warning (device loop6): ext4_xattr_inode_get:492: inode #11: comm syz.6.1130: ea_inode file size=4 entry size=6 [ 214.196493][ T8296] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 214.261775][ T8296] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1130: corrupted inode contents [ 214.287093][ T8296] EXT4-fs (loop6): Remounting filesystem read-only [ 214.300563][ T8296] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #15: comm syz.6.1130: mark_inode_dirty error [ 214.326671][ T8296] EXT4-fs (loop6): Remounting filesystem read-only [ 214.346702][ T8296] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1130: corrupted inode contents [ 214.370582][ T6763] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 214.406229][ T8296] EXT4-fs (loop6): Remounting filesystem read-only [ 214.448371][ T8300] fido_id[8300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 214.468572][ T8296] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.1130: mark_inode_dirty error [ 214.491595][ T8296] EXT4-fs (loop6): Remounting filesystem read-only [ 214.498160][ T8296] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.1130: mark inode dirty (error -117) [ 214.547420][ T8296] EXT4-fs (loop6): Remounting filesystem read-only [ 214.573215][ T8296] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117) [ 214.600346][ T8296] EXT4-fs (loop6): 1 orphan inode deleted [ 214.621479][ T8296] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,auto_da_alloc=0x0000000000000004,debug_want_extra_isize=0x000000000000005c,delalloc,errors=remount-ro,min_batch_time=0x000000000000b656,init_itable=0x0000000000008d55,. Quota mode: none. [ 214.740261][ T8318] netlink: 'syz.7.1136': attribute type 1 has an invalid length. [ 214.772943][ T8318] netlink: 252 bytes leftover after parsing attributes in process `syz.7.1136'. [ 214.800720][ T6763] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.811328][ T6763] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.906660][ T6828] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 214.950759][ T6763] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.966769][ T6828] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag [ 214.968301][ T6763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.999426][ T6828] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag [ 215.066737][ T6763] usb 9-1: SerialNumber: syz [ 215.397636][ T6763] usb 9-1: 0:2 : does not exist [ 215.453536][ T6763] usb 9-1: unit 253 not found! [ 215.472586][ T1211] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.505113][ T6763] usb 9-1: USB disconnect, device number 3 [ 215.632575][ T1211] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.768650][ T1211] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.794694][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.854422][ T1211] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.272303][ T1211] tipc: Left network mode [ 216.630853][ T7834] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 216.831450][ T5814] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.898548][ T8388] chnl_net:caif_netlink_parms(): no params data found [ 217.020767][ T7834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.032475][ T7834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.060660][ T7834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.080646][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 217.086613][ T7834] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.096222][ T7834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.106645][ T7834] usb 2-1: config 0 descriptor?? [ 217.119083][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.132977][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.149427][ T8388] device bridge_slave_0 entered promiscuous mode [ 217.200790][ T5814] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 217.221931][ T5814] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 217.264495][ T5814] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 217.279326][ T5814] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 217.299806][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.317853][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.326471][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.345141][ T8388] device bridge_slave_1 entered promiscuous mode [ 217.404585][ T8420] loop7: detected capacity change from 0 to 1024 [ 217.477771][ T5814] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 217.505154][ T5814] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 217.532338][ T5814] usb 3-1: Product: syz [ 217.536708][ T5814] usb 3-1: Manufacturer: syz [ 217.550048][ T5814] usb 3-1: SerialNumber: syz [ 217.597478][ T5814] usb 3-1: config 0 descriptor?? [ 217.612811][ T7834] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 217.641984][ T7834] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 217.642758][ T5814] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 217.667429][ T8420] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.680578][ T7834] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 217.725712][ T8420] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3885: comm syz.7.1167: Allocating blocks 257-513 which overlap fs metadata [ 217.759084][ T5814] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 217.879569][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.909290][ T7832] usb 2-1: USB disconnect, device number 18 [ 217.921449][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.122681][ T1211] device hsr_slave_0 left promiscuous mode [ 218.129172][ T1211] device hsr_slave_1 left promiscuous mode [ 218.135892][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.143475][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.156700][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.180610][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.199174][ T1211] device macsec0 left promiscuous mode [ 218.208011][ T1211] bridge0: port 3(macsec0) entered disabled state [ 218.224534][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.242217][ T1211] device bridge_slave_0 left promiscuous mode [ 218.248549][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.301324][ T1211] device veth1_macvtap left promiscuous mode [ 218.307431][ T1211] device veth0_macvtap left promiscuous mode [ 218.346771][ T1211] device veth1_vlan left promiscuous mode [ 218.353224][ T1211] device veth0_vlan left promiscuous mode [ 218.501111][ T5814] Bluetooth: hci0: command 0x0409 tx timeout [ 218.750690][ T7832] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 218.785026][ T8448] loop8: detected capacity change from 0 to 4096 [ 218.871625][ T8448] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 218.947716][ T8448] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 219.034978][ T8448] ntfs3: loop8: Failed to load $Extend. [ 219.064485][ T1211] team0 (unregistering): Port device team_slave_1 removed [ 219.119003][ T1211] team0 (unregistering): Port device team_slave_0 removed [ 219.152079][ T7832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.188792][ T7832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.216166][ T1211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.261214][ T1211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.317023][ T7832] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.339979][ T7832] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 219.368916][ T7832] usb 2-1: Manufacturer: syz [ 219.389049][ T7832] usb 2-1: config 0 descriptor?? [ 219.503447][ T1211] bond0 (unregistering): Released all slaves [ 219.577911][ T7834] usb 3-1: USB disconnect, device number 14 [ 219.596672][ T7834] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 219.708708][ T8388] team0: Port device team_slave_0 added [ 219.746368][ T8450] loop7: detected capacity change from 0 to 32768 [ 219.788792][ T8388] team0: Port device team_slave_1 added [ 219.812286][ T8450] [ 219.812286][ T8450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.812286][ T8450] [ 219.901632][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.908654][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.999788][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.038063][ T6995] ERROR: (device loop7): diWrite: ixpxd invalid [ 220.038063][ T6995] [ 220.048579][ T8461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'. [ 220.098954][ T6995] ERROR: (device loop7): txCommit: [ 220.098954][ T6995] [ 220.256673][ T8461] team0 (unregistering): Port device team_slave_0 removed [ 220.349736][ T8461] team0 (unregistering): Port device team_slave_1 removed [ 220.390938][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.398217][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.435915][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.583663][ T7832] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0011/input/input19 [ 220.618861][ T6763] Bluetooth: hci0: command 0x041b tx timeout [ 220.654527][ T8388] device hsr_slave_0 entered promiscuous mode [ 220.665844][ T8388] device hsr_slave_1 entered promiscuous mode [ 220.686806][ T7832] uclogic 0003:256C:006D.0011: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 220.827976][ T5814] usb 2-1: USB disconnect, device number 19 [ 220.851335][ T7455] [ 220.851335][ T7455] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.851335][ T7455] [ 220.926870][ T7455] [ 220.926870][ T7455] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.926870][ T7455] [ 221.026264][ T8475] fido_id[8475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 221.408522][ T8388] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 221.480270][ T8493] loop2: detected capacity change from 0 to 7 [ 221.506779][ T8388] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 221.530341][ T8493] Dev loop2: unable to read RDB block 7 [ 221.585656][ T8388] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 221.592090][ T8493] loop2: unable to read partition table [ 221.612358][ T8493] loop2: partition table beyond EOD, truncated [ 221.637772][ T8493] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.688715][ T8388] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 221.709006][ T3561] Dev loop2: unable to read RDB block 7 [ 221.740544][ T3561] loop2: unable to read partition table [ 221.746388][ T3561] loop2: partition table beyond EOD, truncated [ 222.267315][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.366813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.406827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.453833][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.524521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.553817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.588634][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.595791][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.660560][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 222.704366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.755436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.793289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.823277][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.830450][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.851101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.872627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.891677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.915113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.957738][ T8542] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1194'. [ 222.975570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.995157][ T26] audit: type=1326 audit(1774031441.766:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8491 comm="syz.1.1188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7428c6b799 code=0x0 [ 222.996418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.047407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.056963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.083077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.099204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.108368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.127004][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.559443][ T8535] chnl_net:caif_netlink_parms(): no params data found [ 223.707043][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.750879][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.776428][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.022676][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.029792][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.104745][ T8535] device bridge_slave_0 entered promiscuous mode [ 224.137111][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.179540][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.234097][ T8535] device bridge_slave_1 entered promiscuous mode [ 224.324092][ T8535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.380252][ T8535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.604489][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.637447][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.669808][ T7832] Bluetooth: hci2: command 0x0409 tx timeout [ 224.704549][ T8535] team0: Port device team_slave_0 added [ 224.740857][ T5814] Bluetooth: hci0: command 0x0419 tx timeout [ 224.777154][ T8535] team0: Port device team_slave_1 added [ 224.867011][ T8535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.901137][ T8535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.961462][ T8535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.993042][ T8535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.005376][ T8535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.080741][ T8535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.095024][ T8604] loop2: detected capacity change from 0 to 8192 [ 225.139832][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.179842][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.220583][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.251375][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.274085][ T8388] device veth0_vlan entered promiscuous mode [ 225.396539][ T8535] device hsr_slave_0 entered promiscuous mode [ 225.430337][ T8535] device hsr_slave_1 entered promiscuous mode [ 225.453529][ T8535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.463514][ T8535] Cannot create hsr debugfs directory [ 225.472359][ T8388] device veth1_vlan entered promiscuous mode [ 225.598953][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.616602][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.633030][ T8388] device veth0_macvtap entered promiscuous mode [ 225.670602][ T8388] device veth1_macvtap entered promiscuous mode [ 225.734877][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.764895][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.795442][ T4190] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 225.808583][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.823146][ T4190] FAT-fs (loop2): Filesystem has been set read-only [ 225.829880][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.850260][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.891621][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.914775][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.948077][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.961091][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.975062][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.006844][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.021005][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.050510][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.080558][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.116327][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.136793][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.165330][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.206451][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.253016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.299105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.410011][ T8388] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.443719][ T8388] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.460516][ T8388] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.469270][ T8388] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.740871][ T5814] Bluetooth: hci2: command 0x041b tx timeout [ 227.157218][ T1211] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.199296][ T1211] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.263845][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.284766][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.416463][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.487569][ T1211] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.514422][ T1211] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.536766][ T4961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.566633][ T4961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.796657][ T1211] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.822860][ T1211] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.843280][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.152653][ T1211] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.199499][ T1211] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.461607][ T8671] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 228.491485][ T8671] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 228.865606][ T5814] Bluetooth: hci2: command 0x040f tx timeout [ 228.902243][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 229.017498][ T8535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.092205][ T8535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.200252][ T8535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.309514][ T8535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.488843][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.501300][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.525912][ T8659] device bridge_slave_0 entered promiscuous mode [ 229.573771][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.592308][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.605556][ T8659] device bridge_slave_1 entered promiscuous mode [ 229.704184][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.713628][ T4240] Bluetooth: hci3: command 0x0409 tx timeout [ 229.735420][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.837098][ T8659] team0: Port device team_slave_0 added [ 229.851023][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1230'. [ 229.873779][ T8535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.893686][ T8659] team0: Port device team_slave_1 added [ 229.930612][ T8535] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.974998][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.991307][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.085745][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.121310][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.150859][ T4965] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.157973][ T4965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.181214][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.205633][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.224594][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.231764][ T4965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.278519][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.296981][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.308459][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.360522][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.398549][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.407996][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.485594][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.517966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.546016][ T8724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1231'. [ 230.617821][ T8724] team0 (unregistering): Port device team_slave_0 removed [ 230.664713][ T8724] team0 (unregistering): Port device team_slave_1 removed [ 230.725563][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.821602][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.844559][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.873663][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.889796][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.900742][ T5803] Bluetooth: hci2: command 0x0419 tx timeout [ 230.919525][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.939752][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.951442][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.971305][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.000338][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.220260][ T8659] device hsr_slave_0 entered promiscuous mode [ 231.269819][ T8659] device hsr_slave_1 entered promiscuous mode [ 231.327111][ T8659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.340174][ T8659] Cannot create hsr debugfs directory [ 231.363549][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.807267][ T5803] Bluetooth: hci3: command 0x041b tx timeout [ 231.832407][ T26] audit: type=1326 audit(1774031450.606:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.1.1241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7428c6b799 code=0x0 [ 231.895028][ T1211] device hsr_slave_0 left promiscuous mode [ 231.923507][ T1211] device hsr_slave_1 left promiscuous mode [ 231.943521][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.981992][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.021236][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.028823][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.055837][ T1211] device bridge_slave_1 left promiscuous mode [ 232.070666][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.079987][ T1211] device bridge_slave_0 left promiscuous mode [ 232.099101][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.142160][ T1211] device veth1_macvtap left promiscuous mode [ 232.148258][ T1211] device veth0_macvtap left promiscuous mode [ 232.199612][ T1211] device veth1_vlan left promiscuous mode [ 232.219818][ T1211] device veth0_vlan left promiscuous mode [ 232.510699][ T8737] loop8: detected capacity change from 0 to 40427 [ 232.546047][ T8737] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 232.578229][ T8737] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 232.627795][ T8737] F2FS-fs (loop8): invalid crc value [ 232.690367][ T8737] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 232.791842][ T1211] team0 (unregistering): Port device team_slave_1 removed [ 232.811167][ T8737] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 232.818532][ T8737] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 232.845946][ T1211] team0 (unregistering): Port device team_slave_0 removed [ 232.902456][ T1211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.951660][ T1211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.032287][ T8737] attempt to access beyond end of device [ 233.032287][ T8737] loop8: rw=2049, want=53256, limit=40427 [ 233.126738][ T7527] attempt to access beyond end of device [ 233.126738][ T7527] loop8: rw=2049, want=45104, limit=40427 [ 233.175651][ T1211] bond0 (unregistering): Released all slaves [ 233.290178][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.310825][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.328630][ T8535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.681653][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.702207][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.904146][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 234.054362][ T8535] device veth0_vlan entered promiscuous mode [ 234.061158][ T8813] netlink: 'syz.9.1249': attribute type 3 has an invalid length. [ 234.071891][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.081195][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.113438][ T8535] device veth1_vlan entered promiscuous mode [ 234.122931][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.140993][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.160316][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.341111][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.361767][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.388187][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.418808][ T8535] device veth0_macvtap entered promiscuous mode [ 234.587380][ T8535] device veth1_macvtap entered promiscuous mode [ 234.646429][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.678553][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.691352][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.702908][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.720486][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.740590][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.761564][ T8535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.775101][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.845124][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.881019][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.914539][ T8831] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 234.936273][ T8831] Disabled LAPIC found during irq injection [ 234.940114][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.995087][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.018731][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.029915][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.046456][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.068567][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.093092][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.130186][ T8535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.151070][ T8827] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 235.177271][ T8827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.209756][ T8833] bond3: (slave gretap1): making interface the new active one [ 235.230333][ T8833] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 235.255773][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.299783][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.341508][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 235.377670][ T8535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.390005][ T8535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.404102][ T8535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.423241][ T8535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.432573][ T7834] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 235.523807][ T8659] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.590705][ T8659] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.653445][ T8659] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.682223][ T8659] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.721859][ T4965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.748390][ T4965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.791844][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.830848][ T7834] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.905887][ T4969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.927526][ T4969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.940719][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 235.965068][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.042453][ T7834] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.086600][ T7834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.106183][ T7834] usb 10-1: Product: syz [ 236.115338][ T7834] usb 10-1: Manufacturer: syz [ 236.120099][ T7834] usb 10-1: SerialNumber: syz [ 236.139803][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.217102][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.241315][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.285155][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.314882][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.331361][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.371399][ T4954] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.378590][ T4954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.440767][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.466616][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.501415][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.527774][ T4954] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.534946][ T4954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.581882][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.631942][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.656439][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.710452][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.730160][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.771417][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.806716][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.826266][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.848473][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.865846][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.879280][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.904369][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.361299][ T7834] cdc_ncm 10-1:1.0: bind() failure [ 237.369981][ T7834] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 237.419284][ T8908] loop8: detected capacity change from 0 to 2048 [ 237.425921][ T7834] cdc_ncm 10-1:1.1: bind() failure [ 237.452054][ T7834] usb 10-1: USB disconnect, device number 2 [ 237.595299][ T8919] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.691575][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.699175][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.764776][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.399666][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.424665][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.482776][ T8960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.529484][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.545844][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.604434][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.645971][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.726426][ T8659] device veth0_vlan entered promiscuous mode [ 238.786130][ T8659] device veth1_vlan entered promiscuous mode [ 238.905675][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.926134][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.965755][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.017455][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.071769][ T8659] device veth0_macvtap entered promiscuous mode [ 239.114091][ T8659] device veth1_macvtap entered promiscuous mode [ 239.138914][ T8966] loop9: detected capacity change from 0 to 2048 [ 239.208991][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.287555][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.328423][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.349525][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.395025][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.426295][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.483943][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.514577][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.537941][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.569928][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.587588][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.615356][ T8966] hpfs: filesystem error: improperly stopped; already mounted read-only [ 239.628000][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.649499][ T8966] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 239.669775][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.697161][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.722785][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.740680][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.757161][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.768873][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.787580][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.802421][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.820947][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.843000][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.871924][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.881830][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.905191][ T8659] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.941770][ T8659] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.980687][ T8659] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.989444][ T8659] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.999136][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1283'. [ 240.342695][ T4969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.380441][ T4969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.400873][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.436990][ T4949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.461059][ T4949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.490738][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.877031][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec84000: rx timeout, send abort [ 240.889944][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ec84000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.109993][ T9025] lo speed is unknown, defaulting to 1000 [ 241.130732][ T9025] lo speed is unknown, defaulting to 1000 [ 241.172997][ T9025] lo speed is unknown, defaulting to 1000 [ 241.219549][ T9025] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.284245][ T9025] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 241.454763][ T9025] lo speed is unknown, defaulting to 1000 [ 241.454865][ T8997] loop9: detected capacity change from 0 to 32768 [ 241.485879][ T9025] lo speed is unknown, defaulting to 1000 [ 241.499598][ T9025] lo speed is unknown, defaulting to 1000 [ 241.577490][ T9025] lo speed is unknown, defaulting to 1000 [ 241.605939][ T8997] XFS (loop9): Mounting V5 Filesystem [ 241.618219][ T9025] lo speed is unknown, defaulting to 1000 [ 241.630668][ T5814] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 241.642838][ T9025] lo speed is unknown, defaulting to 1000 [ 241.771900][ T8997] XFS (loop9): Ending clean mount [ 242.000793][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.032210][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.062465][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.083125][ T5814] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.098369][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.140177][ T5814] usb 6-1: config 0 descriptor?? [ 242.242588][ T8388] XFS (loop9): Unmounting Filesystem [ 242.633255][ T5814] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 242.668520][ T5814] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 242.863738][ T9083] tipc: Started in network mode [ 242.915416][ T9083] tipc: Node identity ac14140f, cluster identity 4711 [ 243.010589][ C1] plantronics 0003:047F:FFFF.0012: hid_field_extract() called with n (132) > 32! (syz.8.1314) [ 243.029741][ T9083] tipc: Enabled bearer , priority 10 [ 243.216955][ T5814] usb 6-1: USB disconnect, device number 7 [ 243.331403][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1317'. [ 243.348703][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1317'. [ 243.577166][ T9115] input: syz1 as /devices/virtual/input/input20 [ 243.857760][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1325'. [ 243.899298][ T9131] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1325'. [ 243.921517][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1325'. [ 244.041614][ T7832] tipc: Node number set to 2886997007 [ 244.061067][ T9139] loop9: detected capacity change from 0 to 512 [ 244.110284][ T9139] EXT4-fs (loop9): Ignoring removed orlov option [ 244.160763][ T9139] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 244.209508][ T9139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 244.258934][ T9150] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.279265][ T9139] EXT4-fs error (device loop9): ext4_iget_extra_inode:4566: inode #15: comm syz.9.1326: corrupted in-inode xattr [ 244.295873][ T9139] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1326: couldn't read orphan inode 15 (err -117) [ 244.325043][ T9139] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000603,inode_readahead_blks=0x0000000004000000,errors=continue,,errors=continue. Quota mode: none. [ 245.660568][ T5814] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 245.831233][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'. [ 245.900522][ T5814] usb 10-1: Using ep0 maxpacket: 32 [ 245.931398][ T9212] netlink: 'syz.5.1345': attribute type 1 has an invalid length. [ 245.980800][ T4240] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 246.040496][ T5814] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 246.081657][ T5814] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 246.108286][ T5814] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 246.120031][ T5814] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 246.134421][ T5814] usb 10-1: config 0 interface 0 has no altsetting 0 [ 246.159831][ T9225] netlink: 'syz.8.1349': attribute type 10 has an invalid length. [ 246.199731][ T9225] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.230631][ T4240] usb 1-1: Using ep0 maxpacket: 32 [ 246.236631][ T9225] bond0: (slave team0): Enslaving as an active interface with an up link [ 246.310951][ T5814] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 246.330514][ T5814] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 246.360569][ T5814] usb 10-1: Product: syz [ 246.365019][ T5814] usb 10-1: Manufacturer: syz [ 246.380730][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.391077][ T5814] usb 10-1: SerialNumber: syz [ 246.416784][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.417157][ T5814] usb 10-1: config 0 descriptor?? [ 246.468391][ T4240] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 246.503905][ T4240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.512410][ T5814] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 246.540925][ T4240] usb 1-1: config 0 descriptor?? [ 246.575418][ T5814] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 247.052107][ T9224] loop5: detected capacity change from 0 to 40427 [ 247.061829][ T7834] usb 10-1: USB disconnect, device number 3 [ 247.063337][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 247.076276][ T9238] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 247.086612][ T4240] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 247.110602][ T4240] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 247.119712][ T7834] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 247.148378][ T4240] ft260 0003:0403:6030.0013: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 247.148384][ T9224] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 247.228010][ T9224] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 247.314415][ T4240] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 247.332353][ T9224] F2FS-fs (loop5): Found nat_bits in checkpoint [ 247.513695][ T9224] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 247.531261][ T9224] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 247.639967][ T26] audit: type=1800 audit(1774031466.406:196): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1348" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 247.700688][ T26] audit: type=1800 audit(1774031466.456:197): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1348" name="file1" dev="loop5" ino=11 res=0 errno=0 [ 247.740612][ T4240] ft260 0003:0403:6030.0013: failed to retrieve status: -32 [ 248.042241][ T4240] usb 1-1: USB disconnect, device number 6 [ 248.143455][ T9276] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 248.224480][ T9224] Trying to write to read-only block-device loop5 [ 248.284485][ T9224] attempt to access beyond end of device [ 248.284485][ T9224] loop5: rw=34817, want=79920, limit=40427 [ 248.367841][ T9224] Trying to write to read-only block-device loop5 [ 248.405214][ T9224] attempt to access beyond end of device [ 248.405214][ T9224] loop5: rw=34817, want=81920, limit=40427 [ 248.583379][ T8659] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 248.595016][ T8659] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 248.643349][ T8659] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 248.699102][ T8659] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 248.750808][ T8659] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 248.802798][ T9288] netlink: 'syz.0.1361': attribute type 12 has an invalid length. [ 248.833593][ T9273] loop9: detected capacity change from 0 to 131072 [ 248.849499][ T8659] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 248.849526][ T8659] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 248.909180][ T8659] F2FS-fs (loop5): f2fs_remove_inode_page: inconsistent i_blocks, ino:11, iblocks:4096 [ 248.933284][ T9273] F2FS-fs (loop9): invalid crc value [ 248.942104][ T9291] overlayfs: upper fs does not support file handles, falling back to index=off. [ 248.983204][ T9273] F2FS-fs (loop9): Found nat_bits in checkpoint [ 249.022785][ T9273] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2 [ 249.036313][ T9273] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 249.130425][ T4961] Trying to write to read-only block-device loop5 [ 249.173597][ T4961] Trying to write to read-only block-device loop5 [ 249.825107][ T9323] sctp: [Deprecated]: syz.8.1370 (pid 9323) Use of int in maxseg socket option. [ 249.825107][ T9323] Use struct sctp_assoc_value instead [ 250.177210][ T9340] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1375'. [ 250.931609][ T9375] kvm: emulating exchange as write [ 251.349684][ T9401] netlink: 'syz.0.1389': attribute type 11 has an invalid length. [ 251.657580][ T9417] netlink: 'syz.8.1396': attribute type 1 has an invalid length. [ 251.698859][ T9417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.136378][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 252.159857][ T9430] netlink: 'syz.1.1399': attribute type 12 has an invalid length. [ 252.194191][ T9430] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.203252][ T9430] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.212047][ T9430] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.221527][ T9430] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.316454][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 252.330086][ T9430] netlink: 'syz.1.1399': attribute type 12 has an invalid length. [ 253.174075][ T26] audit: type=1326 audit(1774031471.946:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.9.1411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb7634799 code=0x0 [ 253.399917][ T9413] syz.5.1394 (9413): drop_caches: 2 [ 253.916747][ T4197] block nbd0: Receive control failed (result -32) [ 253.975101][ T9502] block nbd0: shutting down sockets [ 255.213878][ T9550] tipc: Started in network mode [ 255.218823][ T9550] tipc: Node identity ac14142f, cluster identity 4711 [ 255.247758][ T9550] tipc: New replicast peer: 0.0.0.0 [ 255.258231][ T9550] tipc: Enabled bearer , priority 10 [ 255.626725][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.633348][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.846775][ T9576] overlayfs: failed to clone upperpath [ 256.308489][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1442'. [ 256.371863][ T4230] tipc: Node number set to 2886997039 [ 256.450651][ T4240] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 256.486954][ T9604] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 256.500557][ T9604] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 256.631104][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1446'. [ 256.720807][ T4240] usb 10-1: Using ep0 maxpacket: 32 [ 256.872723][ T4240] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.917465][ T4240] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.948719][ T4240] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.973322][ T4240] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.003311][ T4240] usb 10-1: config 0 descriptor?? [ 257.071763][ T4240] hub 10-1:0.0: USB hub found [ 257.218529][ T9642] overlayfs: failed to clone upperpath [ 257.290675][ T4240] hub 10-1:0.0: 1 port detected [ 257.405010][ T9653] overlayfs: failed to clone upperpath [ 257.422423][ T7832] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 257.463174][ T4230] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 257.488548][ T7832] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.566308][ T9650] loop5: detected capacity change from 0 to 4096 [ 257.830710][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.849659][ T7832] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 257.861150][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.950812][ T7833] hub 10-1:0.0: activate --> -90 [ 258.060847][ T4230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.071622][ T9670] loop5: detected capacity change from 0 to 8192 [ 258.090530][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.098583][ T4230] usb 2-1: Product: syz [ 258.139523][ T4230] usb 2-1: Manufacturer: syz [ 258.164762][ T4230] usb 2-1: SerialNumber: syz [ 258.290699][ T7832] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 258.315914][ T7832] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.480756][ T5814] usb 10-1: USB disconnect, device number 4 [ 258.540706][ T7832] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 258.561218][ T7832] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 258.599538][ T7832] usb 1-1: Manufacturer: syz [ 258.633802][ T7832] usb 1-1: SerialNumber: syz [ 258.780737][ T4230] usb 2-1: cannot find UAC_HEADER [ 258.881210][ T4230] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 258.917279][ T9660] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1459'. [ 258.936425][ T4230] usb 2-1: USB disconnect, device number 20 [ 258.997713][ T9660] netlink: 'syz.0.1459': attribute type 25 has an invalid length. [ 259.123351][ T7832] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 259.180113][ T7832] usb 1-1: USB disconnect, device number 7 [ 259.191357][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory Stopping sshd: stopped /usr/sbin/sshd (pid 3946) OK [ 259.595402][ T9730] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 259.618926][ T9730] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 Stopping crond: stopped /usr/sbin/crond (pid 3928) OK [ 259.935071][ T9742] device syzkaller1 entered promiscuous mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3853) Stopping network: [ 261.400618][ T4230] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 261.767912][ T9808] loop9: detected capacity change from 0 to 512 [ 261.771380][ T4230] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.960718][ T4230] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.982499][ T9808] EXT4-fs (loop9): 1 truncate cleaned up [ 261.988197][ T9808] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 262.001288][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.035015][ T9817] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.100969][ T4230] usb 6-1: Product: syz [ 262.105306][ T4230] usb 6-1: Manufacturer: syz [ 262.109932][ T4230] usb 6-1: SerialNumber: syz [ 262.117780][ T9808] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1494: invalid indirect mapped block 4294967295 (level 1) OK [ 262.192157][ T9808] EXT4-fs (loop9): Remounting filesystem read-only [ 262.324709][ T9828] "syz.1.1498" (9828) uses obsolete ecb(arc4) skcipher Stopping iptables: OK Stopping system message bus: [ 263.310704][ T4230] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 263.328844][ T4230] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 263.357859][ T4230] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 263.361689][ T7833] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 263.632843][ T9869] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1509'. [ 263.640728][ T7833] usb 2-1: Using ep0 maxpacket: 16 [ 263.730823][ T4230] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 263.780957][ T7833] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.807997][ T7833] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.846364][ T7833] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 263.850910][ T4230] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 263.865528][ T9875] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability done [ 263.905515][ T7833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.993705][ T4230] usb 6-1: USB disconnect, device number 8 [ 264.016828][ T4230] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 264.434917][ T7833] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 264.544892][ T26] audit: type=1326 audit(1774031483.316:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.5.1515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8304ad0799 code=0x0 [ 264.644297][ T9895] netlink: 'syz.9.1514': attribute type 1 has an invalid length. [ 264.695376][ T9895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.759104][ T7834] usb 2-1: USB disconnect, device number 21 [ 265.140259][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1522'. [ 265.169391][ T9916] chnl_net:caif_netlink_parms(): no params data found [ 265.400565][ T7833] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 265.670716][ T7833] usb 10-1: Using ep0 maxpacket: 8 Stopping klogd: [ 265.826510][ T7833] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 265.835034][ T7834] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 265.856842][ T7833] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.898381][ T7833] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.929500][ T7833] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.953314][ T9948] device vlan0 entered promiscuous mode [ 265.960098][ T7833] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.983093][ T9947] device vlan0 left promiscuous mode [ 266.019915][ T7833] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.039537][ T7833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 OK [ 266.194145][ T9954] device syzkaller1 entered promiscuous mode [ 266.250722][ T7834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.281183][ T7834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 Stopping acpid: [ 266.318612][ T7834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.328449][ T7833] usb 10-1: usb_control_msg returned -32 [ 266.335232][ T7833] usbtmc 10-1:16.0: can't read capabilities [ 266.360204][ T7834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.650622][ T7834] usb 6-1: usb_control_msg returned -32 [ 266.656261][ T7834] usbtmc 6-1:16.0: can't read capabilities [ 266.839984][ C1] ================================================================== [ 266.849051][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 266.856644][ C1] Read of size 2 at addr ffff888078575580 by task syz.0.1538/9983 [ 266.864481][ C1] [ 266.866851][ C1] CPU: 1 PID: 9983 Comm: syz.0.1538 Not tainted syzkaller #0 [ 266.874254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.884348][ C1] Call Trace: [ 266.887654][ C1] [ 266.890526][ C1] dump_stack_lvl+0x188/0x250 [ 266.895243][ C1] ? show_regs_print_info+0x20/0x20 [ 266.900495][ C1] ? _printk+0xda/0x130 [ 266.904691][ C1] ? __nft_trace_packet+0x135/0x150 [ 266.909933][ C1] ? load_image+0x400/0x400 [ 266.914472][ C1] ? nft_synproxy_do_eval+0x3c9/0x570 [ 266.919893][ C1] print_address_description+0x60/0x2d0 [ 266.925476][ C1] ? __nft_trace_packet+0x135/0x150 [ 266.930710][ C1] kasan_report+0xdf/0x130 [ 266.935180][ C1] ? __nft_trace_packet+0x135/0x150 [ 266.940430][ C1] __nft_trace_packet+0x135/0x150 [ 266.945497][ C1] nft_do_chain+0x12a5/0x14f0 [ 266.950224][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 266.956164][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 266.961523][ C1] ? ipv6_find_tlv+0x270/0x270 [ 266.966342][ C1] nft_do_chain_inet+0x25c/0x340 [ 266.971322][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 266.976228][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 266.981126][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 266.986544][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 266.991953][ C1] ? lock_downgrade+0x770/0x830 [ 266.996851][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 267.002270][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 267.007162][ C1] nf_hook_slow+0xb9/0x200 [ 267.011616][ C1] ? ip6_input+0xa0/0xa0 [ 267.015903][ C1] NF_HOOK+0x1f2/0x390 [ 267.020014][ C1] ? ip6_input+0xa0/0xa0 [ 267.024292][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 267.029180][ C1] ? ip6_input+0xa0/0xa0 [ 267.033458][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 267.038797][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 267.043700][ C1] ? refcount_add+0x80/0x80 [ 267.048247][ C1] NF_HOOK+0x303/0x390 [ 267.052356][ C1] ? refcount_add+0x80/0x80 [ 267.056898][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 267.061798][ C1] ? refcount_add+0x80/0x80 [ 267.066345][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 267.071676][ C1] __netif_receive_skb+0xcc/0x290 [ 267.076752][ C1] process_backlog+0x370/0x790 [ 267.081570][ C1] ? rps_trigger_softirq+0x210/0x210 [ 267.086908][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 267.092937][ C1] ? lock_chain_count+0x20/0x20 [ 267.097836][ C1] __napi_poll+0xc0/0x430 [ 267.102207][ C1] ? net_rx_action+0x307/0xa10 [ 267.107018][ C1] net_rx_action+0x4d4/0xa10 [ 267.111660][ C1] ? net_tx_action+0x880/0x880 [ 267.116467][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 267.122494][ C1] ? lock_chain_count+0x20/0x20 [ 267.127397][ C1] handle_softirqs+0x339/0x830 [ 267.132208][ C1] ? do_softirq+0x142/0x210 [ 267.136756][ C1] ? do_softirq+0x210/0x210 [ 267.141311][ C1] do_softirq+0x142/0x210 [ 267.145685][ C1] [ 267.148644][ C1] [ 267.151611][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 267.157144][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 267.163175][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 267.168502][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 267.173946][ C1] ? local_bh_enable+0x5/0x20 [ 267.178678][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 267.183923][ C1] ? _local_bh_enable+0xa0/0xa0 [ 267.188829][ C1] ip6_finish_output2+0x1127/0x1510 [ 267.194093][ C1] ? nf_hook+0x360/0x360 [ 267.198376][ C1] ? ip6_finish_output+0x64c/0x7d0 [ 267.203544][ C1] ip6_xmit+0x109b/0x16d0 [ 267.207938][ C1] ? ip6_autoflowlabel+0xd0/0xd0 [ 267.212932][ C1] ? inet6_csk_route_socket+0x5f4/0xe60 [ 267.218542][ C1] ? read_lock_is_recursive+0x10/0x10 [ 267.223981][ C1] inet6_csk_xmit+0x405/0x680 [ 267.228711][ C1] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 267.234417][ C1] ? tcp_v6_send_check+0x195/0x410 [ 267.239598][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 267.244880][ C1] ? __tcp_send_ack+0x5d0/0x5d0 [ 267.249789][ C1] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 267.255774][ C1] tcp_connect+0x2d71/0x4970 [ 267.260460][ C1] tcp_v6_connect+0x1224/0x1a30 [ 267.265378][ C1] ? tcp_v6_pre_connect+0xf0/0xf0 [ 267.270444][ C1] ? finish_lock_switch+0x12f/0x280 [ 267.275689][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 267.280940][ C1] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 267.286353][ C1] ? tcp_sendmsg_locked+0x2efa/0x3320 [ 267.291762][ C1] ? tcp_sendmsg+0x2b/0x40 [ 267.296222][ C1] ? __sys_sendto+0x46d/0x620 [ 267.300941][ C1] ? __x64_sys_sendto+0xda/0xf0 [ 267.305836][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.311962][ C1] __inet_stream_connect+0x244/0xd70 [ 267.317308][ C1] ? inet_dgram_connect+0x360/0x360 [ 267.322576][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 267.327825][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 267.333073][ C1] ? aa_sk_perm+0x910/0x910 [ 267.337632][ C1] ? mark_lock+0x94/0x320 [ 267.342004][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 267.348034][ C1] ? lock_chain_count+0x20/0x20 [ 267.352927][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 267.358957][ C1] ? tcp_free_fastopen_req+0x70/0x70 [ 267.364304][ C1] tcp_sendmsg+0x2b/0x40 [ 267.368594][ C1] __sys_sendto+0x46d/0x620 [ 267.373138][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 267.378553][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 267.383653][ C1] ? lock_chain_count+0x20/0x20 [ 267.388550][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 267.393538][ C1] __x64_sys_sendto+0xda/0xf0 [ 267.398258][ C1] do_syscall_64+0x4c/0xa0 [ 267.402708][ C1] ? clear_bhb_loop+0x30/0x80 [ 267.407424][ C1] ? clear_bhb_loop+0x30/0x80 [ 267.412144][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.418096][ C1] RIP: 0033:0x7f7f19315799 [ 267.422547][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.442191][ C1] RSP: 002b:00007f7f1756f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 267.450661][ C1] RAX: ffffffffffffffda RBX: 00007f7f1958efa0 RCX: 00007f7f19315799 [ 267.458687][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 267.466701][ C1] RBP: 00007f7f193abc99 R08: 0000200000b63fe4 R09: 000000000000001c [ 267.474712][ C1] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000000 [ 267.482725][ C1] R13: 00007f7f1958f038 R14: 00007f7f1958efa0 R15: 00007ffe77f84968 [ 267.490753][ C1] [ 267.493808][ C1] [ 267.496156][ C1] Allocated by task 9983: [ 267.500510][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 267.505398][ C1] slab_post_alloc_hook+0x4c/0x380 [ 267.510557][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 267.515887][ C1] __alloc_skb+0xf4/0x750 [ 267.520271][ C1] synproxy_send_client_synack_ipv6+0x161/0xc60 [ 267.526557][ C1] nft_synproxy_eval_v6+0x347/0x4e0 [ 267.531794][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 267.537073][ C1] nft_do_chain+0x48c/0x14f0 [ 267.541705][ C1] nft_do_chain_inet+0x25c/0x340 [ 267.546675][ C1] nf_hook_slow+0xb9/0x200 [ 267.551122][ C1] NF_HOOK+0x1f2/0x390 [ 267.555222][ C1] NF_HOOK+0x303/0x390 [ 267.559322][ C1] __netif_receive_skb+0xcc/0x290 [ 267.564384][ C1] process_backlog+0x370/0x790 [ 267.569184][ C1] __napi_poll+0xc0/0x430 [ 267.573556][ C1] net_rx_action+0x4d4/0xa10 [ 267.578186][ C1] handle_softirqs+0x339/0x830 [ 267.582986][ C1] do_softirq+0x142/0x210 [ 267.587355][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 267.592581][ C1] ip6_finish_output2+0x1127/0x1510 [ 267.597809][ C1] ip6_xmit+0x109b/0x16d0 [ 267.602173][ C1] inet6_csk_xmit+0x405/0x680 [ 267.606888][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 267.612123][ C1] tcp_connect+0x2d71/0x4970 [ 267.616748][ C1] tcp_v6_connect+0x1224/0x1a30 [ 267.621636][ C1] __inet_stream_connect+0x244/0xd70 [ 267.626962][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 267.632195][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 267.637421][ C1] tcp_sendmsg+0x2b/0x40 [ 267.641690][ C1] __sys_sendto+0x46d/0x620 [ 267.646228][ C1] __x64_sys_sendto+0xda/0xf0 [ 267.650940][ C1] do_syscall_64+0x4c/0xa0 [ 267.655392][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.661327][ C1] [ 267.663673][ C1] Freed by task 9983: [ 267.667677][ C1] kasan_set_track+0x4b/0x70 [ 267.672301][ C1] kasan_set_free_info+0x1f/0x40 [ 267.677284][ C1] ____kasan_slab_free+0xd5/0x110 [ 267.682342][ C1] slab_free_freelist_hook+0xea/0x170 [ 267.687751][ C1] kmem_cache_free+0x8f/0x210 [ 267.692464][ C1] nft_synproxy_eval_v6+0x34f/0x4e0 [ 267.697694][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 267.702927][ C1] nft_do_chain+0x48c/0x14f0 [ 267.707556][ C1] nft_do_chain_inet+0x25c/0x340 [ 267.712528][ C1] nf_hook_slow+0xb9/0x200 [ 267.716987][ C1] NF_HOOK+0x1f2/0x390 [ 267.721085][ C1] NF_HOOK+0x303/0x390 [ 267.725187][ C1] __netif_receive_skb+0xcc/0x290 [ 267.730253][ C1] process_backlog+0x370/0x790 [ 267.735052][ C1] __napi_poll+0xc0/0x430 [ 267.739408][ C1] net_rx_action+0x4d4/0xa10 [ 267.744032][ C1] handle_softirqs+0x339/0x830 [ 267.748835][ C1] do_softirq+0x142/0x210 [ 267.753203][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 267.758436][ C1] ip6_finish_output2+0x1127/0x1510 [ 267.763667][ C1] ip6_xmit+0x109b/0x16d0 [ 267.768022][ C1] inet6_csk_xmit+0x405/0x680 [ 267.772714][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 267.777927][ C1] tcp_connect+0x2d71/0x4970 [ 267.782540][ C1] tcp_v6_connect+0x1224/0x1a30 [ 267.787409][ C1] __inet_stream_connect+0x244/0xd70 [ 267.792711][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 267.798023][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 267.803238][ C1] tcp_sendmsg+0x2b/0x40 [ 267.807491][ C1] __sys_sendto+0x46d/0x620 [ 267.812012][ C1] __x64_sys_sendto+0xda/0xf0 [ 267.816736][ C1] do_syscall_64+0x4c/0xa0 [ 267.821167][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.827073][ C1] [ 267.829404][ C1] The buggy address belongs to the object at ffff888078575500 [ 267.829404][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 267.843983][ C1] The buggy address is located 128 bytes inside of [ 267.843983][ C1] 232-byte region [ffff888078575500, ffff8880785755e8) [ 267.857266][ C1] The buggy address belongs to the page: [ 267.862901][ C1] page:ffffea0001e15d40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78575 [ 267.873066][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 267.880641][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801bbe5140 [ 267.889233][ C1] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 267.897818][ C1] page dumped because: kasan: bad access detected [ 267.904252][ C1] page_owner tracks the page as allocated [ 267.909975][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5800, ts 266817300867, free_ts 266786753568 [ 267.927745][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 267.933322][ C1] __alloc_pages+0x1ee/0x480 [ 267.937934][ C1] new_slab+0xc0/0x4b0 [ 267.942028][ C1] ___slab_alloc+0x80a/0xdd0 [ 267.946634][ C1] kmem_cache_alloc_node+0x1c3/0x2d0 [ 267.951935][ C1] __alloc_skb+0xf4/0x750 [ 267.956279][ C1] nsim_dev_trap_report_work+0x2a1/0xb40 [ 267.961932][ C1] process_one_work+0x85f/0x1010 [ 267.967019][ C1] worker_thread+0xaa6/0x1290 [ 267.971728][ C1] kthread+0x436/0x520 [ 267.975828][ C1] ret_from_fork+0x1f/0x30 [ 267.980272][ C1] page last free stack trace: [ 267.984954][ C1] free_unref_page_prepare+0x637/0x6c0 [ 267.990431][ C1] free_unref_page_list+0x119/0x820 [ 267.995645][ C1] release_pages+0x186c/0x1be0 [ 268.000420][ C1] tlb_finish_mmu+0x176/0x300 [ 268.005115][ C1] exit_mmap+0x3d0/0x640 [ 268.009370][ C1] __mmput+0x115/0x3b0 [ 268.013448][ C1] exit_mm+0x588/0x6e0 [ 268.017531][ C1] do_exit+0x5a9/0x20c0 [ 268.021700][ C1] do_group_exit+0x12e/0x300 [ 268.026301][ C1] get_signal+0x6ca/0x12c0 [ 268.030731][ C1] arch_do_signal_or_restart+0xe7/0x12c0 [ 268.036388][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 268.041697][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 268.047295][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 268.052780][ C1] do_syscall_64+0x58/0xa0 [ 268.057222][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.063134][ C1] [ 268.065474][ C1] Memory state around the buggy address: [ 268.071232][ C1] ffff888078575480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 268.079315][ C1] ffff888078575500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 268.087391][ C1] >ffff888078575580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 268.095462][ C1] ^ [ 268.099542][ C1] ffff888078575600: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 268.107614][ C1] ffff888078575680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 268.115684][ C1] ================================================================== [ 268.123753][ C1] Disabling lock debugging due to kernel taint [ 268.130020][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 268.137233][ C1] CPU: 1 PID: 9983 Comm: syz.0.1538 Tainted: G B syzkaller #0 [ 268.146033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.156120][ C1] Call Trace: [ 268.159428][ C1] [ 268.162300][ C1] dump_stack_lvl+0x188/0x250 [ 268.167017][ C1] ? show_regs_print_info+0x20/0x20 [ 268.172247][ C1] ? load_image+0x400/0x400 [ 268.176784][ C1] panic+0x2e5/0x810 [ 268.180709][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 268.185237][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 268.191163][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 268.197095][ C1] ? _raw_spin_unlock+0x40/0x40 [ 268.201986][ C1] ? print_memory_metadata+0x314/0x400 [ 268.207483][ C1] ? __nft_trace_packet+0x135/0x150 [ 268.212714][ C1] check_panic_on_warn+0x80/0xa0 [ 268.217704][ C1] ? __nft_trace_packet+0x135/0x150 [ 268.222936][ C1] end_report+0x6d/0xf0 [ 268.227127][ C1] kasan_report+0x102/0x130 [ 268.231659][ C1] ? __nft_trace_packet+0x135/0x150 [ 268.236898][ C1] __nft_trace_packet+0x135/0x150 [ 268.241948][ C1] nft_do_chain+0x12a5/0x14f0 [ 268.246653][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 268.252575][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 268.257904][ C1] ? ipv6_find_tlv+0x270/0x270 [ 268.262708][ C1] nft_do_chain_inet+0x25c/0x340 [ 268.267679][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 268.272554][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 268.277526][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 268.282949][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 268.288365][ C1] ? lock_downgrade+0x770/0x830 [ 268.293259][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 268.298670][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 268.303641][ C1] nf_hook_slow+0xb9/0x200 [ 268.308094][ C1] ? ip6_input+0xa0/0xa0 [ 268.312364][ C1] NF_HOOK+0x1f2/0x390 [ 268.316459][ C1] ? ip6_input+0xa0/0xa0 [ 268.320731][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 268.325616][ C1] ? ip6_input+0xa0/0xa0 [ 268.329887][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 268.335201][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 268.340079][ C1] ? refcount_add+0x80/0x80 [ 268.344616][ C1] NF_HOOK+0x303/0x390 [ 268.348713][ C1] ? refcount_add+0x80/0x80 [ 268.353242][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 268.358125][ C1] ? refcount_add+0x80/0x80 [ 268.362656][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 268.367973][ C1] __netif_receive_skb+0xcc/0x290 [ 268.373043][ C1] process_backlog+0x370/0x790 [ 268.377851][ C1] ? rps_trigger_softirq+0x210/0x210 [ 268.383269][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 268.389291][ C1] ? lock_chain_count+0x20/0x20 [ 268.394174][ C1] __napi_poll+0xc0/0x430 [ 268.398537][ C1] ? net_rx_action+0x307/0xa10 [ 268.403351][ C1] net_rx_action+0x4d4/0xa10 [ 268.407997][ C1] ? net_tx_action+0x880/0x880 [ 268.412799][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 268.418814][ C1] ? lock_chain_count+0x20/0x20 [ 268.423714][ C1] handle_softirqs+0x339/0x830 [ 268.428517][ C1] ? do_softirq+0x142/0x210 [ 268.433058][ C1] ? do_softirq+0x210/0x210 [ 268.437601][ C1] do_softirq+0x142/0x210 [ 268.441967][ C1] [ 268.444927][ C1] [ 268.447885][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 268.453297][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 268.459324][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 268.464649][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 268.469974][ C1] ? local_bh_enable+0x5/0x20 [ 268.474680][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 268.479916][ C1] ? _local_bh_enable+0xa0/0xa0 [ 268.484819][ C1] ip6_finish_output2+0x1127/0x1510 [ 268.490060][ C1] ? nf_hook+0x360/0x360 [ 268.494334][ C1] ? ip6_finish_output+0x64c/0x7d0 [ 268.499485][ C1] ip6_xmit+0x109b/0x16d0 [ 268.503862][ C1] ? ip6_autoflowlabel+0xd0/0xd0 [ 268.508841][ C1] ? inet6_csk_route_socket+0x5f4/0xe60 [ 268.514438][ C1] ? read_lock_is_recursive+0x10/0x10 [ 268.519863][ C1] inet6_csk_xmit+0x405/0x680 [ 268.524590][ C1] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 268.530263][ C1] ? tcp_v6_send_check+0x195/0x410 [ 268.535420][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 268.540665][ C1] ? __tcp_send_ack+0x5d0/0x5d0 [ 268.545558][ C1] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 268.551405][ C1] tcp_connect+0x2d71/0x4970 [ 268.556052][ C1] tcp_v6_connect+0x1224/0x1a30 [ 268.560946][ C1] ? tcp_v6_pre_connect+0xf0/0xf0 [ 268.566005][ C1] ? finish_lock_switch+0x12f/0x280 [ 268.571235][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 268.576471][ C1] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 268.581882][ C1] ? tcp_sendmsg_locked+0x2efa/0x3320 [ 268.587289][ C1] ? tcp_sendmsg+0x2b/0x40 [ 268.591731][ C1] ? __sys_sendto+0x46d/0x620 [ 268.596443][ C1] ? __x64_sys_sendto+0xda/0xf0 [ 268.601352][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.607467][ C1] __inet_stream_connect+0x244/0xd70 [ 268.611759][ T7833] usb 6-1: USB disconnect, device number 9 [ 268.612799][ C1] ? inet_dgram_connect+0x360/0x360 [ 268.623849][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 268.629094][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 268.634328][ C1] ? aa_sk_perm+0x910/0x910 [ 268.638868][ C1] ? mark_lock+0x94/0x320 [ 268.643235][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 268.649253][ C1] ? lock_chain_count+0x20/0x20 [ 268.654150][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 268.660173][ C1] ? tcp_free_fastopen_req+0x70/0x70 [ 268.665500][ C1] tcp_sendmsg+0x2b/0x40 [ 268.669777][ C1] __sys_sendto+0x46d/0x620 [ 268.674317][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 268.679739][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 268.684815][ C1] ? lock_chain_count+0x20/0x20 [ 268.690136][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 268.695129][ C1] __x64_sys_sendto+0xda/0xf0 [ 268.699847][ C1] do_syscall_64+0x4c/0xa0 [ 268.704299][ C1] ? clear_bhb_loop+0x30/0x80 [ 268.709015][ C1] ? clear_bhb_loop+0x30/0x80 [ 268.713728][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.719663][ C1] RIP: 0033:0x7f7f19315799 [ 268.724110][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.743750][ C1] RSP: 002b:00007f7f1756f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 268.752192][ C1] RAX: ffffffffffffffda RBX: 00007f7f1958efa0 RCX: 00007f7f19315799 [ 268.760181][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 268.768167][ C1] RBP: 00007f7f193abc99 R08: 0000200000b63fe4 R09: 000000000000001c [ 268.776148][ C1] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000000 [ 268.784134][ C1] R13: 00007f7f1958f038 R14: 00007f7f1958efa0 R15: 00007ffe77f84968 [ 268.792126][ C1] [ 268.795471][ C1] Kernel Offset: disabled [ 268.799806][ C1] Rebooting in 86400 seconds..