last executing test programs: 13m22.98262463s ago: executing program 3 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x0, &(0x7f0000955000/0x4000)=nil) syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@bsdgroups}]}, 0x1, 0x988d, &(0x7f00000003c0)="$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") 13m21.084013364s ago: executing program 3 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/fscaps', 0x0, 0x42) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000600)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1, &(0x7f0000000100)=""/12, 0xc}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, 0x0, 0x4800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m15.890386576s ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0) read$msr(r2, &(0x7f00000009c0)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000002c0), 0xa7c, r3}, 0x38) 13m14.139582055s ago: executing program 3 (id=144): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./config/cluster/ocfs2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000340), 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='7', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) rmdir(&(0x7f0000000400)='./config/cluster/ocfs2/heartbeat/hb0\x00') 13m6.114528127s ago: executing program 3 (id=156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x8010001, 0x1000, 0x200004, 0x8a}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 13m3.690999315s ago: executing program 3 (id=160): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000030801020000000000000000020000021c000480080002400000000008000240000000030800"], 0xa8}, 0x1, 0x0, 0x0, 0x44010}, 0x200c0c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a3000000000640004"], 0x104}}, 0x0) setns(0xc9, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket(0x8, 0x2, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 12m48.5052337s ago: executing program 32 (id=160): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000030801020000000000000000020000021c000480080002400000000008000240000000030800"], 0xa8}, 0x1, 0x0, 0x0, 0x44010}, 0x200c0c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a3000000000640004"], 0x104}}, 0x0) setns(0xc9, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket(0x8, 0x2, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18.039315872s ago: executing program 0 (id=1267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$pppl2tp(r1, &(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x3}}, 0x2e) getpeername(r1, 0x0, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0xfdfffffe, 0xd6fe2, 0x1b3468}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d0421bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800c0001006d6163766c616e000c00028008000900010000", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r9, 0x0, 0xde}, &(0x7f0000000a80)=ANY=[@ANYBLOB="656e633d706b6373ff000000000000006861353132000000000000000000000000000000000000000000a1b9a5fe2d8f00"/63], 0x0, &(0x7f0000000b80)="fa3941b5580c6b0a62bbf545ab0198d61702c9a77c4075399ac5aae28dc42ecba7e2b54e5413b91f7885eecc9eb0896a4ff3743dbcc7d8284b212e61aab521622f73048b6ab0523a467865c45da4c6daaecfcc70808c2ebbd4abaaaa2e3530f7b70d88dafa8f8247b6cba16657cd0e55737458ce4b0bb77494ce30f0d63e3daed08992dba08a004f4126289b7eadda46526a45ec7815198e089d7636d8ea6e6a255f46536e50adc4414280263822df0d9b12491721d8a403b45c0bf74fe22ea866f13b75789d891a3c7ffb95ae1fb095ce6f07205621aa967a339e6f9558") ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) r10 = syz_open_procfs(0x0, &(0x7f0000000780)='net/unix\x00') pread64(r10, &(0x7f00000007c0)=""/172, 0xac, 0xe0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000900)={0x48, 0x2, r12}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000980)={0x28, 0x5, r12, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r11, 0x3b86, &(0x7f00000009c0)={0x18, r12}) 17.782756309s ago: executing program 0 (id=1268): syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000197c0)=0x7) socket(0x10, 0x803, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r5 = add_key$keyring(&(0x7f0000019800), &(0x7f0000019840)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, &(0x7f0000019880)={'syz', 0x1}, 0x0, 0x0, r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000019940)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000019980)={r6, r6, 0x8, 0x0, 0x0, 0x1, 0x61, 0x6, 0x1012, 0xc3, 0x2, 0x7, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019a40)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$binfmt_register(r0, &(0x7f0000019a80)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '&:\\', 0x3a, '\x00', 0x3a, './file0'}, 0x2b) syz_usb_connect(0x2, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12011001364102100900000000000000030109028afc"], 0x0) 14.432038816s ago: executing program 0 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 11.095424361s ago: executing program 4 (id=1279): r0 = syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstatfs(r0, &(0x7f0000000140)=""/160) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x8, 0x0, r4, 0x0}]) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000002c0)={0x9, @meta={0x4b31434d, 0x478fd8d0, 0x98da, 0xbc08, 0x5c99631d}}) r7 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, 0x0) add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.975751914s ago: executing program 2 (id=1280): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8080003, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000680)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000c00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x4000) mknod(&(0x7f0000000d80)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./tracing\x00', &(0x7f0000000e40)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r5, &(0x7f0000000ec0)='r:s/p ./file0:0', 0xf) creat(&(0x7f0000000f00)='./tracing/uprobe_events\x00', 0x120) semctl$IPC_RMID(0x0, 0x0, 0x0) 9.392122918s ago: executing program 2 (id=1281): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0xc0000000}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) lseek(r6, 0xfffffffffffffff5, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90010"], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) io_setup(0xc, 0x0) r7 = timerfd_create(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) 9.063605212s ago: executing program 4 (id=1282): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) setns(0xc9, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f00000000c0)="beea89f2c97ecaba2e3f19191e278f3a8fdd", 0x12) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0xb19, &(0x7f0000000040)={0x0, 0xa90d, 0x4, 0x4, 0x127}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000014000c800d0001007564703a73797a32000000"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4', 0xc) 8.01606298s ago: executing program 4 (id=1283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000300)=""/152}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) syz_open_dev$sndpcmp(0x0, 0x1, 0x2) setrlimit(0x9, &(0x7f00000007c0)={0x33, 0x81}) io_setup(0x4, &(0x7f0000000800)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000880)=@req3={0x0, 0x1, 0xd, 0x2, 0xc, 0x9, 0xfff}, 0x1c) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r2, &(0x7f0000000940), &(0x7f0000000980)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="b0", 0x1}], 0x11}}], 0x2, 0x1) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000080)={0x2, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @remote}}}, 0x108) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0xd07, 0x70bd2b, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x8200, 0x4602}, [@IFLA_LINKMODE={0x5}, @IFLA_IFALIAS={0x14, 0x14, 'batadv_slave_1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x4000080) 7.82801787s ago: executing program 1 (id=1284): syz_open_dev$loop(&(0x7f0000000040), 0x200000002, 0x400) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0x1, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) socket$kcm(0x10, 0x3, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000380)}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000406030000000000000000e3ff0000000500010007000000"], 0x1c}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=r8, @ANYRES16=r2], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4004801) r9 = userfaultfd(0x80801) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x7) r11 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(0xffffffffffffffff, 0x0, r11, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 7.53664881s ago: executing program 2 (id=1285): r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x16) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04060204"], 0x7) read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) read(r1, &(0x7f0000000440)=""/90, 0x5a) bind$can_j1939(r1, &(0x7f00000004c0)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000500)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="050000eb3a49a8d125", 0x9}], 0x1}}], 0x1, 0x40000c1) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000240)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f00000002c0)={@local, 0x7}) read(r4, &(0x7f0000000080)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x2, {0x1, 0x3, 0x8b2c, 0x3, 0x2c3}}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, 0x0) tkill(r3, 0x7) r6 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r6, 0x0) ioprio_get$pid(0x2, r3) ftruncate(r6, 0x3) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) tkill(r3, 0x2e) fcntl$setlease(r0, 0x400, 0x1) 7.399620504s ago: executing program 1 (id=1286): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d40)={'bond0\x00'}) r4 = add_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000004c0)="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", 0x52f, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000d00), 0x4) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000ac0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, r9, 0x1, 0x74bd2c, 0x25dfcbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x840, &(0x7f0000000200), 0x4, 0x97d7, &(0x7f000001fa80)="$eJzs3AncpXPhuP/zzJgx9jFUUmqqUVpkzRJlZjBDIVmiHSWpqKSizbRIaaOU9pIsKVEolKVdKUtaKCFUskRabMP8X8/MM4xx2f79+o5c19Xrec4597nP/XzO531/7vPMNC/bT9t66mAwbjCniYP5O+3C6TPHn7/FNYfttPSRqx13w4F33nHS5JHbKSO3UweDwaiRp4fmbJswOP6EUYOFZm+/o8UWWXRoicFg9ZGHI8cZrD3nZolz5+43a77mH+jQHd/2n/M1u6WGf8TwnS8duO+hg8Fg/DyvHxoMhmbc5Y1K237K9Gl3WN3uNmw1ZuT+vF9j53wtceZgsMSJAz4/5t13aAG8peGfOeNJp47ZYgH87P+5tp8yfdP5/IfX4uiRbWsPr/H516Cx+c/zq1bcYd2RKZx9vg0Gw5e4O62V/4m2nzJts8HdX+cHh613xv6z5lw3Fx7M+aBYZDAYLDpyfV18QbvUf9aUqWvM/sye+3iEfe65PIPOi6+95Jjbhj+kB4PBMoPBhE3mfhZUVVXV/0ZTpq6xIXz+j7unz/9jj13+xD7/q6qq/nfbdMrUNYY/6+f7/F/8nj7/91j+p++a83f/k9ee86rbFuybqKqqqvvVtE3x83/8PX3+r73h2Zv1+V9VVfW/21abz/78X3y+z/9l7+nz/4XHrLfCyH5zf2+4dZ5DDs3z/yfcMs/20fNsv3me7WPmOc68+4+dZ/uN82xfePg52H/iYDBh7r8XnHnH5gkTh58b2X7TPNsn3/HvdCZtNM/2KfNsnzbP9qkjYx3ePn2e7dNH9j/rM4NJm9zzbFdVVT0w2mqNaRsO5vl39iObl5v7PH3+f++ki1ZeUOOtqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq/81uu+bkUweDwdBgMBg1GMwcjNyf93Ywa9asWcOPjz39nHMW2EAfGA2dduH0mePP3+Kaw3Za+sjVjrvhwDtm6X+2//13UP9Jw/7jjpo4GOy+7YIeSi2AWv/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7rZrTj515BwYNRjMHIzcnzH39qQDXvCikV3X3e646z5xxysnTd515N5pF06fuesCGPsCaGj4vY4/f4trDttp6SNXO+6GAx8Eq+d//x3Uf9Js/12HBoOR9T1+eC1vMWWrbVYaDAafuO647dYa3P7cOsPPrTdh9GD07JeuNPv7xpP4wDM2mXM7efjbsrcf49jZx9901iGjh+YbxDw947RLD3vl9jesOf/tE+7+fYyae+fQi791/axZs2bdaeNI4+7mxXOPP/e9zL/OR8a+0vDYV9lzt9et8oa937LyrrvtuMvOu+y8+2prrLPmWquvtta6T1vlFbu+ZudV53y/y5zN+dkTZ3/f8L7M2eLzz9k1U+ads/nf293N2cR7nrPZR5z5lqFt5s7ZQvdzzja85zmbuOvID5o0ecxgh9lTMzQYTNpozGCv4QerLTwYTNp4ZN/lhvddf8KoweCAO97o8L2Fbz8Hh2YM77P9tK2n3jGyu77Du1yn77TjpMkjt1NGbqfOGeLEwR2n4oTB8SeMGp6LO03zYossOrTEYLD6yMOR4wzWHXn2i3P3mzVf8w906I5v+8/5mt1SwwcZvvOqVU++YHgtzvf6/0b/v67/d/FaZ+j2iRoa+RrZZ47XlOmb3vGzZk/D8NyNHtm29rDJ/HP2/7K7jHfiQoPx9zDeaZtOXWN483zzP/cleH5du+IZb51zbk1ee86rbvv/jULjXfwexrvpFBzv4vc03qPedtYJcw71/2y8830+bDb7++T7cq0b3PO1bjQdYOdfrDD/te7Zdz/EO63juXO08Hw73d21bq+DV58xfPzJ93yt22x47GPudK0bNRhM2nDutW74wjdtzOCA4QerDz+YPmZw5PCDNWY/WGRw+vCDp77sta95+fCGTebOyarDx508YWi2+xlrX/mEWR+bNWujkbFMnnDnsY6cHxPn/TyfMmHOZM597dzjDu8697hXPGzOc9NGjjvlfhx37mtpvNctNee56SPHnTrfccfcw3HnvvYu62GlodsvXHdzvZk23/Vm5M84c3/cnb7Gzvla4szBYIkTyXe+fe/1mknrd9w9jHfK1DU2HB7ffOv39tOR1u9Z088f/qxYYjAYLDMYTNhk7tjvZ0N3N96F7nm8U2G8C93TeH/5ld02/38w3sE8473Tebb9VnPOlU1GzrPp9+P8nfvaea9jYwajZ58scy/7m9yX69jEu1zH3jl61HyTPU939zvby2H/OfeXu+P33Au/fsTcuR8z33Hv7Xe2ed7LEFzHxs/35/lRm1wyGKI5n3HU+mcPHXTPcz5mcOc/W8yd87mvnf+zY945n35f5vyR9zzn9/X35JUeN+f5MfONf9453/KDj/jA3DkfO99x723Op9/zZ8dd53zyYAzN+ao3z5m3e7qe3t2cz33t3DkffovrTVhosPHwZ9bInE+7L3O+3P+b83xR2H/O/Z1v33TKYcc9b+6czz/H9zbn0+7vnE+8/TyfNPu5x44ajB072GvHPffcY7U53+c+XH3Od74W3XjhnHm+p8/SuzOa+9p7Whcb3Rej8ffJaOjejJZf6O6M7lhaX37tHg/9/3st2uj+Gg34WnT+EXPm7Z5+L7q7OZ/7WvocXHae18//59CtNp/9e/fi830Ozn0Jfg6ectJm+8095MjLbp1vmHM/V2+ZZ/voebbfPM/2MfMcZ979x86z/cZ5tg+/hbHz7D+XdeLwn3lHts+8Y/cJw788TRzZftM82yff8dpJG82zfco826fNs33qHafGpOnzbJ8+z/6bDO5nc/9Oetf5L/J1X+vvf93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd3e//GfNmjXrvzeUWgC1/t3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i7vtmpNPHTkHRg0GMwdz7g+N3A5mDG159QbDt4PBYMzaR8/ackGPdwE3dNqF02eOP3+Law7baekjVzvuhgMfBKvnf/8d1H/SbP9dhwaDkfU9ftfBYLDFlK22WWkwGGw56+i1Rw1uf2654efWnzBqMDhg6E4HWPj2fYZmDO+z/bStpw4G40b2mHiXH3qXdXSnHSdNHrmdMnI7dc71aeLgjvN1wuD4E0YNFpq9/Y4WW2TRoSUGg9VHHo4cZ7D2nJslzp2736z5mn+gQ3d823/O1+yWGv4Rw3f22mX6o4bnar7XP2Cae63eddS97tr6d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bu7f/6dLQ+2EnWXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93999/kf/KOGrB1Pp3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL39399p86678zkFogtf7d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jbrjn51JFzYNRgMHMw5/7QjJHbwdAxxz9x5BQZs/d5hx+yoMe7gBs67cLpM8efv8U1h+209JGrHXfDgQ+C1fO//w7qP2m2/65Dg8HI+h6/62Aw2GLKVtusNBgMDjn8vL1HDW5/brnh59afMGowOGDoTgdY+PZ9hmYM77P9tK2nDgbjRvaYeJcfepd1dKcdJ00euZ0ycjt1zvVp4uCO83XC4PgTRg0Wmr39jhZbZNGhJQaD1UcejhxnsPacmyXOnbvfrPmaf6BDd3zbf87X7JYa/hHDd/Zd/MJjhudqvtc/YJp7rd511L3u2vp3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cbddc/KpI+fAqMFg5mDO/VEjt0MzLr/sHdsM3w4/XnqT/S5c0ONdwA2dduH0mePP3+Kaw3Za+sjVjrvhwAfB6vnffwf1nzTsP+6oiYPB7tsu6KHUAqj17y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vf3X30X+S/PY5aMLX+3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uNuuOfnUkbuj7tg6akbnBTZ02oXTZ44/f4trDttp6SNXO+6GAxf0gP7T7sb/nfljFv935Y9Z/N+dP2bxf0/+mMV/3/yxVUcm6cHu/978Mcv63y9/7MHsP0+j3pc/9mD2n3f9vz9/zOK/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/wPyxyz+B+aPWfw/mj9m8f9Y/pjF/6D8MYv/x/PHLP6fyB+z+B+cP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/kPwxi/+X8scs/ofmj1n8v5w/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+v5I9Z/I/KH7P4fzV/zOL/tfwxi//R+WMW/6/nj1n8j8kfs/gfmz9m8f9G/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4fyt/zOL/7fwxi/+J+WMW/5Pyxyz+J+ePWfy/kz9m8f9u/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5c/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/zPyxyz+P80fs/j/LH/M4n9m/pjF/+f5Yxb/X+SPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+X+WMW//Pyxyz+v8ofs/j/+i7+o/9vx/UAzeL/m9Y/ZvH/bf6Yxf/8/DGL/wX5Yxb/3+WPWfx/nz9m8b8wf8zi/4f8MYv/RfljFv+L88cs/pfkj1n8/5g/ZvG/NH/M4n9Z/pjF//L8MYv/n/LHLP5/zh+z+P8lf8zif0X+mMX/r/ljFv8r88cs/lflj1n8r84fs/hfkz9m8f9b/pjF/9r8MYv/dfljFv+/549Z/K/PH7P4/yN/zOL/z/wxi/+/8scs/v/OH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv+Z+WMW/1vzxyz+t+WPWfxn5Y9J/Gf/x17zv2sW/6H8MYv/qPwxi//o/DGL/0L5Yxb/MfljFv+x+WMW/4Xzxyz+4/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r+E1X/UPT9t8V/S6n8vWfyXyh+z+I/PH7P4L50/ZvGfkD9m8V8mf8ziv2z+mMX/IfljFv+H5o9Z/B+WP2bxXy5/zOL/8Pwxi//y+WMW/0fkj1n8H5k/ZvFfIX/M4v+o/DGL/6Pzxyz+E/PHLP6PyR+z+D82/7u00Mitwf9x+WOW9T8pf8ziv2L+mMX/8fljFv8n5I9Z/FfKH7P4PzF/zOL/pPwxi/+T88cs/k/JH7P4r5w/ZvF/av6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvF/Wv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/J+eP2bxXy9/zOK/fv6Yxf8Z+WMW/2fmj1n8N7iP/mP+W+N6gGbxn9z6xyz+U/LHLP5T88cs/hvmj1n8N8ofs/hvnD9m8Z+WP2bxn67yH32f97T4b6Lyv+9Z/DfNH7P4Pyt/zOL/7Pwxi/9m+WMW/83zxyz+W+SPWfyfkz9m8d8yf8zi/9z8MYv/VvljFv+t88cs/tvkj1n8t80fs/g/L3/M4r9d/pjFf/v8MYv/8/PHLP4vyB+z+L8wf8zi/6L8MYv/i/PHLP4vyR+z+L80f8ziv0P+mMV/x/wxi/9O+WMW/5flj1n8X54/ZvHfOX/M4v+K/DGL/y75Yxb/V+aPWfx3zR+z+L8qf8zi/+r8MYv/a/LHLP675Y9Z/HfPH7P4v/Ze/Mf9t8f1AM3i/7rWP2bxf33+mMV/j/wxi/8b8scs/nvmj1n835g/ZvF/U/6Yxf/N+WMW/73yxyz+e+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d8nf8ziPyN/zOL/zvwxi/+78scs/u/OH7P4vyd/zOK/b/6Yxf+9+WMW//3yxyz+78sfs/i/P/+7NDT8P4n//vljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljD0b/o0fuzuv/kfyxB6M/rf8D8scs/gfmj1n8P5o/ZvH/WP6Yxf+g/DGL/8fzxyz+n8gfs/gfnD9m8f9k/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/5D8MYv/l/LHLP6H5o9Z/L+cP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/r+SPWfyPyh+z+H81f8zi/7X8MYv/0fljFv+v549Z/I/JH7P4H5s/ZvH/Rv6Yxf+b+WMW/+Pyxyz+x+ePWfxPyB+z+H8rf8zi/+38MYv/ifljFv+T8scs/ifnj1n8v5M/ZvH/bv6Yxf+U/DGL/6n5z+6g0Xd+bPE/LX/M4n96/pjF/3v5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8T8jf8zi/9P8MYv/z/LHLP5n5o9Z/H+eP2bx/0X+mMX/rPwxi//Z+WMW/3PyH26R+TdY/M/NH7P4/zJ/zOJ/Xv6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf/8/DGL/wX5Yxb/3+WPWfx/nz9m8b8wf8zi/4f8MYv/RfljFv+L88cs/pfkj1n8/5g/ZvG/NH/M4n9Z/pjF//L8MYv/n/LHLP5/zh+z+P8lf8zif0X+mMX/r/ljFv8r88cs/lflj1n8r84fs/hfkz9m8f9b/pjF/9r8MYv/dfljFv+/549Z/K/PH7P4/yN/zOL/z/wxi/+/8scs/v/OH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv+Z+WMW/1vzxyz+t+WPWfxn5Y9J/Bca5I9Z/Ifyxyz+o/LHLP6j88cs/gvlj1n8x+SPWfzH5o9Z/BfOH7P4j8sfs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfzH549Z/JfOH7P4T8gfs/gvkz9m8V82f8zi/5D8MYv/Q/PHLP4Pyx+z+C+XP2bxf3j+mMV/+fwxi/8j8scs/o/MH7P4r5A/ZvF/VP6Yxf/R+WMW/4n5Yxb/x+SPWfwfmz9m8X9c/pjFf1L+mMV/xfwxi//j88cs/k/IH7P4r5Q/ZvF/Yv6Yxf9J+WMW/yfnj1n8n5I/ZvFfOX/M4v/U/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v+0/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4Pz1/zOK/Xv6YxX/9/DGL/zPyxyz+z8wfs/hvkD9m8Z+cP2bxn5I/ZvGfmj9m8d8wf8ziv1H+mMV/4/wxi/+0/DGL//T8MYv/JvljFv9N88cs/s/KH7P4Pzt/zOK/mdB/g/uwj8V/c6H/fcniv0X+mMX/OfljFv8t88cs/s8dnJM/ZPHfqvWPWfy3zh+z+G+TP2bx3zZ/zOL/vPwxi/92+WMW/+3zxyz+z88fs/i/IH/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4v/S/DGL/w75Yxb/HfPHLP475Y9Z/F+WP2bxf3n+mMV/5/wxi/8r8scs/rvkj1n8X5k/ZvHfNX/M4v+q/DGL/6vzxyz+r8kfs/jvlj9m8d89f8zi/9r8MYv/6/LHLP6vzx+z+O+RP2bxf0P+mMV/z/wxi/8b88cs/m/KH7P4vzl/zOK/V/6YxX/v/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+++SPWfxn5I9Z/N+ZP2bxf1f+mMX/3fljFv/35I9Z/PfNH7P4vzd/zOK/X/6Yxf99+WMW//fnj1n8988fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4n9A/pjF/8D8MYv/R/PHLP4fyx+z+B+UP2bx/3j+mMX/E/ljFv+D88cs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4H5I/ZvH/Uv6Yxf/Q/DGL/5fzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOL/lfwxi/9R+WMW/6/mj1n8v5Y/ZvE/On/M4v/1/DGL/zH5Yxb/Y/PHLP7fyB+z+H8zf8zif1z+mMX/+Pwxi/8J+WMW/2/lj1n8v50/ZvE/MX/M4n9S/pjF/+T8MYv/d/LHLP7fzR+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL//fyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9G/pjF/6f5Yxb/n+WPWfzPzB+z+P88f8zi/4v8MYv/WfljFv+z88cs/ufkj1n8z80fs/j/Mn/M4n9e/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF//z8MYv/BfljFv/f5Y9Z/H+fP2bxvzB/zOL/h/wxi/9F+WMW/4vzxyz+l+SPWfz/mD9m8b80f8zif1n+mMX/8vwxi/+f8scs/n/OH7P4/yV/zOJ/Rf6Yxf+v+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bx/1v+mMX/2vwxi/91+WMW/7/nj1n8r88fs/j/I3/M4v/P/DGL/7/yxyz+/84fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/5n5Yxb/W/PHLP635Y9Z/Gflj0n8xwzyxyz+Q/ljFv9R+WMW/9H5Yxb/hfLHLP5j8scs/mPzxyz+C+ePWfzH5Y9Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/uPzxyz+S+ePWfwn5I9Z/JfJH7P4L5s/ZvF/SP6Yxf+h+WMW/4flj1n8l8sfs/g/PH/M4r98/pjF/xH5Yxb/R+aPWfxXyB+z+D8qf8zi/+j8MYv/xPwxi/9j8scs/o/NH7P4Py5/zOI/KX/M4r9i/pjF//H5Yxb/J+SPWfxXyh+z+D8xf8zi/6T8MYv/k/PHLP5PyR+z+K+s8h93n/e0+D9V5X/fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+T8sfs/ivlT9m8V87f8ziv07+mMV/3fwxi//T88cs/uvlj1n8188fs/g/I3/M4v/M/DGL/wb5Ywr/sYMxk/PHFP6DwZgp+WMW/6n5Yxb/DfPHLP4b5Y9Z/DfOH7P4T8sfs/hPzx+z+G+SP2bx3zR/zOL/rPwxi/+z88cs/pvlj1n8N88fs/hvcS/+o/7b43qAZvF/Tusfs/hvmT9m8X9u/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8n5c/ZvHfLn/M4r99/pjF//n5Yxb/F+SPWfxfmD9m8X9R/pjF/8X5Yxb/l+SPWfxfmj9m8d8hf8ziv2P+mMV/p/wxi//L8scs/i/PH7P475w/ZvF/Rf6YxX+X/DGL/yvzxyz+u+aPWfxflT9m8X91/pjF/zX5Yxb/3fLHLP67549Z/F+bP2bxf13+mMX/9fljFv898scs/m/IH7P475k/ZvF/Y/6Yxf9N+WMW/zfnj1n898ofs/jvnT9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf5/8MYv/jPwxi/8788cs/u/KH7P4vzt/zOL/nvwxi/+++WMW//fmj1n898sfs/i/L3/M4v/+/DGL//75Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfwPyB+z+B+YP2bx/2j+mMX/Y/ljFv+D8scs/h/PH7P4fyJ/zOJ/cP6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/0Pyxyz+X8ofs/gfmj9m8f9y/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8v5I/ZvE/Kn/M4v/V/DGL/9fyxyz+R+ePWfy/nj9m8T8mf8zif2z+mMX/G/ljFv9v5o9Z/I/LH7P4H58/ZvE/IX/M4v+t/DGL/7fzxyz+J+aPWfxPyh+z+J+cP2bx/07+mMX/u/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9e/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfzPyB+z+P80f8zi/7P8MYv/mfljFv+f549Z/H+RP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/X+aPWfzPyx+z+P8qf8zi/+v8MYv/b/LHLP6/zR+z+J+fP2bxvyB/zOL/u/wxi//v88cs/hfmj1n8/5A/ZvG/KH/M4n9x/pjF/5L8MYv/H/PHLP6X5o9Z/C/LH7P4X54/ZvH/U/6Yxf/P+WMW/7/kj1n8r8gfs/j/NX/M4n9l/pjF/6r8MYv/1fljFv9r8scs/n/LH7P4X5s/ZvG/Ln/M4v/3/DGL//X5Yxb/f+SPWfz/mT9m8f9X/pjF/9/5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4j8zf8zif2v+mMX/tvwxi/+s/DGJ/9hB/pjFfyh/zOI/Kn/M4j86f8ziv1D+mMV/TP6YxX9s/pjFf+H8MYv/uPwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX98/pjFf+n8MYv/hPwxi/8y+WMW/2Xzxyz+D8kfs/g/NH/M4v+w/DGL/3L5Yxb/h+ePWfyXzx+z+D8if8zi/8j8MYv/CvljFv9H5Y9Z/B+dP2bxn5g/ZvF/TP6Yxf+x+WMW/8flj1n8J+WPWfxXzB+z+D8+f8zi/4T8MYv/SvljFv8n5o9Z/J+UP2bxf3L+mMX/KfljFv+V88cs/k91+Y+6rzta/Fdx+d/nLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/2n5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvF/ev6YxX+9/DGL//r5Yxb/Z+SPWfyfmT9m8d8gf8ziPzl/zOI/JX/M4j81f8ziv2H+mMV/o/wxi//G+WMW/2n5Yxb/6fljFv9N8scs/pvmj1n8n5U/ZvF/dv6YxX+z/DGL/+b5Yxb/LfLHLP7PyR+z+G+ZP2bxf27+mMV/q/wxi//W+WMW/23yxyz+2+aPWfyflz9m8d8uf8ziv33+mMX/+fljFv8X5I9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/F+aP2bx3yF/zOK/Y/6YxX+n/DGL/8vyxyz+L88fs/jvnD9m8X9F/pjFf5f8MYv/K/PHLP675o9Z/F+VP2bxf3X+mMX/NfljFv/d8scs/rvnj1n8X5s/ZvF/Xf6Yxf/1+WMW/z3yxyz+b8gfs/jvmT9m8X9j/pjF/035Yxb/N+ePWfz3yh+z+O+dP2bxf0v+mMX/rfljFv+35Y9Z/N+eP2bxf0f+mMV/n/wxi/+M/DGL/zvzxyz+78ofs/i/O3/M4v+e/DGL/775Yxb/9+aPWfz3yx+z+L8vf8zi//78MYv//vljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/A/IH7P4H5g/ZvH/aP6Yxf9j+WMW/4Pyxyz+H88fs/h/In/M4n9w/pjF/5P5Yxb/T+WPWfw/nT9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4tq/4Pv9hmL/yFq/7vP4v+l/DGL/6H5Yxb/L9+T/5j/g3E9QLP4H9b6xyz+h+ePWfyPyB+z+B+ZP2bx/0r+mMX/qPwxi/9X88cs/l/LH7P4H50/ZvH/ev6Yxf+Y/DGL/7H5Yxb/b+SPWfy/mT9m8T8uf8zif3z+mMX/hPwxi/+38scs/t/OH7P4n5g/ZvE/KX/M4n9y/pjF/zv5Yxb/7+aPWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf97+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvE/I3/M4v/T/DGL/8/yxyz+Z+aPPZj952nsz/PHHsz+867/X+SPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+X+WMW//Pyxyz+v8ofs/j/On/M4v+b/DGL/2/zxyz+5+ePWfwvyB+z+P8uf8zi//v8sQe3/7i5W8demD/24Pa/vbF/yB+z+F+UP2bxvzh/zOJ/Sf6Yxf+P+WMW/0vzxyz+l+WPWfwvzx+z+P8pf8zi/+f8MYv/X/LHLP5X5I9Z/P+aP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX3zX/IdpJY/P/W+scs/tfmj1n8r7P6L3LPT1v8/271v5cs/tfnj1n8/5E/ZvH/Z/6Yxf9f+WMW/3/nj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi//M/DGL/635Yxb/2/LHLP6z8sck/gsP8scs/kP5Yxb/UfljFv/R+WMW/4Xyxyz+Y/LHLP5j88cs/gvnj1n8x+WPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP7j88cs/kvnj1n8J+SPWfyXyR+z+C+bP2bxf0j+mMX/ofljFv+H5Y9Z/JfLH7P4Pzx/zOK/fP6Yxf8R+WMW/0fmj1n8V8gfs/g/Kn/M4v/o/DGL/8T8MYv/Y/LHLP6PzR+z+D8uf8ziPyl/zOK/Yv6Yxf/x+WMW/yfkj1n8V8ofs/g/MX/M4v+k/DGL/5Pzxyz+T8kfs/ivnD9m8X9q/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8X9a/pjFf638MYv/2vljFv918scs/uvmj1n8n54/ZvFfL3/M4r9+/pjF/xn5Yxb/Z+aPWfw3yB+z+E/OH7P4T8kfs/hPzR+z+G+YP2bx3yh/zOK/cf6YxX9a/pjFf3r+mMV/k/wxi/+m+WMW/2fN73/z//G4HqBZ/J/d+scs/pvlj1n8N88fs/hvkT9m8X9O/pjFf8v8MYv/c/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+8/DGL/3b5Yxb/7fPHLP7Pzx+z+L8gf8zi/8L8MYv/i/LHLP4vzh+z+L8kf8zi/9L8MYv/DvljFv8d88cs/jvlj1n8X5Y/ZvF/ef6YxX/n/DGL/yvyxyz+u+SPWfxfmT9m8d81f8zi/6r8MYv/q/PHLP6vyR+z+O+WP2bx3z1/zOL/2vwxi//r8scs/q/PH7P475E/ZvF/Q/6YxX/P/DGL/xvzxyz+b8ofs/i/OX/M4r9X/pjFf+/8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP775I9Z/Gfkj1n835k/ZvF/V/6Yxf/d+WMW//fkj1n8980fs/i/N3/M4r9f/pjF/335Yxb/9+ePWfz3zx+z+H8gf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zif0D+mMX/wPwxi/9H88cs/h/LH7P4H5Q/ZvH/eP6Yxf8T+WMW/4Pzxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/gfkj9m8f9S/pjF/9D8MYv/l/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v+V/DGL/1H5Yxb/r+aPWfy/lj9m8T86f8zi//X8MYv/MfljFv9j88cs/t/IH7P4fzN/zOJ/XP6Yxf/4/DGL/wn5Yxb/b+WPWfy/nT9m8T8xf8zif1L+mMX/5Pwxi/938scs/t/NH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/9/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif0b+mMX/p/ljFv+f5Y9Z/M/MH7P4/zx/zOL/i/wxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+P8yf8zif17+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX//Pwxi/8F+WMW/9/lj1n8f58/ZvG/MH/M4v+H/DGL/0X5Yxb/i/PHLP6X5I9Z/P+YP2bxvzR/zOJ/Wf6Yxf/y/DGL/5/yxyz+f84fs/j/JX/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvH/W/6Yxf/a/DGL/3X5Yxb/v+ePWfyvzx+z+P8jf8zi/8/8MYv/v/LHLP7/zh+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/mfljFv9b88cs/rflj1n8Z+WPSfzHDfLHLP5D+WMW/1H5Yxb/0fljFv+F8scs/mPyxyz+Y/PHLP4L549Z/Mflj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+4/PHLP5L549Z/Cfkj1n8l8kfs/gvmz9m8X9I/pjF/6H5Yxb/h+WPWfyXyx+z+D88f8ziv3z+mMX/EfljFv9H5o9Z/FfIH7P4Pyp/zOL/6Pwxi//E/DGL/2Pyxyz+j80fs/g/Ln/M4j/pvviP/i+O6wGaxX/F1j9m8X98/pjF/wn5Yxb/lfLHLP5PzB+z+D8pf8zi/+T8MYv/U/LHLP4r549Z/J+aP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/J+WP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/p+ePWfzXyx+z+K+fP2bxf0b+mMX/mfljFv8N8scs/pPzxyz+U/LHLP5T88cs/hvmj1n8N8ofs/hvnD9m8Z+WP2bxn54/ZvHfJH/M4r9p/pjF/1n5Yxb/Z+ePWfw3yx+z+G+eP2bx3yJ/zOL/nPwxi/+W+WMW/+fmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/efljFv/t8scs/tvnj1n8n58/ZvF/Qf6Yxf+F+WMW/xflj1n8X5w/ZvF/Sf6Yxf+l+WMW/x3yxyz+O+aPWfx3yh+z+L8sf8zi//L8MYv/zvljFv9X5I9Z/HfJH7P4vzJ/zOK/a/6Yxf9V+WMW/1fnj1n8X5M/ZvHfLX/M4r97/pjF/7X5Yxb/1+WPWfxfnz9m8d8jf8zi/4b8MYv/nvljFv835o9Z/N+UP2bxf/Md/mMWyLgeoFn892r9Yxb/vfPHLP5vyR+z+L81f8zi/7b8MYv/2/PHLP7vyB+z+O+TP2bxn5E/ZvF/Z/6Yxf9d+WMW/3fnj1n835M/ZvHfN3/M4v/e/DGL/375Yxb/9+WPWfzfnz9m8d8/f8zi/4H8MYv/BxfUeB7gWfw/1PrHLP4fzh+z+H8kf8zif0D+mMX/wPwxi/9H88cs/h/LH7P4H5Q/ZvH/eP6Yxf8T+WMW/4Pzxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/gfkj9m8f9S/pjF/9D8MYv/l/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v+V/DGL/1H5Yxb/r+aPWfy/lj9m8T86f8zi//X8MYv/MfljFv9j88cs/t/IH7P4fzN/zOJ/XP6Yxf/4/DGL/wn5Yxb/b+WPWfy/nT9m8T8xf8zif1L+mMX/5Pwxi/938scs/t/NH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/9/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif0b+mMX/p/ljFv+f5Y9Z/M/MH7P4/zx/zOL/i/wxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+P8yf8zif17+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX//Pwxi/8F+WMW/9/lj1n8f58/ZvG/MH/M4v+H/DGL/0X5Yxb/i/PHLP6X5I9Z/P+YP2bxvzR/zOJ/Wf6Yxf/y/DGL/5/yxyz+f84fs/j/JX/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvH/W/6Yxf/a/DGL/3X5Yxb/v+ePWfyvzx+z+P8jf8zi/8/8MYv/v/LHLP7/zh+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/mfljFv9b88cs/rflj1n8Z+WPSfwXGeSPWfyH8scs/qPyxyz+o/PHLP4L5Y9Z/Mfkj1n8x+aPWfwXzh+z+I/LH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8x+ePWfyXzh+z+E/IH7P4L5M/ZvFfNn/M4v+Q/DGL/0Pzxyz+D8sfs/gvlz9m8X94/pjFf/n8MYv/I/LHLP6PzB+z+K+QP2bxf1T+mMX/0fljFv+J+WMW/8fkj1n8H5s/ZvF/XP6YxX9S/pjFf8X8MYv/4/PHLP5PyB+z+K+UP2bxf2L+mMX/SfljFv8n549Z/J+SP2bxXzl/zOL/1Pwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/tPwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+D89f8ziv17+mMV//fwxi/8z8scs/s/MH7P4b5A/ZvGfnD9m8Z+SP2bxn5o/ZvHfMH/M4r9R/pjFf+P8MYv/tPn9x/wfj+sBmsV/eusfs/hvkj9m8d80f8zi/6z8MYv/s/PHLP6b5Y9Z/DfPH7P4b5E/ZvF/Tv6YxX/L/DGL/3Pzxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/vPwxi/92+WMW/+3zxyz+z88fs/i/IH/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4v/S/DGL/w75Yxb/HfPHLP475Y9Z/F+WP2bxf3n+mMV/5/wxi/8r8scs/rvkj1n8X5k/ZvHfNX/M4v+q/DGL/6vzxyz+r8kfs/jvlj9m8d89f8zi/9r8MYv/6/LHLP6vzx+z+O+RP2bxf0P+mMV/z/wxi/8b88cs/m/KH7P4vzl/zOK/V/6YxX/v/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+++SPWfxn5I9Z/N+ZP2bxf1f+mMX/3fljFv/35I9Z/PfNH7P4vzd/zOK/X/6Yxf99+WMW//fnj1n8988fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4n9A/pjF/8D8MYv/R/PHLP4fyx+z+B+UP2bx/3j+mMX/E/ljFv+D88cs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4H5I/ZvH/Uv6Yxf/Q/DGL/5fzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOL/lfwxi/9R+WMW/6/mj1n8v5Y/ZvE/On/M4v/1/DGL/zH5Yxb/Y/PHLP7fyB+z+H8zf8zif1z+mMX/+Pwxi/8J+WMW/2/lj1n8v50/ZvE/MX/M4n9S/pjF/+T8MYv/d/LHLP7fzR+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL//fyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9G/pjF/6f5Yxb/n+WPWfzPzB+z+P88f8zi/4v8MYv/WfljFv+z88cs/ufkj1n8z80fs/j/Mn/M4n9e/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF//z8MYv/BfljFv/f5Y9Z/H+fP2bxvzB/zOL/h/yxO/uPWdDD+c+7G/+L8scs6//i/DGL/yX5Yxb/P+aPWfwvzR+z+F+WP2bxvzx/zOL/p/wxi/+f88cs/n/JH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/P+WP2bxvzZ/zOJ/Xf6Yxf/v+WMW/+ul/qPv5XmL/z+k/veWxf+f+WMW/3/lj1n8/50/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/jPzxyz+t+aPWfxvyx+z+M/KH5P4LzrIH7P4D+WPWfxH5Y9Z/Efnj1n8F8ofs/iPyR+z+I/NH7P4L5w/ZvEflz9m8V8kf8ziv2j+2IPff9ztT+V/1x78/rNbdPH8MYv/EvljFv8l88cs/kvlj1n8x+ePWfyXzh+z+E/IH7P4L5M/ZvFfNn/M4v+Q/DGL/0Pzxyz+D8sfs/gvlz9m8X94/pjFf/n8MYv/I/LHLP6PzB+z+K+QP2bxf1T+mMX/0fljFv+J+WMW/8fkj1n8H5s/ZvF/XP6YxX9S/pjFf8X8MYv/4/PHLP5PyB+z+K+UP2bxf2L+mMX/SfljFv8n549Z/J+SP2bxXzl/zOL/1Pwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/tPwxi/9aSv9Z+9zbHhb/tZX+957Ff538MYv/uvljFv+n549Z/NfLH7P4r58/ZvF/Rv6Yxf+Z+WMW/w3yxyz+k/PHLP5T8scs/lPzxyz+G+aPWfw3yh+z+G+cP2bxn5Y/ZvGfnj9m8d8kf8ziv2n+mMX/WfljFv9n549Z/DfLH7P4b54/ZvHfIn/M4v+c/DGL/5b5Yxb/5+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf95+WMW/+3yxyz+2+ePWfyfnz9m8X9B/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjF/6X5Yxb/HfLHLP475o9Z/HfKH7P4vyx/zOL/8vwxi//O+WMW/1fkj1n8d8kfs/i/Mn/M4r9r/pjF/1X5Yxb/V+ePWfxfkz9m8d8tf8ziv3v+mMX/tfljFv/X5Y9Z/F+fP2bx3yN/zOL/hvwxi/+e+WMW/zfmj1n835Q/Np//2AU9nv+4u/F/c/6YZf3vlT9m8d87f8zi/5b8MYv/W/PHLP5vyx+z+L89f8zi/478MYv/PvljFv8Z+WMW/3fmj1n835U/ZvF/d/6Yxf89+WMW/33zxyz+780fs/jvlz9m8X9f/pjF//35Yxb//fPHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+B+QP2bxPzB/zOL/0fwxi//H8scs/gflj1n8P54/ZvH/RP6Yxf/g/DGL/yfzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+h+SPWfy/lD9m8T80f8zi/+X8MYv/YfljFv/D88cs/kfkj1n8j8wfs/h/JX/M4n9U/pjF/6v5Yxb/r+WPWfyPzh+z+H89f8zif0z+mMX/2Pwxi/838scs/t/MH7P4H5c/ZvE/Pn/M4n9C/pjF/1v5Yxb/b+ePWfxPzB+z+J903/xv+a+N6wGaxf/k1j9m8f9O/pjF/7v5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/Xv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z8gfs/j/NH/M4v+z/DGL/5n5Yxb/n+ePWfx/kT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW/1/mj1n8z8sfs/j/Kn/M4v/r/DGL/2/yxyz+v80fs/ifnz9m8b8gf8zi/7t5/Yc6GeZm8f995JjF/8L8MYv/H/LHLP4X5Y9Z/C/OH7P4X5I/ZvH/Y/6Yxf/S/DGL/2X5Yxb/y/PHLP5/yh+z+P85f8zi/5f8MYv/FfljFv+/5o9Z/K+8D/6j/5vjeoBm8b+q9Y9Z/K/OH7P4X5M/ZvH/W/6Yxf/a/DGL/3X5Yxb/v+ePWfyvzx+z+P8jf8zi/8/8MYv/v/LHLP7/zh+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/mfljFv9b88cs/rflj1n8Z+WPSfwXG+SPWfz7T75xFv9R+WMC/1n7DAaLjc4fE/gPt9hC+WMW/zH5Yxb/sfljFv+F88cs/uPyxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/8fljFv+l88cs/hPyxyz+y+SPWfyXzR+z+D8kf8zi/9D8MYv/w/LHLP7L5Y9Z/B+eP2bxXz5/zOL/iPwxi/8j88cs/ivkj1n8H5U/ZvF/dP6YxX9i/pjF/zH5Yxb/x+aPWfwflz9m8Z+UP2bxXzF/zOL/+Pwxi//rxy6oAT2ws/iv1PrHLP5PzB+z+D8pf8zi/+T8MYv/U/LHLP4r549Z/J+aP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/J+WP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/p+ePWfzXyx+z+K+fP2bxf0b+mMX/mfljFv8N8scs/pPzxyz+U/LHLP5T88cs/hvmj1n8N8ofs/hvnD9m8Z+WP2bxn54/ZvHfJH/M4r9p/pjF/1n5Yxb/Z+ePWfw3yx+z+G+eP2bx3yJ/zOL/nPwxi/+W+WMW/+fmj1n8t8ofs/hvnT9m8d8mf8ziv23+2IPZf9Y+t29d7Hn5Yw9m/3nX/3b5Yxb/7fPHLP7Pzx+z+L8gf8zi/8L8MYv/i/LHLP4vzh+z+L8kf8zi/9L8MYv/DvljFv8d88cs/jvlj1n8X5Y/ZvF/ef6YxX/n/DGL/yvyx+7wHzN4MPvvkj9mWf+vzB+z+O+aP2bxf1X+mMX/1fljFv/X5I9Z/HfLH7P4754/ZvF/bf6Yxf91+WMW/9fnj1n898gfs/i/IX/M4r9n/pjF/435Yxb/N+WPWfzfnD9m8d8rf8ziv3f+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv998scs/jPyxyz+78wfs/i/K3/M4v/u/DGL/3vyxyz+++aPWfzfmz9m8d8vf8zi/778MYv/+/PHLP77549Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxPyB/zOJ/YP6Yxf+j+WMW/4/lj1n8D8ofs/h/XOm/6r3uYfH/hNL/3rP4H5w/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf+Q/DGL/5fyxyz+h+aPWfy/nD9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6/kj1n8j8ofs/h/NX/M4v+1/DGL/9H5Yxb/r+ePWfyPyR+z+B+bP2bx/0b+mMX/m/ljFv/j8scs/sfnj1n8T8gfs/h/K3/M4v/t/DGL/4n5Yxb/k/LHLP4n549Z/L+TP2bx/27+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfy/lz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/M/LHLP4/zR+z+P8sf8zif2b+mMX/5/ljFv9f5I9Z/M/KH7P4n50/ZvE/x+e/yH3ZyeJ/rs//PmXx/2X+mMX/vPwxi/+v8scs/r/OH7P4/yZ/zOL/2/wxi//5+WMW/wvyxyz+v8sfs/j/Pn/M4n9h/pjF/w/5Yxb/i/LHLP4X549Z/C/JH7P4/zF/zOJ/af6Yxf+y/DGL/+X5Yxb/P+WPWfz/nD9m8f9L/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4v+3/DGL/7X5Yxb/6/LHLP5/zx+z+F+fP2bx/0f+mMX/n/ljFv9/5Y9Z/P+dP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/Kf26vGzPPA4j8zf8zif2v+mMX/tvwxi/+s/DGJ/+KD/DGL/1D+mMV/VP6YxX90/pjFf6H8MYv/mPwxi//Y/DGL/8L5Yxb/cfljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//4/DGL/9L5Yxb/CfljFv9l8scs/svmj1n8H5I/ZvF/aP6Yxf9h+WMW/+Xyxyz+D88fs/gvnz9m8X9E/pjF/5H5Yxb/FfLHLP6Pyh+z+D86f8ziPzF/zOL/mPwxi/9j88cs/o/LH7P4T8ofs/ivmD9m8X98/pjF/wn5Yxb/lfLHLP5PzB+z+D8pf8zi/+T8MYv/U/LHLP4r549Z/J+aP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/J+WP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/p+ePWfzXyx+z+K+fP2bxf0b+mMX/mfljFv8N8scs/pPzxyz+U/LHLP5T88cs/hvmj1n8N8ofs/hvnD9m8Z+WP2bxn54/ZvHfJH/M4r9p/pjF/1n5Yxb/Z+ePWfw3yx+z+G+eP2bx3yJ/zOL/nPwxi/+W+WMW/+fmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/efljFv/t8scs/tvnj1n8n58/ZvF/Qf6Yxf+F+WMW/xflj1n8X5w/ZvF/Sf6Yxf+l+WMW/x3yxyz+O+aPWfx3yh+z+L8sf8zi//L8MYv/zvljFv9X5I9Z/HfJH7P4vzJ/zOK/a/6Yxf9V+WMW/1fnj1n8X5M/ZvHfLX/M4r97/pjF/7X5Y7f7v+KYB7X/6+7ef8b/ybgeoFnW/+tb/5jFf4/8MYv/G/LHLP575o9Z/N+YP2bxf1P+mMX/zfljFv+98scs/nvnj1n835I/ZvF/a/6Yxf9t+WMW/7fnj1n835E/ZvHfJ3/M4j8jf8zi/878MYv/u/LHLP7vzh+z+L8nf8ziv2/+mMX/vfljFv/98scs/u/LH7P4vz9/zOK/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/wPyxyz+B+aPWfw/mj9m8f9Y/pjF/6D8MYv/x/PHLP6fyB+z+B+cP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/kPwxi/+X8scs/ofmj1n8v5w/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+v5I9Z/I/KH7P4fzV/zOL/tfwxi//R+WMW/6/nj1n8j8kfs/gfmz9m8f9G/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4fyt/zOL/bY//6Puzs8X/RI///crif1L+mMX/5Pwxi/938scs/t/NH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/9/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif0b+mMX/p/ljFv+f5Y9Z/M/MH7P4/3z4vc5aakGN6gGbxf8XrX/M4n9W/pjF/+z8MYv/OfljFv9z88cs/r/MH7P4n5c/ZvH/Vf6Yxf/X+WMW/9/kj1n8f5s/ZvE/P3/M4n9B/pjF/3f5Yxb/3+ePWfwvzB+z+P8hf8zif1H+mMX/4vwxi/8l+WMW/z/mj1n8L80fs/hflj9m8b88f8zi/6f8MYv/n/PHLP5/yR+z+F+RP2bx/2v+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfz/lj9m8b82f8zif13+mMX/7/ljFv/r88cs/v/IH7P4/zN/zOL/r/wxi/+/88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMV/Zv6Yxf/W/DGL/235Yxb/WfljEv8lBvljFv+h/DGL/6j8MYv/6Pwxi/9C+WMW/zH5Yxb/sfljFv+F88cs/uPyxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/8fljFv+l88cs/hPyxyz+y+SPWfyXzR+z+D8kf8zi/9D8MYv/w/LHLP7L5Y9Z/B+eP2bxXz5/zOL/iPwxi/8j88cs/ivkj1n8H5U/ZvF/dP6YxX9i/pjF/zH5Yxb/x+aPWfwflz9m8Z+UP2bxXzF/zOL/+Pwxi/8T8scs/ivlj1n8n5j/cAvNv8Hi/6T8MYv/k/PHLP5PyR+z+K+cP2bxf2r+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxf1r+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfyfnj9m8V8vf8ziv37+mMX/GfljFv9n5o9Z/DfIH7P4T84fs/hPyR+z+E/NH7P4b5g/ZvHfKH/M4r9x/pjFf1r+mMV/ev6YxX+T/DGL/6b5Yxb/Z+WPWfyfnT9m8d8sf8ziv3n+mMV/i/wxi/9z8scs/lvmj1n8n5s/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/n5Y9Z/LfLH7P4b58/ZvF/fv6Yxf8F+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/5fmj1n8d8gfs/jvmD9m8d8pf8zi/7L8MYv/y/PHLP47549Z/F+RP2bx3yV/zOL/yvwxi/+u+WMW/1flj1n8X50/ZvF/Tf6YxX+3/DGL/+75Yxb/1+aPWfxflz9m8X99/pjFf4/8MYv/G/LHLP575o9Z/N+YP2bxf1P+mMX/zfljFv+98scs/nvnj1n835I/ZvF/a/6Yxf9t+WMW/7fnj1n835E/ZvHfJ3/M4j8jf8zi/878MYv/u/LHLP7vzh+z+L8nf8ziv2/+mMX/vfljFv/98scs/u/LH7P4vz9/zOK/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/wPyxyz+B+aPWfw/mj9m8f9Y/pjF/6D8MYv/x/PHLP6fyB+z+B+cP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/kPwxi/+X8scs/ofmj1n8v5w/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+v5I9Z/I/KH7P4fzV/zOL/tfwxi//R+WMW/6/nj1n8j8kfs/gfmz9m8f9G/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4fyt/zOL/7fwxi/+J+WMW/5Pyxyz+J+ePWfy/kz9m8f9u/pjF/5T8MYv/qfljFv/T8h95+zPuvFHif3r+mMX/e/ljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bxPyN/zOL/0/wxi//P8scs/mfmj1n8f54/ZvH/Rf6Yxf+s/Ifu/P5Hj9w6/M/OH7Os/3Pyxyz+5+aPWfx/mT9m8T8vf8zi/6v8MYv/r/PHLP6/yR+z+P82f8zif37+mMX/gvwxi//v8scs/r/PH7P4X5g/ZvH/Q/6Yxf+i/DGL/8X5Yxb/S/LHLP5/zB+z+F+aP2bxvyx/zOJ/ef6Yxf9P+WMW/z/nj1n8/5I/ZvG/In/M4v/X/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4/y1/zOJ/bf6Yxf+6/DGL/9/zxyz+1+ePWfz/kT9m8f9n/pjF/1/5Yxb/f+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/8z8MYv/rfljFv/b8scs/rPyxyT+Sw7yxyz+Q/ljFv9R+WMW/9H5Yxb/hfLHLP5j8scs/mPzxyz+C+ePWfzH5Y9Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/uPzxyz+S+ePWfwn5I9Z/JfJH7P4L5s/ZvF/SP6Yxf+h+WMW/4flj1n8l8sfs/g/PH/M4r98/pjF/xH5Yxb/R+aPWfxXyB+z+D8qf8zi/+j8MYv/xPwxi/9j8scs/o/NH7P4Py5/zOI/KX/M4r9i/pjF//H5Yxb/J+SPWfxXyh+z+D8xf8zi/6T8MYv/k/PHLP5PyR+z+K+cP2bxf2r+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxf1r+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfyfnj9m8V8vf8ziv37+mMX/GfljFv9n5o9Z/DfIH7P4T84fs/hPyR+z+E/NH7P4b5g/ZvHfSOQ/7n7sa/HfWOR/f7L4T8sfs/hPzx+z+G+SP2bx3zR/zOL/rPwxi/+z88cs/pvlj1n8N88fs/hvkT9m8X9O/pjFf8v8MYv/c0f8F15Q43qAZvHfqvWPWfy3zh+z+G+TP2bx3zZ/zOL/vPwxi/92+WMW/+3zxyz+z88fs/i/IH/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4v/S/DGL/w75Yxb/HfPHLP475Y9Z/F+WP2bxf3n+mMV/5/wxi/8r8scs/rvkj1n8X5k/ZvHfNX/M4v+q/DGL/6vzxyz+r8kfs/jvlj9m8d89f8zi/9r8MYv/6/LHLP6vzx+z+O+RP2bxf0P+mMV/z/wxi/8b88cs/m/KH7P4vzl/zOK/V/6YxX/v/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+++SPWfxn5I9Z/N+ZP2bxf1f+mMX/3fljFv/35I9Z/PfNH7P4vzd/zOK/X/6Yxf99+WMW//fnj1n8988fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4n9A/pjF/8D8MYv/R/PHLP4fyx+z+B+UP2bx/3j+mMT/2AU1nAd6Ev8lD279Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfwPyR+z+H8pf8zif2j+mMX/y/ljFv/D8scs/ofnj1n8j8gfs/gfmT9m8f9K/pjF/6j8MYv/V/PHLP5fyx+z+B+dP2bx/3r+mMX/mPwxi/+x+WMW/2/kj1n8v5k/ZvE/Ln/M4n98/pjF/4T8MYv/t/LHLP7fzh+z+J+YP2bxPyl/zOJ/cv6Yxf87+WMW/+/mj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/e/ljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP3Zn/3GjH6z+Z+SPWdb/T/PHLP4/yx+z+J+ZP2bx/3n+mMX/F/ljFv+z8scs/mfnj1n8z8kfs/ifmz9m8f9l/pjF/7z8MYv/r/LHLP6/zh+z+P8mf8zi/9v8MYv/+fljFv8L8scs/r/LH7P4/z5/zOJ/Yf6Yxf8P+WMW/4vyxyz+F+ePWfwvyR+z+P8xf8zif2n+mMX/svwxi//l+WMW/z/lj1n8/5w/ZvH/S/6Yxf+K/DGL/1/zxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOL/t/wxi/+1+WMW/+vyxyz+f88fs/hfnz9m8f9H/pjF/5/5Yxb/f+WPWfz/nT9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+M/PHLP635o9Z/G/LH7P4z8ofk/gvNcgfs/gP5Y9Z/Eflj1n8R+ePWfwXyv9OjR65tfiPyR+z+I/NH7P4L5w/ZvEflz9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+I/PH7P4L50/ZvGfkD9m8V8mf8ziv2z+mMX/IfljFv+H5o9Z/B+WP2bxXy5/zOL/8Pwxi//y+WMW/0fkj1n8H5k/ZvFfIX/M4v+o/DGL/6Pzxyz+E/PHLP6PyR+z+D82f8zi/7j8MYv/pPwxi/+K+WMW/8fnj1n8n5A/ZvFfKX/M4v/E/DGL/5Pyxyz+T84fs/g/JX/M4r9y/pjF/6n5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/2n5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvF/ev6YxX+9/DGL//r5Yxb/Z+SPWfyfmT9m8d8gf8ziPzl/zOI/JX/M4j81f8ziv2H+mMV/o/wxi//G+WMW/2n5Yxb/6fljFv9N8scs/pvmj1n8n5U/ZvF/dv6YxX+z/DGL/+b5Yxb/LfLHLP7PyR+z+G+ZP2bxf27+mMV/q/wxi//W+WMW/23yxyz+2+aPWfyflz9m8d8uf8ziv33+mMX/+fljFv8X5I9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/F+aP2bx3yF/zOK/Y/6YxX+n/P8/9uhZCxBDgaLoszHPtm2bsW2MbSu2bdu2bdu27UmRKmvdL8jduzv1iVr+D/Q/avk/yP+o5f9g/6OW/0P8j1r+D/U/avk/zP+o5f9w/6OW/yP8j1r+j/Q/avk/yv+o5f9o/6OW/2P8j1r+j/U/avk/zv+o5f94/6OW/xP8j1r+T/Q/avk/yf+o5f9k/6OW/1P8j1r+T/U/avk/zf+o5f90/6OW/zP8j1r+z/Q/avk/y/+o5f9s/6OW/3P8j1r+z/U/avm/lv9Ry/+1/Y9a/q/jf9Tyf13/o5b/6/kftfxf3/+o5f8G/kct/zf0P2r5v5H/Ucv/jf2PWv5v4n/U8n9T/6OW/5v5H7X839z/qOX/Fv5HLf+39D9q+b+V/1HL/639j1r+b+N/1PJ/W/+jlv/b+R+1/N/e/6jl/w7+Ry3/d/Q/avm/k/9Ry/+d/Y9a/u/if9Tyf1f/o5b/u/kftfzf3f+o5f8e/kct//f0P2r5v5f/Ucv/vf2PWv7v43/U8n9f/6OW//v5H7X839//qOX/Af5HLf8P9D9q+X+Q/1HL/4P9j1r+H+J/1PL/UP+jlv+H+R+1/D/c/6jl/xH+Ry3/j/Q/avl/lP9Ry/+j/Y9a/h/jf9Ty/1j/o5b/x/kftfw/3v+o5f8J/kct/0/0P2r5f5L/Ucv/k/2PWv6f4n/U8v9U/6OW/6f5H7X8P93/qOX/Gf5HLf/P9D9q+X+W/1HL/7P9j1r+n+N/1PL/XP+jlv/n+R+1/D/f/6jl/wX+Ry3/L/Q/avl/kf9Ry/+L/Y9a/l/if9Ty/1L/o5b/l/kftfy/3P+o5f8V/kct/6/0P2r5f5X/Ucv/q/2PWv5f43/U8v9a/6OW/9f5H7X8v97/qOX/Df5HLf9v9D9q+X+T/1HL/5v9j1r+3+J/1PL/Vv+jlv+3+R+1/L/d/6jl/x3+Ry3/7/Q/avl/l/9Ry/+7/Y9a/t/jf9Ty/17/o5b/9/kftfy/3/+o5f8D/kct/x/0P2r5/5D/Ucv/h/2PWv4/4n/U8v9R/6OW/4/5H7X8f9z/qOX/E/5HLf+f9D9q+f+U/1HL/6f9j1r+P+N/1PL/Wf+jlv/P+R+1/H/e/6jl/wv+Ry3/X/Q/avn/kv9Ry/+X/Y9a/r/if9Ty/1X/o5b/r/kftfx/3f+o5f8b/kct/+f5H5X8H/Au/6OW/+/2P2r5/x7/o5b/7/U/avn/Pv+jlv/v9z9q+f8B/6OW/x/0P2r5/yH/o5b/H/Y/avn/Ef+jlv8f9T9q+f8x/6OW/x/3P2r5/wn/o5b/n/Q/avk/wP+o5f+n/I9a/n/a/6jl/2f8j1r+f9b/qOX/5/yPWv5/3v+o5f8X/I9a/n/R/6jl/5f8j1r+f9n/qOX/V/yPWv5/1f+o5f/X/I9a/n/d/6jl/zf8j1r+f9P/qOX/t/yPWv5/2/+o5f93/I9a/n/X/6jl//f8j1r+f9//qOX/D/yPWv7/0P+o5f+P/I9a/v/Y/6jl/0/8j1r+/9T/qOX/z/yPWv7/3P+o5f8v/I9a/v/S/6jl/6/8j1r+/9r/qOX/b/yPWv7/1v+o5f/v/I9a/v/e/6jl/x/8j1r+/9H/qOX/n/yPWv7/2f+o5f9f/I9a/v/V/6jl/9/8j1r+/93/qOX/P/yPWv7/0/+o5f+//I9a/v/b/6jl/3/8j1r+/9f/qOX///yPWv7/3/+o5f98/kct/+f3P2r5v4D/Ucv/Bf2PWv4v5H/U8n9h/6OW/4v4H7X8X9T/qOX/Yv5HLf8X9z9q+b+E/1HL/yX9j1r+L+V/1PJ/af+jlv/L+B+1/F/W/6jl/3L+Ry3/l/c/avm/gv9Ry/8V/Y9a/q/kf9Tyf2X/o5b/q/gftfxf1f+o5f9q/kct/1f3P2r5v4b/Ucv/Nf2PWv4P9D9q+T/I/6jl/2D/o5b/Q/yPWv4P9T9q+T/M/6jl/3D/o5b/I/yPWv6P9D9q+T/K/6jl/2j/3zLv7dnyf4z/Ucv/sf5HLf/H+R+1/B/vf9Tyf4L/Ucv/if5HLf8n+R+1/J/sf9Tyf4r/Ucv/qf5HLf+n+R+1/J/uf9Tyf4b/Ucv/mf5HLf9n+R+1/J/tf9Tyf47/Ucv/uf5H77j/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm+zbf4zXdQHH8c8BB0i24WLGsDbIt6VbSnf8GP7hhETgQg/8jaghcAeCd0DHYcep8eMPcun8kRs5tnIlDMtJm7dc09mlmTWLVVvNfqhZurIWmc6CLda17933zrtvx63v+3y/Wfl4/HHf7+fz5fUBbnvy+TAFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/V0PjgiNja4acGjv44MOHm3tfZx9dcdOB33df0P9a/njpMJccM/igp6enZ/azs3aUDycURVH62XaWjydWjkvX31n/pY6+ozC/+8XFxyf/svHIgTWnPVzXdfS+2t6ztcWN6za0NH9iTFGEi2qLjtJBXU1RhEW1xb2lg/rSweLa4uHSwazeg1OK75YOzlu7uaWpdGJJ9PcM/l80NO4sxg4pthjyp8Hg/nfWf+eO/tcRLtl/tXFFuf/LO3/4ZsVn/U7Qf//1w4LK/qv+DQInVF3/z8/vfx3hkv9x/5/05MqXh/vsxP33Xz98Uv+QzjDP/0MarXzur3j+nz7MJQf2V9Z0Hi/1f8mtz8wonxr33zz/v3P9cFFl/2OGPP+XnuMX9j//TyiKcPEovx3wntLQuOvISPf/kfsfN61iUzO4/9PbNu8v9f/Y4h88Xj5VW2X/C0e4/49ZUvFrBarT0PjVnor7fxX9Fx8b5pID/b/1+G8fKvX/6B/vP2PQZ9X0f3Fl/zPbW7fM3Lq989wNravXN69v3lQ3a97sufV1c8+fM7P3kaDv6yi/K/DeMLr7fzGpYlNTFM0D+6u7DjxV6n/OAw/MLp+aWGX/i0a8/093/4dhfWRMMX580bG6vb2tru9r/2F939e+HzZM/1X8/f/Ms8s/rLb8WlMUUwf2d55x1/JS/28femZ3+dT4KvtfPGL/8wd+XiDCKO//TRWbIf0fPPRi7/P/0nsOnl4+Ve3f/5eM2P8r7v8wGg2NFf/Dz7us1P+u4tLITkOD//4H6eTo/9G3r++OW4dP6R/SydH/H75w9Jy4dViqf0gnR//jNt7/XNw6XKJ/SCdH/8umzFsetw6X6h/SydH/2lfO+WvcOjTqH9LJ0f/ZX9ndEbcOy/QP6eTo/8G22dvi1mG5/iGdHP3//NQHX41bh8v0D+nk6P/YsbtviFuHy/UP6eTov2vPWT+KW4cr9A/p5Oj/snULQtw6XKl/SCdH/9Om/vmxuHW4Sv+QTo7+5/7ln6fGrcPV+od0cvR/+xeX74tbh2v0D+nk6H/sdS+/ELcOK/QP6eTof8lZ2xbErcO1+od0cvTf9LOmnrh1WFnuf0Khf3jX5eh/5jd/siFuHa5z/4d0cvR/eNkje+LW4Xr9Qzo5+t9TV0yOW4cb9A/p5Oj/G98/7VDcOnxa/5BOjv5/9+QT8+LWYZX+IZ0c/T/7odu+FbcON+of0snR/z1rXjgzbh1W6x/SydH/Q3uf+3LcOqzRP6STo//XX299X9w6rNU/pJOj/0kTT3ktbh2a9A/p5Oh/wS1fa4tbh2b9Qzo5+m/d3fXjuHVYp39IJ0f/Hz0+dWXcOqzXP6STo/8Vc/Z+MG4dbtI/pJOj/w8svWBX3Dps0D+kk6P/C7s/fmHcOmzUP6STo//2pz//9bh1uFn/kE6O/vfOeHVR3Dq06B/SydH/S6uW/DRuHVr1D+nk6P/NR67dFLcOm/QP6eTo/4lfvHUsbh026x/SydH/+89f+Pe4ddiif0gnR/+LFr+xNm4dPqN/SCdH/xu7/vVS3Dq06R/SydH/jMNXLY1bh636h3Ry9P+9c+v2x61Du/4hnRz933HFvvq4ddimf0gnR//7D955V9w63KJ/SCdH/2/8avq0uHX4rP4hnRz93zf50DVx69Chf0gnR/+/3lT7dNw6bNc/pJOj/3/sm7Ijbh069Q/p5Oj/qde6/xS3DrfqH9LJ0f+qcb8ZH7cOt+kf0snR/5TOLffGrcPt+od0cvQ/7+7V58Wtw+f0D+nk6H/r357/dtw67NA/pLN1e+fNq1tamtu88cYbbwbenOw/mYDU3on+ZP9KAAAAAAAAAAAAAACAE8nxz4lO9u8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFQAA//8EKulD") ioctl$XFS_IOC_SWAPEXT(r10, 0xc0c0586d, &(0x7f0000029300)={0x0, 0xffffffffffffffff, r10, 0x4, 0x4, '\x00', {0x1000, 0x4, 0x8639, 0x22, 0x0, 0xffffffff, 0x1, 0xfffffffffffffffd, {0xff, 0x9}, {0x218b70e9}, {0x8000006}, 0x7, 0x7, 0x0, 0x1000, 0xd, 0x0, 0xe, 0x2, 0x6, 0x9, '\x00', 0x6, 0x2, 0xa8, 0x4}}) 6.799101866s ago: executing program 0 (id=1287): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000240), 0x318, 0x0) socket(0x2, 0xa, 0x300) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040400000000000400ffffffffff"], 0xf) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sec_ctx={0x1, 0x18, 0x7, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x58}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.719339395s ago: executing program 4 (id=1288): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000500), 0x8e5b, r0}, 0x38) socket(0x400000000010, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x147, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc6, 0x3000007, 0x1010, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f00000003c0)) read$FUSE(r6, &(0x7f0000000f00)={0x2020}, 0x2020) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000040)={0x0, 0xc1, 0x80, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2c8f, 0x10, 0x3, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x81, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b1d, 0x800, 0x10000001, 0x26d}}], 0x1, 0x0, 0x0) 4.794675394s ago: executing program 1 (id=1289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x810, 0xffffffffffffffff, 0x4326d000) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd25, 0x0, {{{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x40000000000004, 0x0, 0x6, 0x0, 0x0, 0x5}, {0x107f, 0x6, 0x7fffffffffffffff}, 0xffffffff, 0x6e6bb7, 0x2, 0x0, 0x0, 0x3}, 0xa}, [@policy_type={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000840}, 0x400c084) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000240)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e00)={0x1, &(0x7f0000000e40)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x141c, &(0x7f0000005580)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000005600)=0x0, &(0x7f0000005640)=0x0, &(0x7f0000005680)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) r6 = eventfd2(0xbd49, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000056c0)=r6, 0x1) io_uring_enter(r3, 0x4119, 0x869e, 0xc, 0x0, 0x0) bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000001100)=0x20a, 0x4) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000001) dup(r2) syz_mount_image$fuse(0x0, &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005500)={0x0}, 0x1, 0x0, 0x0, 0x240048c4}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x80, &(0x7f0000001240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r8, &(0x7f0000003300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000003380)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005480)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 4.691227334s ago: executing program 4 (id=1290): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x6040180) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) syz_open_dev$vim2m(0x0, 0x8, 0x2) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r2}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'streebog256-generic\x00'}}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040027bd7000fcdbdf255c0000000c0099000a0000000c00000008006b005a000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) gettid() sendto$inet6(r8, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x2, 0x9c, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x2, 0x5, 0x5, 0x5, 0x0, 0x9, 0x8, 0xe, 0x6, 0x8, 0x7, '\x00', 0x0, 0x3f92}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]}) 4.431163462s ago: executing program 0 (id=1291): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x9, 0x2000000, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xffff71bc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) r2 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x26, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x81, 0xe, 0xb, 0x8001, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @map_fd={0x18, 0xa531788bf02f34a0, 0x1, 0x0, r0}, @map_val={0x18, 0x5, 0x2, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x3519d7f4cc363fbd, 0x0, &(0x7f0000000100)) fdatasync(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x4}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x10100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r7) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r9, r9, 0x0, 0x4) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000200)={'\x00', 0x10001, 0x1, 0x3}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x20}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.34624853s ago: executing program 2 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1100000004000000040000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3}, 0x38) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="03000000f8a9f48d5bc457ad14e172662ef657a8e6810e1c1d07f73a4ae90b0f173aa2bdddfcd640672a13f571456d4e47b82790db916b955e7e42412af4869b9bccccdde172e5ea530bdb633f6f94938c07f4f9cae22e4e128a4383d2865a66f2c384d4235c20a103d5e574ef12b08b2d8f37aada76d9d7c42e9847e612c318fb9476fac5a7bd15f9654c774252b750bfe11b98b2820c2fc2214e", @ANYRES16=r4, @ANYBLOB="00022dbd7000ffdbdf2506000000240009800800020006000000080001000200000008000100c9c70000080001000800000004000280040006805c0001802c0004001400010002004e216401010200000000000000001400020002004e24ac1414270000000000000000040002800d0001007564703a73797a30000000000d0001007564703a73797a3200000000080003000600000004000780ec0001800c00028008000400220c0000380004001400010002004e23e0000001000000000000000020"], 0x18c}, 0x1, 0x0, 0x0, 0x4004000}, 0x400c0) syz_open_dev$dri(0x0, 0x0, 0x402) syz_open_dev$swradio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100001040000000000dde40000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0xb, 0x883c1) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VIDIOC_S_FBUF(r7, 0x4030560b, &(0x7f0000000040)={0x2, 0x10, 0x0, {0x6, 0xbb6, 0x31363553, 0x2, 0x0, 0x7, 0x9, 0x8}}) 4.303596445s ago: executing program 1 (id=1293): openat$uinput(0xffffffffffffff9c, &(0x7f00000088c0), 0x0, 0x0) r0 = fsopen(&(0x7f0000008900)='cgroup2\x00', 0x0) r1 = fsopen(&(0x7f0000008940)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000008980)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000089c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000008a00), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000008a40), 0x2, 0x141102) socket$can_j1939(0x1d, 0x2, 0x7) writev(r3, &(0x7f0000008a80)=[{&(0x7f0000008ac0)="94", 0xf000}, {0x0}], 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000008b00)='0', 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000008b40)='0', 0x2) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000008b80), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000008bc0)={[{0x2b, 'rdma'}]}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002480)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000002500)="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", 0x2000, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004600)='./file0\x00', 0x187c81, 0x40) writev(r8, &(0x7f0000004640)=[{&(0x7f0000004680)="03a30aa8", 0x4}], 0x20) 3.915202025s ago: executing program 1 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1ff, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000004a40)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x2}, 0x10) 2.608376141s ago: executing program 1 (id=1295): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001aa00)=0x7) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 1.786482736s ago: executing program 2 (id=1296): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0xc0000000}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) lseek(r4, 0xfffffffffffffff5, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90010"], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) io_setup(0xc, 0x0) r5 = timerfd_create(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) 1.783109486s ago: executing program 4 (id=1297): syz_open_dev$evdev(&(0x7f0000000240), 0x3ff, 0x21c0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast}]}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000001c0), 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 1.781947296s ago: executing program 0 (id=1304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000400)={0x19980330}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000b1917b", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25280000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000540)='.\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 0s ago: executing program 2 (id=1298): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0xb, 0x0, {0x1}}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f00000001c0), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01080000000000001400128009000100766574680000ffff0300028008002000"], 0x3c}}, 0x40c4) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) getcwd(&(0x7f0000000400)=""/4096, 0x1000) getcwd(0x0, 0x0) kernel console output (not intermixed with test programs): wn global tag 0xc [ 114.052953][ T8] waltop 0003:172F:0034.0001: unexpected long global item [ 114.072653][ T8] waltop: probe of 0003:172F:0034.0001 failed with error -22 [ 115.927211][ T6065] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 116.153015][ T27] usb 2-1: USB disconnect, device number 3 [ 116.320710][ T6079] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 116.751439][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.515379][ T6087] loop2: detected capacity change from 0 to 32768 [ 118.522982][ T6087] ======================================================= [ 118.522982][ T6087] WARNING: The mand mount option has been deprecated and [ 118.522982][ T6087] and is ignored by this kernel. Remove the mand [ 118.522982][ T6087] option from the mount to silence this warning. [ 118.522982][ T6087] ======================================================= [ 118.567174][ T6087] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.40 (6087) [ 119.617110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 119.757059][ T6092] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 120.027016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.369873][ T6087] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 120.380668][ T6087] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 120.389915][ T6087] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 120.399793][ T6087] BTRFS info (device loop2): use zstd compression, level 3 [ 120.407222][ T6087] BTRFS info (device loop2): force clearing of disk cache [ 120.414484][ T6087] BTRFS info (device loop2): enabling disk space caching [ 120.422204][ T6087] BTRFS info (device loop2): disk space caching is enabled [ 120.548604][ T6087] BTRFS info (device loop2): enabling ssd optimizations [ 120.555667][ T6087] BTRFS info (device loop2): auto enabling async discard [ 120.569367][ T6087] BTRFS info (device loop2): rebuilding free space tree [ 120.654471][ T6087] BTRFS info (device loop2): disabling free space tree [ 120.661761][ T6087] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.671943][ T6087] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.895154][ T6121] loop1: detected capacity change from 0 to 1024 [ 122.071709][ T5788] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 123.097067][ T6131] syz_tun: entered allmulticast mode [ 123.152702][ T6130] syz_tun: left allmulticast mode [ 123.452980][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 123.608307][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.874315][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 123.919978][ T23] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 123.981161][ T23] usb 4-1: config 0 has no interface number 0 [ 124.006393][ T23] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 124.059769][ T23] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.149445][ T23] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 124.179463][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.205070][ T23] usb 4-1: Product: syz [ 124.216012][ T23] usb 4-1: Manufacturer: syz [ 124.241766][ T23] usb 4-1: SerialNumber: syz [ 124.317694][ T23] usb 4-1: config 0 descriptor?? [ 124.364166][ T6135] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.420229][ T6135] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.830981][ T6135] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.908203][ T6135] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.445554][ T6153] syzkaller0: entered promiscuous mode [ 125.457157][ T6153] syzkaller0: entered allmulticast mode [ 125.676965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 126.652604][ T23] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 127.084633][ T23] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 127.137298][ T23] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 127.147806][ T23] asix: probe of 4-1:0.251 failed with error -5 [ 127.165495][ T23] usb 4-1: USB disconnect, device number 2 [ 127.428767][ T6173] kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 127.502753][ T6173] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 127.530454][ T6173] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 127.561615][ T6173] kvm: requested 21790 ns i8254 timer period limited to 200000 ns [ 127.578591][ T6173] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 127.599175][ T6173] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 127.974012][ T6183] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 129.718625][ T5868] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.944937][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.965684][ T5868] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.987130][ T5868] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 130.056975][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.104119][ T5868] usb 1-1: config 0 descriptor?? [ 132.417076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 132.591634][ T8] usb 1-1: USB disconnect, device number 2 [ 133.077064][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.992140][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.001054][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.012703][ T6223] loop2: detected capacity change from 0 to 32768 [ 134.445700][ T6224] read_mapping_page failed! [ 134.451081][ T6224] ERROR: (device loop2): txCommit: [ 134.451081][ T6224] [ 134.749306][ C0] net_ratelimit: 20 callbacks suppressed [ 134.803806][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.836432][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.966410][ T5788] ERROR: (device loop2): diFree: numfree > numinos [ 134.966410][ T5788] [ 134.978577][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 135.041150][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.177278][ T1194] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.403322][ T1194] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.448124][ T1194] usb 3-1: config 1 interface 2 altsetting 0 has an invalid endpoint with address 0x3A, skipping [ 136.458976][ T8] usb 1-1: USB disconnect, device number 3 [ 136.479204][ T1194] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.536349][ T80] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow! [ 136.550356][ T1194] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 136.601101][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.631991][ T6235] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 136.952763][ T1194] snd-ua101: probe of 3-1:1.0 failed with error -2 [ 137.587996][ T1194] usb 3-1: USB disconnect, device number 2 [ 139.767260][ C0] net_ratelimit: 31 callbacks suppressed [ 139.971621][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.030732][ T6261] kvm: emulating exchange as write [ 140.193093][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 140.218301][ T27] usb 3-1: string descriptor 0 read error: -22 [ 140.224724][ T27] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.40 [ 140.267542][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.505965][ T6263] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.516411][ T6263] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.525760][ T6263] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.534696][ T6263] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.612012][ T6266] loop3: detected capacity change from 0 to 33280 [ 140.656128][ T6266] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.704723][ T6263] vxlan0: entered allmulticast mode [ 140.718496][ T6266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.784126][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 140.795093][ T6266] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.90: bad orphan inode 131083 [ 140.843560][ T6266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.887917][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 140.894981][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 140.962064][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 141.005364][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 141.048142][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 141.062227][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 141.078781][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 141.085874][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 141.107243][ T27] elecom 0003:056E:011C.0002: unknown main item tag 0x0 [ 141.263394][ T5802] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 141.274978][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 141.285109][ T5802] CPU: 1 PID: 5802 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 141.292699][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 141.292743][ T5802] Workqueue: hci2 hci_rx_work [ 141.292777][ T5802] Call Trace: [ 141.292786][ T5802] [ 141.292797][ T5802] dump_stack_lvl+0x18c/0x250 [ 141.303035][ T5802] ? show_regs_print_info+0x20/0x20 [ 141.303074][ T5802] ? load_image+0x420/0x420 [ 141.303121][ T5802] sysfs_create_dir_ns+0x26e/0x2a0 [ 141.311243][ T5802] ? sysfs_warn_dup+0xa0/0xa0 [ 141.318933][ T5802] ? do_raw_spin_unlock+0x121/0x230 [ 141.318975][ T5802] kobject_add_internal+0x617/0xc90 [ 141.328733][ T5802] kobject_add+0x164/0x240 [ 141.328762][ T5802] ? preempt_schedule_thunk+0x1a/0x30 [ 141.328800][ T5802] ? kobject_init+0x1d0/0x1d0 [ 141.328826][ T5802] ? get_device_parent+0x366/0x390 [ 141.338865][ T5802] device_add+0x3fa/0xc40 [ 141.338898][ T5802] hci_conn_add_sysfs+0xd5/0x1e0 [ 141.378585][ T5802] hci_conn_complete_evt+0x81f/0x1410 [ 141.384058][ T5802] ? hci_inquiry_result_evt+0x520/0x520 [ 141.389821][ T5802] ? skb_pull_data+0xf0/0x1f0 [ 141.394839][ T5802] hci_event_packet+0x66e/0xe60 [ 141.399781][ T5802] ? hci_inquiry_result_evt+0x520/0x520 [ 141.405403][ T5802] ? bis_list+0x290/0x290 [ 141.409805][ T5802] ? hci_send_to_monitor+0xd7/0x4f0 [ 141.415069][ T5802] hci_rx_work+0x43a/0xd60 [ 141.419743][ T5802] ? process_scheduled_works+0x975/0x1600 [ 141.425541][ T5802] process_scheduled_works+0xa60/0x1600 [ 141.431232][ T5802] ? worker_attach_to_pool+0x370/0x370 [ 141.436770][ T5802] ? assign_work+0x3cc/0x5d0 [ 141.441430][ T5802] worker_thread+0xa5e/0xfe0 [ 141.446118][ T5802] kthread+0x2fa/0x390 [ 141.450275][ T5802] ? pr_cont_work+0x550/0x550 [ 141.455015][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 141.459666][ T5802] ret_from_fork+0x48/0x80 [ 141.464151][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 141.468800][ T5802] ret_from_fork_asm+0x11/0x20 [ 141.473640][ T5802] [ 141.787549][ T5802] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.802161][ T5802] Bluetooth: hci2: failed to register connection device [ 142.035590][ T27] elecom 0003:056E:011C.0002: hidraw0: USB HID v0.04 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 142.065974][ T27] usb 3-1: USB disconnect, device number 3 [ 142.345979][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.536752][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.756015][ T6279] process 'syz.3.92' launched './file0' with NULL argv: empty string added [ 143.668554][ T28] audit: type=1800 audit(1794589018.705:2): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.92" name="/" dev="fuse" ino=576460752303423492 res=0 errno=0 [ 143.878266][ T5797] Bluetooth: hci2: command tx timeout [ 144.478881][ T6289] loop0: detected capacity change from 0 to 2048 [ 144.560511][ T6289] UDF-fs: bad mount option "ÿÿ0xffffffffffffffffÿÿÿÿ" or missing value [ 145.607064][ C1] net_ratelimit: 34 callbacks suppressed [ 146.901313][ T5797] Bluetooth: hci2: command tx timeout [ 147.578932][ T790] IPVS: starting estimator thread 0... [ 147.853056][ T6320] IPVS: using max 18 ests per chain, 43200 per kthread [ 149.097045][ T5802] Bluetooth: hci2: command tx timeout [ 150.746957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 151.447037][ C1] net_ratelimit: 24 callbacks suppressed [ 152.897188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 153.306952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 155.704297][ T6345] tipc: Started in network mode [ 155.733155][ T6345] tipc: Node identity bac8aba136ca, cluster identity 4711 [ 155.774089][ T6345] tipc: Enabled bearer , priority 0 [ 155.837518][ T6346] syzkaller0: entered promiscuous mode [ 155.843074][ T6346] syzkaller0: entered allmulticast mode [ 155.967946][ T6344] tipc: Resetting bearer [ 156.120036][ T6344] tipc: Disabling bearer [ 156.887021][ C1] net_ratelimit: 25 callbacks suppressed [ 159.123685][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 161.881498][ T6394] loop2: detected capacity change from 0 to 40427 [ 161.924729][ T5887] net_ratelimit: 25 callbacks suppressed [ 162.019122][ T6394] F2FS-fs (loop2): Invalid log_blocksize (24), supports only 12 [ 162.027436][ T6394] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 162.063955][ T6394] F2FS-fs (loop2): invalid crc value [ 162.134824][ T6394] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.237776][ T6394] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 162.245179][ T6394] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.876713][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 166.938266][ C0] net_ratelimit: 17 callbacks suppressed [ 170.817100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 172.143539][ T27] net_ratelimit: 21 callbacks suppressed [ 172.583311][ T6457] null_blk: disk nullb1 created [ 176.043567][ T6469] loop0: detected capacity change from 0 to 32768 [ 176.101343][ T6469] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.173363][ T6469] XFS (loop0): Ending clean mount [ 176.196586][ T6469] XFS (loop0): Quotacheck needed: Please wait. [ 176.275161][ T6469] XFS (loop0): Quotacheck: Done. [ 176.302854][ T5887] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 176.586365][ T5887] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 176.615974][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.627057][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 176.760021][ T28] audit: type=1800 audit(1794589051.785:3): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.138" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 176.825321][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.908655][ T5887] usb 2-1: config 0 descriptor?? [ 176.915230][ T6471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.262134][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 177.372936][ T5887] hid_parser_main: 4007 callbacks suppressed [ 177.372965][ T5887] apple 0003:05AC:0242.0003: unknown main item tag 0x0 [ 177.387166][ T5887] apple 0003:05AC:0242.0003: unbalanced collection at end of report description [ 177.397569][ T5887] apple 0003:05AC:0242.0003: parse failed [ 177.403469][ T5887] apple: probe of 0003:05AC:0242.0003 failed with error -22 [ 177.847003][ C1] net_ratelimit: 30 callbacks suppressed [ 179.255665][ T27] usb 2-1: USB disconnect, device number 4 [ 182.626051][ T6509] loop1: detected capacity change from 0 to 164 [ 182.983415][ T6509] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 183.207691][ C1] net_ratelimit: 26 callbacks suppressed [ 183.517177][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 183.701610][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.147135][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.242941][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.255584][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.264194][ T27] usb 4-1: Product: syz [ 184.268788][ T27] usb 4-1: Manufacturer: syz [ 184.273652][ T27] usb 4-1: SerialNumber: syz [ 184.733695][ T6521] loop2: detected capacity change from 0 to 32768 [ 184.758737][ T6521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.146 (6521) [ 184.800591][ T6521] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.830638][ T6521] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 184.867129][ T6521] BTRFS info (device loop2): force clearing of disk cache [ 184.874369][ T6521] BTRFS info (device loop2): enabling auto defrag [ 184.905887][ T6521] BTRFS info (device loop2): max_inline at 428 [ 184.924909][ T6521] BTRFS info (device loop2): using free space tree [ 186.647128][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 186.726944][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 186.787369][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 186.809139][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 186.938278][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 186.938983][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 186.953703][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 186.967491][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 186.969338][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 186.979395][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 186.991248][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 187.001039][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 187.013982][ T6521] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 187.032716][ T6521] BTRFS error (device loop2): open_ctree failed: -12 [ 187.065582][ T27] usb 4-1: USB disconnect, device number 3 [ 188.247786][ T6556] syz.2.157 uses obsolete (PF_INET,SOCK_PACKET) [ 188.369246][ C0] net_ratelimit: 22 callbacks suppressed [ 189.777006][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 189.968572][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.979191][ T27] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 190.007199][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.478161][ T27] usb 1-1: cannot find UAC_HEADER [ 190.634698][ T27] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 190.672091][ T6565] warning: `syz.0.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.961192][ T27] usb 1-1: USB disconnect, device number 4 [ 192.964793][ T6595] loop1: detected capacity change from 0 to 33280 [ 193.007051][ T6595] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.537011][ C1] net_ratelimit: 31 callbacks suppressed [ 194.768873][ T6595] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.164: bad orphan inode 131083 [ 194.955428][ T6595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.014468][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.031240][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.149241][ T5802] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 196.160411][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 196.170555][ T5802] CPU: 1 PID: 5802 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 196.178189][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.188325][ T5802] Workqueue: hci0 hci_rx_work [ 196.193092][ T5802] Call Trace: [ 196.196435][ T5802] [ 196.199414][ T5802] dump_stack_lvl+0x18c/0x250 [ 196.204189][ T5802] ? show_regs_print_info+0x20/0x20 [ 196.209455][ T5802] ? load_image+0x420/0x420 [ 196.214129][ T5802] sysfs_create_dir_ns+0x26e/0x2a0 [ 196.219313][ T5802] ? sysfs_warn_dup+0xa0/0xa0 [ 196.224136][ T5802] ? do_raw_spin_unlock+0x121/0x230 [ 196.229411][ T5802] kobject_add_internal+0x617/0xc90 [ 196.234769][ T5802] kobject_add+0x164/0x240 [ 196.239251][ T5802] ? preempt_schedule_thunk+0x1a/0x30 [ 196.244715][ T5802] ? kobject_init+0x1d0/0x1d0 [ 196.249902][ T5802] ? get_device_parent+0x366/0x390 [ 196.255075][ T5802] device_add+0x3fa/0xc40 [ 196.259489][ T5802] hci_conn_add_sysfs+0xd5/0x1e0 [ 196.264499][ T5802] hci_conn_complete_evt+0x81f/0x1410 [ 196.269958][ T5802] ? hci_inquiry_result_evt+0x520/0x520 [ 196.275577][ T5802] ? skb_pull_data+0xf0/0x1f0 [ 196.280681][ T5802] hci_event_packet+0x66e/0xe60 [ 196.285873][ T5802] ? hci_inquiry_result_evt+0x520/0x520 [ 196.291496][ T5802] ? bis_list+0x290/0x290 [ 196.295941][ T5802] ? hci_send_to_monitor+0xd7/0x4f0 [ 196.301210][ T5802] hci_rx_work+0x43a/0xd60 [ 196.305716][ T5802] ? process_scheduled_works+0x975/0x1600 [ 196.311513][ T5802] process_scheduled_works+0xa60/0x1600 [ 196.317167][ T5802] ? worker_attach_to_pool+0x370/0x370 [ 196.322709][ T5802] ? assign_work+0x3cc/0x5d0 [ 196.327364][ T5802] worker_thread+0xa5e/0xfe0 [ 196.332056][ T5802] kthread+0x2fa/0x390 [ 196.336179][ T5802] ? pr_cont_work+0x550/0x550 [ 196.340912][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 196.345563][ T5802] ret_from_fork+0x48/0x80 [ 196.350034][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 196.354676][ T5802] ret_from_fork_asm+0x11/0x20 [ 196.359512][ T5802] [ 196.375937][ T5802] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 196.390734][ T5802] Bluetooth: hci0: failed to register connection device [ 196.907685][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.253221][ T6626] loop1: detected capacity change from 0 to 32768 [ 198.329462][ T6626] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.408387][ T5802] Bluetooth: hci0: command tx timeout [ 198.481314][ T6626] XFS (loop1): Ending clean mount [ 198.502795][ T6626] XFS (loop1): Quotacheck needed: Please wait. [ 198.601677][ T6626] XFS (loop1): Quotacheck: Done. [ 198.647012][ C1] net_ratelimit: 26 callbacks suppressed [ 198.897307][ T6650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.326247][ T28] audit: type=1800 audit(1794589074.325:4): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.169" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 199.674555][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.846399][ T6658] loop0: detected capacity change from 0 to 2048 [ 199.900937][ T6658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.498222][ T5802] Bluetooth: hci0: command tx timeout [ 203.494033][ T5802] Bluetooth: hci0: command tx timeout [ 203.840376][ T6707] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 203.850196][ T6707] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 203.927032][ C0] net_ratelimit: 27 callbacks suppressed [ 205.209523][ T6717] loop1: detected capacity change from 0 to 2048 [ 205.329771][ T6717] loop1: p1 < > p4 [ 205.329771][ T6717] p4: [ 205.362248][ T6716] loop2: detected capacity change from 0 to 32768 [ 205.424516][ T6716] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.480465][ T6717] loop1: p4 size 722688 extends beyond EOD, truncated [ 205.643340][ T6716] XFS (loop2): Ending clean mount [ 205.716003][ T6716] XFS (loop2): Quotacheck needed: Please wait. [ 205.867818][ T6716] XFS (loop2): Quotacheck: Done. [ 206.651582][ T28] audit: type=1800 audit(1794589081.285:5): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 206.989187][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 207.093945][ T3441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.425279][ T3441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.480076][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.507054][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.530550][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.546462][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.558348][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.567651][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.423284][ T3441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.047084][ C0] net_ratelimit: 27 callbacks suppressed [ 210.200259][ T5797] Bluetooth: hci2: command tx timeout [ 210.982289][ T3441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.459313][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 211.573727][ T6741] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.595056][ T5798] Bluetooth: hci2: command tx timeout [ 213.601406][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 213.607957][ T5097] Bluetooth: hci1: command 0x0406 tx timeout [ 213.614129][ T5097] Bluetooth: hci3: command 0x0406 tx timeout [ 214.137231][ T3441] tipc: Left network mode [ 214.647257][ C1] net_ratelimit: 24 callbacks suppressed [ 215.642808][ T6741] chnl_net:caif_netlink_parms(): no params data found [ 215.688324][ T5803] Bluetooth: hci2: command tx timeout [ 216.248549][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.255972][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.263556][ T6741] bridge_slave_0: entered allmulticast mode [ 216.271769][ T6741] bridge_slave_0: entered promiscuous mode [ 216.282741][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.290481][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.298466][ T6741] bridge_slave_1: entered allmulticast mode [ 216.365582][ T6741] bridge_slave_1: entered promiscuous mode [ 216.622099][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.717663][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.772381][ T3441] hsr_slave_0: left promiscuous mode [ 216.789779][ T3441] hsr_slave_1: left promiscuous mode [ 216.797548][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.805077][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.822343][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.847678][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.921765][ T3441] veth1_macvtap: left promiscuous mode [ 216.936625][ T3441] veth0_macvtap: left promiscuous mode [ 216.947595][ T3441] veth1_vlan: left promiscuous mode [ 216.953316][ T3441] veth0_vlan: left promiscuous mode [ 217.767892][ T5803] Bluetooth: hci2: command tx timeout [ 218.306712][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 218.375447][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 218.441789][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.516043][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.020418][ T3441] bond0 (unregistering): Released all slaves [ 219.211998][ T6741] team0: Port device team_slave_0 added [ 219.229505][ T6741] team0: Port device team_slave_1 added [ 219.375394][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.393972][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.432439][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.491456][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.499393][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.526163][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.686985][ C0] net_ratelimit: 34 callbacks suppressed [ 219.754171][ T6741] hsr_slave_0: entered promiscuous mode [ 219.780236][ T6741] hsr_slave_1: entered promiscuous mode [ 220.512270][ T6741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.543666][ T6741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.566711][ T6741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.617785][ T6741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.836362][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.873262][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.906153][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.913430][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.932949][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.940197][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.324466][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.763740][ T6741] veth0_vlan: entered promiscuous mode [ 221.791860][ T6741] veth1_vlan: entered promiscuous mode [ 221.866347][ T6741] veth0_macvtap: entered promiscuous mode [ 221.905452][ T6741] veth1_macvtap: entered promiscuous mode [ 221.956730][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.975967][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.986512][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.998503][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.008976][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.023023][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.039722][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.058804][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.072160][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.084342][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.096159][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.106212][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.121181][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.134842][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.158184][ T6741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.182424][ T6741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.191757][ T6741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.205670][ T6741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.382758][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.413432][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.491500][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.510043][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.731460][ T6880] loop2: detected capacity change from 0 to 33280 [ 222.813559][ T6878] loop1: detected capacity change from 0 to 36864 [ 222.821898][ T6878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.832040][ T6878] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.840239][ T6878] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 222.850147][ T6878] EXT4-fs (loop1): group descriptors corrupted! [ 222.917640][ T6880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.954888][ T6881] loop4: detected capacity change from 0 to 2048 [ 222.977072][ T6880] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.018833][ T6881] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 225.047095][ C1] net_ratelimit: 69 callbacks suppressed [ 226.487060][ T6898] Zero length message leads to an empty skb [ 226.777883][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.038673][ T6911] loop4: detected capacity change from 0 to 32768 [ 227.119557][ T6911] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.290151][ T6911] XFS (loop4): Ending clean mount [ 227.318457][ T6911] XFS (loop4): Quotacheck needed: Please wait. [ 228.185531][ T6911] XFS (loop4): Quotacheck: Done. [ 228.546056][ T28] audit: type=1800 audit(1794589103.555:6): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.195" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4428 res=0 errno=0 [ 229.026134][ T6741] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.406998][ C0] net_ratelimit: 47 callbacks suppressed [ 231.185749][ T6944] loop1: detected capacity change from 0 to 1024 [ 231.522625][ T6950] loop4: detected capacity change from 0 to 512 [ 235.696994][ C1] net_ratelimit: 30 callbacks suppressed [ 236.457041][ T5907] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 236.679604][ T5907] usb 1-1: config 1 has too many interfaces: 241, using maximum allowed: 32 [ 236.704973][ T5907] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 241 [ 236.746116][ T5907] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 236.765688][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.790470][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.819078][ T5907] usb 1-1: Product: syz [ 236.823333][ T5907] usb 1-1: Manufacturer: syz [ 236.847000][ T5907] usb 1-1: SerialNumber: syz [ 237.094560][ T6969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.527498][ T6969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.307473][ T7000] futex_wake_op: syz.1.212 tries to shift op by 144; fix this program [ 239.318584][ T7000] futex_wake_op: syz.1.212 tries to shift op by 144; fix this program [ 240.728854][ T5907] cdc_ncm 1-1:1.0: failed to get mac address [ 240.755112][ T5907] cdc_ncm 1-1:1.0: bind() failure [ 240.818414][ T5907] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 240.840198][ T5907] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 240.868766][ T5907] usbtest: probe of 1-1:1.1 failed with error -71 [ 240.930670][ T5907] usb 1-1: USB disconnect, device number 5 [ 241.048609][ C0] net_ratelimit: 43 callbacks suppressed [ 246.756414][ T60] net_ratelimit: 37 callbacks suppressed [ 249.044452][ T7055] syzkaller0: entered promiscuous mode [ 249.077097][ T7055] syzkaller0: entered allmulticast mode [ 249.775118][ T7060] bridge0: port 3(bond0) entered blocking state [ 249.786229][ T7060] bridge0: port 3(bond0) entered disabled state [ 249.795224][ T7060] bond0: entered allmulticast mode [ 249.801289][ T7060] bond_slave_0: entered allmulticast mode [ 249.811742][ T7060] bond_slave_1: entered allmulticast mode [ 249.835466][ T7060] bond0: entered promiscuous mode [ 249.924588][ T7060] bond_slave_0: entered promiscuous mode [ 249.985103][ T7060] bond_slave_1: entered promiscuous mode [ 250.082254][ T7060] bridge0: port 3(bond0) entered blocking state [ 250.088789][ T7060] bridge0: port 3(bond0) entered forwarding state [ 251.767002][ C0] net_ratelimit: 39 callbacks suppressed [ 256.413428][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.421143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.446972][ C1] net_ratelimit: 37 callbacks suppressed [ 260.710642][ T7142] loop0: detected capacity change from 0 to 33792 [ 260.748424][ T7142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.755386][ T7142] EXT4-fs: inline encryption not supported [ 260.793760][ T7142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.846059][ T7142] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.949046][ T7142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.047245][ T7142] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.301318][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.606600][ C0] net_ratelimit: 39 callbacks suppressed [ 263.005739][ T7163] ceph: No mds server is up or the cluster is laggy [ 263.122595][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 263.277244][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 264.455910][ T28] audit: type=1326 audit(1794589139.485:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.0.244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x0 [ 264.844964][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 265.463703][ T7197] CIFS: Attempting to mount //127.0.0.1/share [ 265.520559][ T7204] CIFS: VFS: Invalid response size 0 for command 0 [ 265.557608][ T7204] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 265.587915][ T7204] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 265.999506][ T7201] rxe_eth0 speed is unknown, defaulting to 1000 [ 266.101412][ T7197] CIFS: VFS: cifs_mount failed w/return code = -112 [ 267.755206][ T7227] net_ratelimit: 50 callbacks suppressed [ 267.755223][ T7227] ip_tables: iptables: counters copy to user failed while replacing table [ 268.137554][ T7236] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 269.176027][ T7239] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 269.285527][ T7242] macvlan2: entered promiscuous mode [ 269.311883][ T7242] macvlan2: entered allmulticast mode [ 269.319165][ T7242] bond1: entered promiscuous mode [ 269.324259][ T7242] bridge1: entered promiscuous mode [ 269.331049][ T7242] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.965235][ T7242] bond1: left promiscuous mode [ 270.975592][ T7242] bridge1: left promiscuous mode [ 273.155622][ T7271] loop0: detected capacity change from 0 to 256 [ 273.206455][ T7271] exfat: Deprecated parameter 'utf8' [ 273.303912][ T7271] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 273.536939][ C0] net_ratelimit: 42 callbacks suppressed [ 274.893715][ T7303] geneve2: entered promiscuous mode [ 276.193976][ T7313] bridge1: entered promiscuous mode [ 276.221337][ T7313] bridge1: entered allmulticast mode [ 277.101030][ T7313] team0: Port device bridge1 added [ 277.217861][ T7319] bridge0: port 3(team0) entered blocking state [ 277.246195][ T7319] bridge0: port 3(team0) entered disabled state [ 277.291329][ T7319] team0: entered allmulticast mode [ 277.296659][ T7319] team_slave_0: entered allmulticast mode [ 277.304812][ T7319] team_slave_1: entered allmulticast mode [ 277.334681][ T7319] team0: entered promiscuous mode [ 277.347046][ T7319] team_slave_0: entered promiscuous mode [ 277.358932][ T7319] team_slave_1: entered promiscuous mode [ 277.389957][ T7319] bridge0: port 3(team0) entered blocking state [ 277.396932][ T7319] bridge0: port 3(team0) entered forwarding state [ 278.566201][ C1] net_ratelimit: 46 callbacks suppressed [ 278.684252][ T7342] rxe_eth0 speed is unknown, defaulting to 1000 [ 279.235859][ T7358] netlink: 'syz.2.278': attribute type 4 has an invalid length. [ 279.481699][ T7366] loop1: detected capacity change from 0 to 256 [ 280.213660][ T7378] veth0: entered promiscuous mode [ 280.290823][ T7378] veth0: left promiscuous mode [ 282.030400][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 283.928194][ T3441] net_ratelimit: 32 callbacks suppressed [ 284.137297][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 284.382629][ T8] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 284.409103][ T8] usb 3-1: config 1 has no interface number 0 [ 284.435640][ T8] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 284.503641][ T8] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 284.551363][ T8] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 284.600060][ T8] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 284.626987][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.651864][ T8] usb 3-1: Product: syz [ 284.659570][ T8] usb 3-1: Manufacturer: syz [ 284.664416][ T8] usb 3-1: SerialNumber: syz [ 284.717889][ T7422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.754848][ T7422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.852529][ T8] usb 3-1: Expected 3 endpoints, found: 2 [ 285.155742][ T8] usb 3-1: USB disconnect, device number 4 [ 288.955494][ T3441] net_ratelimit: 26 callbacks suppressed [ 292.064564][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 292.111250][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 292.188278][ T7495] syz_tun: entered promiscuous mode [ 292.216793][ T7495] syz_tun: left promiscuous mode [ 294.224336][ T7523] net_ratelimit: 32 callbacks suppressed [ 294.224355][ T7523] ip_tables: iptables: counters copy to user failed while replacing table [ 299.367049][ C1] net_ratelimit: 34 callbacks suppressed [ 300.233424][ T7562] loop1: detected capacity change from 0 to 33280 [ 300.253537][ T7562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 300.284938][ T7562] System zones: 1-12 [ 300.294511][ T7560] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 300.317491][ T7562] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.319: missing EA_INODE flag [ 300.334412][ T7562] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.319: error while reading EA inode 12 err=-117 [ 300.354733][ T7562] EXT4-fs (loop1): 1 orphan inode deleted [ 300.370292][ T7562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.663363][ T7575] tipc: Started in network mode [ 301.673359][ T7575] tipc: Node identity ac1414aa, cluster identity 4711 [ 301.688541][ T7575] tipc: New replicast peer: 172.20.20.187 [ 301.721966][ T7575] tipc: Enabled bearer , priority 10 [ 301.822098][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.171020][ T27] tipc: Node number set to 2886997162 [ 303.231608][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 303.282729][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 303.334587][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.474184][ T7590] bond1: (slave bond0): making interface the new active one [ 303.512836][ T7590] bond1: (slave bond0): Enslaving as an active interface with an up link [ 303.563577][ T7593] netlink: 'syz.1.331': attribute type 4 has an invalid length. [ 303.594930][ T7593] netlink: 152 bytes leftover after parsing attributes in process `syz.1.331'. [ 303.623193][ T7593] .`: renamed from bond0 (while UP) [ 303.711667][ T7598] lo: entered promiscuous mode [ 303.740055][ T7598] tunl0: entered promiscuous mode [ 303.804916][ T7598] gre0: entered promiscuous mode [ 303.844279][ T7598] gretap0: entered promiscuous mode [ 303.884689][ T7598] erspan0: entered promiscuous mode [ 304.567052][ C0] net_ratelimit: 32 callbacks suppressed [ 305.644551][ T7598] ip_vti0: entered promiscuous mode [ 305.685151][ T7598] ip6_vti0: entered promiscuous mode [ 305.723888][ T7598] sit0: entered promiscuous mode [ 305.957432][ T7598] ip6tnl0: entered promiscuous mode [ 305.997725][ T7598] ip6gre0: entered promiscuous mode [ 306.097397][ T7598] syz_tun: entered promiscuous mode [ 306.520011][ T7598] ip6gretap0: entered promiscuous mode [ 306.577865][ T7598] bridge0: port 3(bond0) entered disabled state [ 306.584519][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.592423][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.666525][ T7598] bridge0: entered promiscuous mode [ 306.796216][ T7598] team0: entered promiscuous mode [ 306.822134][ T7598] team_slave_0: entered promiscuous mode [ 306.847379][ T7598] team_slave_1: entered promiscuous mode [ 306.908861][ T7598] dummy0: entered promiscuous mode [ 306.975122][ T7598] nlmon0: entered promiscuous mode [ 307.004150][ T7598] caif0: entered promiscuous mode [ 307.066578][ T7598] batadv0: entered promiscuous mode [ 307.148057][ T7598] vxcan0: entered promiscuous mode [ 307.200365][ T7598] vxcan1: entered promiscuous mode [ 307.240433][ T7598] veth0: entered promiscuous mode [ 307.281486][ T7598] veth1: entered promiscuous mode [ 307.361107][ T7598] wg0: entered promiscuous mode [ 307.445624][ T7598] wg1: entered promiscuous mode [ 307.516417][ T7598] wg2: entered promiscuous mode [ 307.586478][ T7598] veth0_to_bridge: entered promiscuous mode [ 307.764340][ T7598] veth1_to_bridge: entered promiscuous mode [ 307.891814][ T7598] veth0_to_bond: entered promiscuous mode [ 308.067736][ T7598] veth1_to_bond: entered promiscuous mode [ 308.231112][ T7598] veth0_to_team: entered promiscuous mode [ 308.329608][ T7598] veth1_to_team: entered promiscuous mode [ 308.439712][ T7598] veth0_to_batadv: entered promiscuous mode [ 308.498220][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.545905][ T7598] batadv_slave_0: entered promiscuous mode [ 308.575575][ T7598] veth1_to_batadv: entered promiscuous mode [ 308.608011][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.707937][ T7598] batadv_slave_1: entered promiscuous mode [ 308.774454][ T7598] xfrm0: entered promiscuous mode [ 310.256970][ C0] net_ratelimit: 28 callbacks suppressed [ 310.529489][ T7598] veth0_to_hsr: entered promiscuous mode [ 310.588051][ T7598] veth1_to_hsr: entered promiscuous mode [ 310.647707][ T7598] hsr0: entered promiscuous mode [ 310.678244][ T7598] veth1_virt_wifi: entered promiscuous mode [ 310.737957][ T7598] veth0_virt_wifi: entered promiscuous mode [ 310.766203][ T7598] virt_wifi0: entered promiscuous mode [ 310.871005][ T7598] vlan0: entered promiscuous mode [ 310.893854][ T7598] vlan1: entered promiscuous mode [ 310.946411][ T7598] macvlan0: entered promiscuous mode [ 310.987377][ T7598] macvlan1: entered promiscuous mode [ 311.024177][ T7598] ipvtap0: entered promiscuous mode [ 311.061723][ T7598] ipvlan0: entered promiscuous mode [ 311.102355][ T7598] ipvlan1: entered promiscuous mode [ 312.397166][ T7598] macvtap0: entered promiscuous mode [ 312.433765][ T7598] macsec0: entered promiscuous mode [ 312.488974][ T7598] geneve0: entered promiscuous mode [ 312.521680][ T7598] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.536946][ T7598] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.557286][ T7598] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.566290][ T7598] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.627272][ T7598] geneve1: entered promiscuous mode [ 312.657366][ T7598] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 312.696592][ T7598] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 312.729976][ T7598] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 312.789085][ T7598] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 312.818424][ T7598] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 312.825646][ T7598] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 312.854231][ T7598] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 314.642643][ T7658] Device name cannot be null; rc = [-22] [ 315.376984][ C0] net_ratelimit: 14 callbacks suppressed [ 317.496073][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 317.852988][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.859922][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.966980][ C1] net_ratelimit: 21 callbacks suppressed [ 326.247222][ C0] net_ratelimit: 17 callbacks suppressed [ 330.250079][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 331.286946][ C1] net_ratelimit: 18 callbacks suppressed [ 336.336953][ C0] net_ratelimit: 11 callbacks suppressed [ 341.367078][ C1] net_ratelimit: 17 callbacks suppressed [ 341.398815][ T28] audit: type=1800 audit(1794589216.435:8): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.384" name="/" dev="fuse" ino=1 res=0 errno=0 [ 341.774454][ T7845] tipc: Started in network mode [ 341.799333][ T7845] tipc: Node identity 080211, cluster identity 4711 [ 341.817045][ T7845] tipc: Enabled bearer , priority 0 [ 341.836329][ T7850] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 341.875969][ T7845] tipc: Resetting bearer [ 342.393717][ T7861] loop2: detected capacity change from 0 to 8192 [ 342.640585][ T7861] overlayfs: failed to resolve './file2': -2 [ 342.983673][ T5868] tipc: Node number set to 134353152 [ 346.486903][ C1] net_ratelimit: 19 callbacks suppressed [ 347.385663][ T7895] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 348.726629][ T7905] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 348.735062][ T7905] dummy0: left promiscuous mode [ 348.752012][ T7905] dummy0: entered promiscuous mode [ 348.758726][ T7905] team0: Port device dummy0 added [ 349.030035][ T7909] tipc: Enabling of bearer rejected, already enabled [ 350.680449][ T7926] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 350.720626][ T28] audit: type=1800 audit(1794589225.755:9): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.396" name="UDC" dev="configfs" ino=13864 res=0 errno=0 [ 350.745892][ T7926] Need at least one configuration in g1. [ 350.753052][ T7926] udc dummy_udc.0: failed to start g1: -22 [ 350.758981][ T7926] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 350.774876][ T7926] UDC core: g1: couldn't find an available UDC or it's busy [ 351.686461][ T27] IPVS: starting estimator thread 0... [ 351.687093][ C0] net_ratelimit: 32 callbacks suppressed [ 354.157313][ T7948] IPVS: using max 17 ests per chain, 40800 per kthread [ 355.431429][ T7956] jffs2: notice: (7956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 355.497644][ T7962] jffs2: notice: (7962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 356.345264][ T5868] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 356.598063][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 356.700120][ T5868] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 356.805337][ T5868] usb 3-1: config 224 has too many interfaces: 101, using maximum allowed: 32 [ 356.960165][ T5868] usb 3-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config [ 357.063761][ T5868] usb 3-1: config 224 has 0 interfaces, different from the descriptor's value: 101 [ 357.107148][ T5868] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 357.126914][ C0] net_ratelimit: 27 callbacks suppressed [ 357.153376][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.182914][ T5868] usb 3-1: Product: syz [ 357.207034][ T5868] usb 3-1: Manufacturer: syz [ 357.224214][ T5868] usb 3-1: SerialNumber: syz [ 359.012980][ T23] usb 3-1: USB disconnect, device number 5 [ 362.779568][ C0] net_ratelimit: 15 callbacks suppressed [ 368.417246][ C0] net_ratelimit: 26 callbacks suppressed [ 371.285471][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 373.527164][ C1] net_ratelimit: 19 callbacks suppressed [ 376.407258][ T8049] netlink: 'syz.4.441': attribute type 3 has an invalid length. [ 376.414955][ T8049] netlink: 3 bytes leftover after parsing attributes in process `syz.4.441'. [ 377.194638][ T8053] netlink: 14 bytes leftover after parsing attributes in process `syz.1.442'. [ 377.730069][ T8056] syz_tun: entered allmulticast mode [ 377.819773][ T8056] pimreg: entered allmulticast mode [ 378.351459][ T8055] syz_tun: left allmulticast mode [ 378.566989][ C0] net_ratelimit: 18 callbacks suppressed [ 378.735031][ T8066] sg_write: data in/out 417804/136 bytes for SCSI command 0x0-- guessing data in; [ 378.735031][ T8066] program syz.2.445 not setting count and/or reply_len properly [ 379.518619][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.524995][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.280044][ T8076] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 383.628876][ T8093] loop1: detected capacity change from 0 to 164 [ 383.686903][ C1] net_ratelimit: 25 callbacks suppressed [ 383.693910][ T28] audit: type=1326 audit(1794589258.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 383.823301][ T28] audit: type=1326 audit(1794589258.705:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 383.887039][ T28] audit: type=1326 audit(1794589258.705:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 383.986710][ T28] audit: type=1326 audit(1794589258.705:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 384.091175][ T28] audit: type=1326 audit(1794589258.705:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 384.279073][ T28] audit: type=1326 audit(1794589258.715:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 386.608053][ T28] audit: type=1326 audit(1794589258.715:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 386.761095][ T28] audit: type=1326 audit(1794589258.715:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 386.816951][ T28] audit: type=1326 audit(1794589258.715:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 386.890226][ T28] audit: type=1326 audit(1794589258.715:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.1.452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca93a94d9 code=0x7ffc0000 [ 388.806946][ C1] net_ratelimit: 25 callbacks suppressed [ 390.899906][ T8133] overlayfs: failed to clone upperpath [ 393.907418][ C1] net_ratelimit: 32 callbacks suppressed [ 398.442185][ T8155] netlink: 68 bytes leftover after parsing attributes in process `syz.1.470'. [ 399.126983][ C1] net_ratelimit: 25 callbacks suppressed [ 401.010152][ T8167] tipc: Enabling of bearer rejected, failed to enable media [ 402.883096][ T8173] netlink: 'syz.0.468': attribute type 10 has an invalid length. [ 404.138445][ C1] net_ratelimit: 17 callbacks suppressed [ 404.415147][ T8173] team0 (unregistering): Port device team_slave_0 removed [ 404.505780][ T8173] team0 (unregistering): Port device team_slave_1 removed [ 406.320606][ T8194] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 406.328164][ T8194] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 407.592456][ T8201] loop1: detected capacity change from 0 to 128 [ 407.677782][ T8201] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 407.708937][ T8202] lo: entered promiscuous mode [ 407.857529][ T8202] tunl0: entered promiscuous mode [ 407.925807][ T8202] gre0: entered promiscuous mode [ 409.190587][ C0] net_ratelimit: 21 callbacks suppressed [ 409.306229][ T8202] gretap0: entered promiscuous mode [ 409.811306][ T8202] erspan0: entered promiscuous mode [ 410.593937][ T8202] ip_vti0: entered promiscuous mode [ 410.724406][ T8202] ip6_vti0: entered promiscuous mode [ 411.283370][ T8202] sit0: entered promiscuous mode [ 411.787521][ T8202] ip6tnl0: entered promiscuous mode [ 411.864567][ T8202] ip6gre0: entered promiscuous mode [ 412.790842][ T8202] syz_tun: entered promiscuous mode [ 412.846335][ T8202] ip6gretap0: entered promiscuous mode [ 412.907945][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.915377][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.944998][ T8202] bridge0: entered promiscuous mode [ 413.077764][ T8202] vcan0: entered promiscuous mode [ 413.138066][ T8202] bond0: entered promiscuous mode [ 413.143386][ T8202] bond_slave_0: entered promiscuous mode [ 413.157165][ T8202] bond_slave_1: entered promiscuous mode [ 413.242904][ T8202] dummy0: entered promiscuous mode [ 413.315189][ T8202] nlmon0: entered promiscuous mode [ 413.338508][ T8202] caif0: entered promiscuous mode [ 413.392543][ T8202] batadv0: entered promiscuous mode [ 413.487284][ T8202] vxcan0: entered promiscuous mode [ 413.513310][ T8202] vxcan1: entered promiscuous mode [ 413.568611][ T8202] veth0: entered promiscuous mode [ 413.638315][ T8202] veth1: entered promiscuous mode [ 414.071820][ T8202] wg0: entered promiscuous mode [ 414.504360][ T7734] net_ratelimit: 29 callbacks suppressed [ 414.542695][ T8202] wg1: entered promiscuous mode [ 414.585628][ T8202] wg2: entered promiscuous mode [ 414.771756][ T8202] veth0_to_bridge: entered promiscuous mode [ 414.934615][ T8202] veth1_to_bridge: entered promiscuous mode [ 415.025572][ T8202] veth0_to_bond: entered promiscuous mode [ 415.111535][ T8202] veth1_to_bond: entered promiscuous mode [ 415.174081][ T8202] veth0_to_team: entered promiscuous mode [ 415.191751][ T8202] team_slave_0: entered promiscuous mode [ 415.201427][ T8202] veth1_to_team: entered promiscuous mode [ 415.215178][ T8202] team_slave_1: entered promiscuous mode [ 415.223150][ T8202] veth0_to_batadv: entered promiscuous mode [ 415.234067][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.244146][ T8202] batadv_slave_0: entered promiscuous mode [ 415.265081][ T8202] veth1_to_batadv: entered promiscuous mode [ 415.276776][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.287955][ T8202] batadv_slave_1: entered promiscuous mode [ 415.305984][ T8202] xfrm0: entered promiscuous mode [ 415.321863][ T8202] veth0_to_hsr: entered promiscuous mode [ 415.348831][ T8202] veth1_to_hsr: entered promiscuous mode [ 415.375071][ T8202] hsr0: entered promiscuous mode [ 415.394213][ T8202] veth1_virt_wifi: entered promiscuous mode [ 415.422100][ T8202] veth0_virt_wifi: entered promiscuous mode [ 415.450982][ T8202] virt_wifi0: entered promiscuous mode [ 415.513066][ T8202] vlan0: entered promiscuous mode [ 415.530103][ T8202] vlan1: entered promiscuous mode [ 415.539872][ T8202] macvlan0: entered promiscuous mode [ 415.563338][ T8202] macvlan1: entered promiscuous mode [ 415.578876][ T8202] ipvtap0: entered promiscuous mode [ 415.591255][ T8202] ipvlan0: entered promiscuous mode [ 415.602619][ T8202] ipvlan1: entered promiscuous mode [ 415.636569][ T8202] macvtap0: entered promiscuous mode [ 415.649517][ T8202] macsec0: entered promiscuous mode [ 415.662193][ T8202] geneve0: entered promiscuous mode [ 415.677073][ T8202] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.686113][ T8202] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.699020][ T8202] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.711769][ T8202] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.732824][ T8202] geneve1: entered promiscuous mode [ 415.839734][ T8202] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 415.872164][ T8202] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 415.894393][ T8202] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 415.917986][ T8202] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 415.933775][ T8202] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 415.947172][ T8202] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 415.954462][ T8202] bond1: entered promiscuous mode [ 415.959870][ T8202] bridge1: entered promiscuous mode [ 415.975371][ T8202] syztnl2: entered promiscuous mode [ 415.981284][ T8210] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 415.997616][ T8210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.005415][ T8210] batadv0: entered promiscuous mode [ 416.010834][ T8210] batadv0: entered allmulticast mode [ 416.017292][ T8210] team0: Port device batadv0 added [ 416.109252][ T8243] netlink: 'syz.2.489': attribute type 10 has an invalid length. [ 416.134824][ T7727] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 416.147157][ T7727] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 416.217686][ T8243] team0 (unregistering): Port device team_slave_0 removed [ 416.256582][ T8243] team0 (unregistering): Port device team_slave_1 removed [ 416.276055][ T8243] dummy0: left promiscuous mode [ 416.312980][ T8243] team0 (unregistering): Port device dummy0 removed [ 419.616927][ C0] net_ratelimit: 22 callbacks suppressed [ 422.113060][ T8294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.491'. [ 425.376911][ C0] net_ratelimit: 11 callbacks suppressed [ 429.338666][ T8322] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 429.558363][ T8322] team0 (unregistering): Port device team_slave_0 removed [ 429.592121][ T8322] team0 (unregistering): Port device team_slave_1 removed [ 430.966878][ C1] net_ratelimit: 26 callbacks suppressed [ 431.521618][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 431.521632][ T28] audit: type=1400 audit(1794589306.555:31): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=8334 comm="syz.2.515" [ 436.167445][ C1] net_ratelimit: 22 callbacks suppressed [ 437.115929][ T8363] bridge0: port 3(bond0) entered blocking state [ 437.132829][ T8363] bridge0: port 3(bond0) entered disabled state [ 437.148853][ T8363] bond0: entered allmulticast mode [ 437.164652][ T8363] bond_slave_0: entered allmulticast mode [ 437.175379][ T8363] bond_slave_1: entered allmulticast mode [ 440.735100][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.741829][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.247541][ C0] net_ratelimit: 15 callbacks suppressed [ 443.613534][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 443.934461][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.540'. [ 443.945093][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.540'. [ 443.984611][ T8426] syz_tun: entered promiscuous mode [ 444.010186][ T8426] syz_tun: left promiscuous mode [ 444.533374][ T8436] CIFS: Attempting to mount //127.0.0.1/share [ 444.610107][ T8439] CIFS: VFS: Invalid response size 0 for command 0 [ 444.630305][ T8436] CIFS: VFS: cifs_mount failed w/return code = -5 [ 446.406871][ C1] net_ratelimit: 9 callbacks suppressed [ 450.159074][ T8471] sctp: [Deprecated]: syz.2.544 (pid 8471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.159074][ T8471] Use struct sctp_sack_info instead [ 451.697417][ C0] net_ratelimit: 14 callbacks suppressed [ 454.300790][ T8496] netlink: 'syz.2.553': attribute type 4 has an invalid length. [ 457.376931][ C0] net_ratelimit: 14 callbacks suppressed [ 457.407162][ T8518] netlink: 80 bytes leftover after parsing attributes in process `syz.4.549'. [ 458.349474][ T8528] rxe_eth0 speed is unknown, defaulting to 1000 [ 459.084309][ T8523] loop2: detected capacity change from 0 to 32768 [ 459.187668][ T8523] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 460.536191][ T8523] XFS (loop2): Ending clean mount [ 462.566993][ C1] net_ratelimit: 18 callbacks suppressed [ 463.241706][ T5788] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 467.616858][ C0] net_ratelimit: 9 callbacks suppressed [ 469.914410][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 473.286866][ C1] net_ratelimit: 13 callbacks suppressed [ 475.578101][ T8654] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 476.751400][ T8654] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 476.786984][ T8659] tipc: Enabling of bearer rejected, already enabled [ 479.287270][ C1] net_ratelimit: 16 callbacks suppressed [ 481.017045][ T790] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 482.393015][ T790] usb 3-1: not running at top speed; connect to a high speed hub [ 482.432504][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.479409][ T790] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 482.507393][ T790] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 482.526151][ T790] usb 3-1: Product: syz [ 482.536279][ T790] usb 3-1: Manufacturer: syz [ 482.584251][ T790] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 482.796019][ T790] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 482.855126][ T790] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 482.890194][ T790] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 482.977023][ T790] usb 3-1: USB disconnect, device number 6 [ 483.377756][ T8702] lo: entered allmulticast mode [ 483.397705][ T8701] lo: left allmulticast mode [ 484.326883][ C1] net_ratelimit: 14 callbacks suppressed [ 487.013668][ T8265] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 487.141724][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 487.158969][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 487.183186][ T8719] ceph: No mds server is up or the cluster is laggy [ 487.211736][ T8265] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 487.269360][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.313438][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.393570][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.450560][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.484185][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.497133][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.518124][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.528402][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.559033][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.576952][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.598840][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.616892][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.647205][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.663197][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.687850][ T8265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.702452][ T8265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 487.741648][ T8265] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 487.756855][ T8265] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 487.796549][ T8265] usb 3-1: Product: syz [ 487.809814][ T8265] usb 3-1: Manufacturer: syz [ 488.793230][ T8265] usb 3-1: SerialNumber: syz [ 488.830702][ T8265] usb 3-1: config 0 descriptor?? [ 488.852440][ T8265] usb 3-1: can't set config #0, error -71 [ 488.894003][ T8265] usb 3-1: USB disconnect, device number 7 [ 489.686900][ C1] net_ratelimit: 19 callbacks suppressed [ 495.056879][ C0] net_ratelimit: 22 callbacks suppressed [ 496.032514][ T8789] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 496.032514][ T8789] [ 496.046534][ T8789] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 496.059368][ T8789] CIFS: Attempting to mount //127.0.0.1/share [ 497.192619][ T8789] CIFS: VFS: Error connecting to socket. Aborting operation. [ 497.200384][ T8789] CIFS: VFS: cifs_mount failed w/return code = -4 [ 500.726861][ C1] net_ratelimit: 18 callbacks suppressed [ 502.184587][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.191042][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.566920][ C0] net_ratelimit: 18 callbacks suppressed [ 507.538269][ T8832] netlink: 'syz.4.633': attribute type 1 has an invalid length. [ 507.618633][ T8832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.705914][ T8834] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 509.066912][ T8213] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 509.091866][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 509.153919][ T8832] bridge2: entered promiscuous mode [ 509.201347][ T8832] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 509.276969][ T8213] usb 3-1: Using ep0 maxpacket: 16 [ 509.330828][ T8213] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.390856][ T8213] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.501923][ T8213] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.591553][ T8213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.700255][ T8213] usb 3-1: Product: syz [ 509.764309][ T8213] usb 3-1: Manufacturer: syz [ 509.830068][ T8213] usb 3-1: SerialNumber: syz [ 510.685689][ T8213] usb 3-1: 0:2 : does not exist [ 510.752334][ T8213] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 510.835456][ T8213] usb 3-1: USB disconnect, device number 8 [ 511.884797][ T8840] udevd[8840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.016842][ C0] net_ratelimit: 22 callbacks suppressed [ 515.302629][ T8874] netlink: 64 bytes leftover after parsing attributes in process `syz.4.644'. [ 516.807894][ T8880] bridge0: port 4(syz_tun) entered blocking state [ 516.814517][ T8880] bridge0: port 4(syz_tun) entered disabled state [ 516.882627][ T8880] syz_tun: entered allmulticast mode [ 516.899749][ T8880] syz_tun: entered promiscuous mode [ 516.927653][ T8880] bridge0: port 4(syz_tun) entered blocking state [ 516.934310][ T8880] bridge0: port 4(syz_tun) entered forwarding state [ 517.056840][ C0] net_ratelimit: 10 callbacks suppressed [ 520.246593][ T8897] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 521.425910][ T8906] loop2: detected capacity change from 0 to 256 [ 522.246866][ C1] net_ratelimit: 16 callbacks suppressed [ 524.274029][ T8921] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 524.289370][ T8921] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 527.926866][ C1] net_ratelimit: 20 callbacks suppressed [ 528.947284][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.047516][ C0] net_ratelimit: 22 callbacks suppressed [ 535.286132][ T8999] syz_tun: entered promiscuous mode [ 535.334440][ T8998] syz_tun: left promiscuous mode [ 538.136019][ C0] net_ratelimit: 24 callbacks suppressed [ 539.596268][ T9022] tipc: Enabling of bearer rejected, failed to enable media [ 541.208971][ T9038] netlink: 52 bytes leftover after parsing attributes in process `syz.0.685'. [ 541.267047][ T9038] netlink: 76 bytes leftover after parsing attributes in process `syz.0.685'. [ 541.418160][ T9038] bridge0: left promiscuous mode [ 541.448339][ T9038] netlink: 52 bytes leftover after parsing attributes in process `syz.0.685'. [ 543.109027][ T9053] overlayfs: failed to clone lowerpath [ 543.846824][ C1] net_ratelimit: 20 callbacks suppressed [ 545.366992][ T8265] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 546.478775][ T8265] usb 3-1: device descriptor read/all, error -71 [ 546.987027][ T28] audit: type=1800 audit(1794589421.965:32): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.693" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 549.308437][ C1] net_ratelimit: 15 callbacks suppressed [ 554.406960][ C1] net_ratelimit: 12 callbacks suppressed [ 555.567386][ T9130] mmap: syz.0.705 (9130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 559.314519][ T9152] loop2: detected capacity change from 0 to 8 [ 559.926826][ C1] net_ratelimit: 20 callbacks suppressed [ 560.379424][ T9152] SQUASHFS error: xz decompression failed, data probably corrupt [ 560.387334][ T9152] SQUASHFS error: Failed to read block 0x108: -5 [ 560.393729][ T9152] SQUASHFS error: Unable to read metadata cache entry [106] [ 560.401472][ T9152] SQUASHFS error: Unable to read inode 0x11f [ 564.164723][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.176356][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.206815][ C1] net_ratelimit: 20 callbacks suppressed [ 565.458692][ T9178] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 565.652329][ T9178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.730712][ T9180] bond2: (slave ip6erspan0): making interface the new active one [ 565.775190][ T9180] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 570.566835][ C1] net_ratelimit: 16 callbacks suppressed [ 570.874172][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 571.073913][ T5803] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 572.371371][ T9247] tipc: Enabling of bearer rejected, failed to enable media [ 573.427205][ T5803] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 575.861653][ T9280] bridge0: port 3(bond0) entered blocking state [ 575.868137][ T9280] bridge0: port 3(bond0) entered forwarding state [ 575.875054][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.000881][ C1] net_ratelimit: 18 callbacks suppressed [ 576.414815][ T9280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.206859][ C1] net_ratelimit: 15 callbacks suppressed [ 583.358277][ T9311] xt_connbytes: Forcing CT accounting to be enabled [ 586.167504][ T28] audit: type=1326 audit(1794589461.195:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 586.290408][ T28] audit: type=1326 audit(1794589461.195:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 586.394222][ T28] audit: type=1326 audit(1794589461.195:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 586.476867][ T28] audit: type=1326 audit(1794589461.205:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 586.538145][ T28] audit: type=1326 audit(1794589461.205:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 586.672792][ T9329] xt_TCPMSS: Only works on TCP SYN packets [ 586.886798][ C1] net_ratelimit: 4 callbacks suppressed [ 587.436957][ T28] audit: type=1326 audit(1794589461.205:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 587.551447][ T28] audit: type=1326 audit(1794589461.205:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f820eb69d0e code=0x7ffc0000 [ 587.613604][ T8267] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 587.623307][ T28] audit: type=1326 audit(1794589461.205:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f820eb69d0e code=0x7ffc0000 [ 587.647431][ T28] audit: type=1326 audit(1794589461.205:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 587.671731][ T28] audit: type=1326 audit(1794589461.205:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 587.811108][ T8267] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 588.101631][ T8267] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 589.236778][ T8267] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 589.363462][ T9331] ceph: No mds server is up or the cluster is laggy [ 592.197756][ C1] net_ratelimit: 18 callbacks suppressed [ 593.894089][ T9370] Bluetooth: ISO socket layer initialized [ 593.971390][ T5803] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 595.853798][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 595.853854][ T28] audit: type=1800 audit(1794589469.085:60): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.762" name="file0" dev="overlay" ino=1054 res=0 errno=0 [ 596.093467][ T9381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.170851][ T9382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.193248][ T9381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.863562][ C0] net_ratelimit: 10 callbacks suppressed [ 599.123658][ T5803] Bluetooth: hci2: Opcode 0x2062 failed: -110 [ 599.131182][ T9380] Bluetooth: hci2: command 0x0406 tx timeout [ 599.280620][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 601.206947][ T9394] Bluetooth: hci2: command 0x0406 tx timeout [ 601.213362][ T5803] Bluetooth: hci2: Opcode 0x2065 failed: -110 [ 602.993548][ T7736] net_ratelimit: 24 callbacks suppressed [ 605.926900][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 606.313887][ T5803] Bluetooth: hci2: unexpected event for opcode 0x200f [ 608.407237][ C1] net_ratelimit: 21 callbacks suppressed [ 613.527120][ C0] net_ratelimit: 14 callbacks suppressed [ 619.366830][ C1] net_ratelimit: 10 callbacks suppressed [ 620.814926][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 620.928153][ T9517] gtp0: entered allmulticast mode [ 625.063586][ T11] net_ratelimit: 16 callbacks suppressed [ 625.078772][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.085469][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.063369][ T9559] netlink: 'syz.4.809': attribute type 11 has an invalid length. [ 630.646863][ C0] net_ratelimit: 16 callbacks suppressed [ 635.768695][ C0] net_ratelimit: 10 callbacks suppressed [ 641.847030][ C1] net_ratelimit: 17 callbacks suppressed [ 644.289705][ T9634] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 644.573200][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.717313][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.728318][ T9636] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 644.753203][ T9636] bond0: (slave gre1): Error -95 calling set_mac_address [ 645.135438][ T9637] gretap1: entered promiscuous mode [ 645.160947][ T9637] bond0: (slave gretap1): making interface the new active one [ 645.174641][ T9637] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 645.343581][ T9638] macvlan2: entered promiscuous mode [ 645.384747][ T9638] macvlan2: entered allmulticast mode [ 645.405425][ T9638] bond0: entered promiscuous mode [ 645.421977][ T9638] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 645.454770][ T9638] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 645.483537][ T9638] bond0: left promiscuous mode [ 646.017608][ T5803] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 647.469252][ T7727] net_ratelimit: 18 callbacks suppressed [ 653.856824][ C0] net_ratelimit: 11 callbacks suppressed [ 654.907337][ T9703] siw: device registration error -23 [ 658.966864][ C1] net_ratelimit: 19 callbacks suppressed [ 659.684115][ T9733] loop2: detected capacity change from 0 to 256 [ 661.795352][ T9750] tipc: Enabling of bearer rejected, failed to enable media [ 663.758256][ T9767] sctp: [Deprecated]: syz.4.853 (pid 9767) Use of int in max_burst socket option. [ 663.758256][ T9767] Use struct sctp_assoc_value instead [ 664.006812][ C0] net_ratelimit: 15 callbacks suppressed [ 666.501336][ T9779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.859'. [ 669.286764][ C1] net_ratelimit: 11 callbacks suppressed [ 669.755953][ T9793] IPVS: lblc: TCP 127.0.0.1:21 - no destination available [ 670.807129][ C0] IPVS: lblc: TCP 127.0.0.1:21 - no destination available [ 674.727094][ C0] net_ratelimit: 16 callbacks suppressed [ 676.933353][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 677.586629][ T9834] overlayfs: failed to clone lowerpath [ 680.130982][ C1] net_ratelimit: 15 callbacks suppressed [ 680.814307][ T9848] blktrace: Concurrent blktraces are not allowed on loop2 [ 681.610150][ T9847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.876'. [ 685.250154][ C1] net_ratelimit: 8 callbacks suppressed [ 686.508239][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.514641][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.537159][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 687.546075][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 690.296189][ C1] net_ratelimit: 27 callbacks suppressed [ 695.686766][ C1] net_ratelimit: 15 callbacks suppressed [ 701.606749][ C1] net_ratelimit: 18 callbacks suppressed [ 703.099684][ T9962] ipt_REJECT: TCP_RESET invalid for non-tcp [ 705.466890][ T5865] IPVS: starting estimator thread 0... [ 705.556834][ T9974] IPVS: using max 17 ests per chain, 40800 per kthread [ 705.754363][ T9980] tipc: Enabling of bearer rejected, failed to enable media [ 706.736796][ C0] net_ratelimit: 15 callbacks suppressed [ 712.246792][ C1] net_ratelimit: 13 callbacks suppressed [ 712.253432][T10020] overlayfs: failed to clone lowerpath [ 713.786834][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 714.118136][ T8213] IPVS: starting estimator thread 0... [ 714.216824][T10032] IPVS: using max 20 ests per chain, 48000 per kthread [ 717.296962][ C0] net_ratelimit: 14 callbacks suppressed [ 722.886757][ C1] net_ratelimit: 22 callbacks suppressed [ 724.149804][T10120] sd 0:0:1:0: device reset [ 727.565467][T10134] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 727.573553][T10134] bridge0: left promiscuous mode [ 728.406733][ C1] net_ratelimit: 24 callbacks suppressed [ 730.762996][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 732.237642][ T790] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 732.842145][T10193] block device autoloading is deprecated and will be removed. [ 732.896827][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 733.446780][ C0] net_ratelimit: 12 callbacks suppressed [ 733.633788][ T790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 733.667346][ T790] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 733.674958][ T790] usb 3-1: can't read configurations, error -71 [ 733.826589][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.950'. [ 739.126928][ C1] net_ratelimit: 14 callbacks suppressed [ 744.655280][ C0] net_ratelimit: 12 callbacks suppressed [ 747.175666][T10279] kernel profiling enabled (shift: 23) [ 747.930669][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.946855][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.090788][T10290] sctp: [Deprecated]: syz.2.969 (pid 10290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.090788][T10290] Use struct sctp_sack_info instead [ 749.846735][ C1] net_ratelimit: 18 callbacks suppressed [ 751.068575][T10301] loop2: detected capacity change from 0 to 33280 [ 753.047411][ T5803] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 754.966727][ C0] net_ratelimit: 17 callbacks suppressed [ 755.864124][T10330] loop2: detected capacity change from 0 to 33280 [ 756.003573][T10330] EXT4-fs (loop2): Test dummy encryption mode enabled [ 756.065424][T10330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 757.400955][T10330] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.980: bad orphan inode 131083 [ 757.432206][T10330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.084207][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.406737][ C1] net_ratelimit: 13 callbacks suppressed [ 761.204468][T10368] xt_SECMARK: invalid mode: 2 [ 761.252831][T10367] ipt_REJECT: TCP_RESET invalid for non-tcp [ 762.833112][T10387] 8021q: adding VLAN 0 to HW filter on device .` [ 765.446746][ C1] net_ratelimit: 9 callbacks suppressed [ 770.566739][ C1] net_ratelimit: 23 callbacks suppressed [ 771.280885][T10450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.910772][T10465] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 772.953120][T10465] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 775.379023][T10483] loop2: detected capacity change from 0 to 33280 [ 775.847581][T10077] net_ratelimit: 14 callbacks suppressed [ 778.295182][T10483] EXT4-fs: error -4 creating inode table initialization thread [ 778.343269][T10483] EXT4-fs (loop2): mount failed [ 778.810049][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1013'. [ 778.828737][T10497] fuse: Bad value for 'fd' [ 781.447551][ C1] net_ratelimit: 20 callbacks suppressed [ 785.285357][T10526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 785.292771][T10526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 785.304091][T10526] vhci_hcd vhci_hcd.0: Device attached [ 785.624804][ T8264] vhci_hcd: vhci_device speed not set [ 785.827330][ T8264] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 786.109682][T10527] vhci_hcd: connection reset by peer [ 786.354657][T10079] vhci_hcd: stop threads [ 786.487360][T10079] vhci_hcd: release socket [ 786.537455][T10079] vhci_hcd: disconnect device [ 786.726738][ C0] net_ratelimit: 13 callbacks suppressed [ 788.178688][T10551] FAULT_INJECTION: forcing a failure. [ 788.178688][T10551] name failslab, interval 1, probability 0, space 0, times 0 [ 788.251028][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 788.287968][T10555] fuse: Bad value for 'fd' [ 788.688120][T10551] CPU: 1 PID: 10551 Comm: syz.2.1027 Not tainted syzkaller #0 [ 788.695873][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 788.706303][T10551] Call Trace: [ 788.709643][T10551] [ 788.712642][T10551] dump_stack_lvl+0x18c/0x250 [ 788.717385][T10551] ? show_regs_print_info+0x20/0x20 [ 788.722734][T10551] ? load_image+0x420/0x420 [ 788.727332][T10551] ? __might_sleep+0xe0/0xe0 [ 788.732076][T10551] ? __lock_acquire+0x7eb0/0x7eb0 [ 788.737181][T10551] should_fail_ex+0x394/0x4c0 [ 788.742005][T10551] should_failslab+0x9/0x20 [ 788.746565][T10551] slab_pre_alloc_hook+0x59/0x300 [ 788.751676][T10551] ? __lock_acquire+0x1431/0x7eb0 [ 788.756810][T10551] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 788.762661][T10551] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 788.768448][T10551] __kmem_cache_alloc_node+0x53/0x260 [ 788.773903][T10551] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 788.779716][T10551] __kmalloc+0xa7/0x240 [ 788.784027][T10551] tomoyo_realpath_from_path+0xe6/0x5c0 [ 788.789652][T10551] tomoyo_check_open_permission+0x224/0x460 [ 788.795630][T10551] ? tomoyo_check_open_permission+0x1cf/0x460 [ 788.801856][T10551] ? tomoyo_check_path_number_acl+0x280/0x280 [ 788.808142][T10551] ? __asan_memset+0x22/0x40 [ 788.812869][T10551] ? __rwlock_init+0x150/0x150 [ 788.817705][T10551] ? tomoyo_file_open+0xed/0x180 [ 788.822896][T10551] security_file_open+0x62/0xa0 [ 788.827809][T10551] do_dentry_open+0x32b/0x14b0 [ 788.832902][T10551] ? __asan_memcpy+0x40/0x70 [ 788.837573][T10551] path_openat+0x284f/0x3270 [ 788.842242][T10551] ? do_sys_openat2+0xda/0x1d0 [ 788.847067][T10551] ? __x64_sys_openat+0x139/0x160 [ 788.852152][T10551] ? verify_lock_unused+0x140/0x140 [ 788.857502][T10551] ? do_filp_open+0x430/0x430 [ 788.862251][T10551] do_filp_open+0x1f2/0x430 [ 788.866811][T10551] ? vfs_tmpfile+0x620/0x620 [ 788.871502][T10551] ? _raw_spin_unlock+0x28/0x40 [ 788.876510][T10551] ? alloc_fd+0x590/0x640 [ 788.880919][T10551] do_sys_openat2+0x134/0x1d0 [ 788.885663][T10551] ? do_sys_open+0xe0/0xe0 [ 788.890140][T10551] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 788.896187][T10551] ? lock_chain_count+0x20/0x20 [ 788.901100][T10551] __x64_sys_openat+0x139/0x160 [ 788.906064][T10551] do_syscall_64+0x55/0xb0 [ 788.910573][T10551] ? clear_bhb_loop+0x40/0x90 [ 788.915352][T10551] ? clear_bhb_loop+0x40/0x90 [ 788.920103][T10551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.926597][T10551] RIP: 0033:0x7fbcdeba94d9 [ 788.931069][T10551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.951098][T10551] RSP: 002b:00007fbcdfa47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 788.959972][T10551] RAX: ffffffffffffffda RBX: 00007fbcdee25fa0 RCX: 00007fbcdeba94d9 [ 788.967979][T10551] RDX: 00000000000e0881 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 788.968004][T10551] RBP: 00007fbcdec3804e R08: 0000000000000000 R09: 0000000000000000 [ 788.968018][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.968032][T10551] R13: 00007fbcdee26038 R14: 00007fbcdee25fa0 R15: 00007fffa7574318 [ 788.968073][T10551] [ 789.146565][T10551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.316790][ T8264] vhci_hcd: vhci_device speed not set [ 791.557932][T10577] jffs2: notice: (10577) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 792.176731][ C1] net_ratelimit: 17 callbacks suppressed [ 792.321079][T10581] comedi comedi3: board detection failed [ 792.522360][T10586] netlink: 'syz.2.1036': attribute type 10 has an invalid length. [ 792.999834][T10584] Process accounting resumed [ 793.777612][T10591] netlink: 'syz.0.1038': attribute type 10 has an invalid length. [ 793.792885][T10591] bridge0: port 3(bond0) entered disabled state [ 793.806750][T10591] bridge0: port 3(bond0) entered blocking state [ 793.813269][T10591] bridge0: port 3(bond0) entered forwarding state [ 794.064811][T10591] bridge0: port 3(bond0) entered disabled state [ 794.948656][T10598] overlayfs: failed to clone lowerpath [ 795.457167][T10603] sctp: [Deprecated]: syz.0.1042 (pid 10603) Use of int in max_burst socket option. [ 795.457167][T10603] Use struct sctp_assoc_value instead [ 795.643742][T10600] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 797.607192][ C1] net_ratelimit: 16 callbacks suppressed [ 800.732589][T10633] blktrace: Concurrent blktraces are not allowed on loop0 [ 802.695193][ T28] audit: type=1800 audit(1794589932.824:61): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1052" name="file2" dev="sda1" ino=2048 res=0 errno=0 [ 802.705946][ C0] net_ratelimit: 15 callbacks suppressed [ 803.058833][T10639] netlink: 'syz.0.1051': attribute type 10 has an invalid length. [ 803.066768][T10639] batadv0: left promiscuous mode [ 805.948409][T10656] lo: entered allmulticast mode [ 806.626733][T10649] lo: left allmulticast mode [ 807.519131][T10669] blktrace: Concurrent blktraces are not allowed on loop8 [ 808.246728][ C1] net_ratelimit: 14 callbacks suppressed [ 808.299387][T10665] loop2: detected capacity change from 0 to 256 [ 808.346789][T10665] FAT-fs (loop2): bogus logical sector size 0 [ 808.353627][T10665] FAT-fs (loop2): Can't find a valid FAT filesystem [ 808.447831][T10672] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 808.559838][T10674] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 808.678704][T10679] jffs2: notice: (10679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 808.787142][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 808.808753][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 809.967233][T10687] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1064'. [ 810.004045][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.011088][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.240240][ T8] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 810.731410][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.852665][ T8] usb 3-1: config 0 has no interfaces? [ 810.924287][ T8] usb 3-1: string descriptor 0 read error: -71 [ 810.944181][ T8] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 810.987432][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 811.013290][ T8] usb 3-1: config 0 descriptor?? [ 811.068388][ T8] usb 3-1: can't set config #0, error -71 [ 811.117024][ T8] usb 3-1: USB disconnect, device number 13 [ 813.366710][ C1] net_ratelimit: 12 callbacks suppressed [ 813.995263][T10725] block device autoloading is deprecated and will be removed. [ 815.568157][ T8264] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 815.779993][ T8264] usb 3-1: unable to get BOS descriptor or descriptor too short [ 815.803198][ T8264] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 25, changing to 7 [ 815.838568][ T8264] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 815.856952][ T8264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.875290][ T8264] usb 3-1: Product: syz [ 815.885421][ T8264] usb 3-1: Manufacturer: syz [ 815.896851][ T8264] usb 3-1: SerialNumber: syz [ 818.995487][ T8264] usb 3-1: selecting invalid altsetting 1 [ 819.008106][ T8264] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 819.037816][ C1] net_ratelimit: 12 callbacks suppressed [ 819.159730][ T8264] usb 3-1: selecting invalid altsetting 1 [ 819.197060][ T8264] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 819.245965][ T8264] usb 3-1: selecting invalid altsetting 1 [ 819.294774][T10748] loop2: detected capacity change from 0 to 33280 [ 819.398555][T10748] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.1081: corrupted in-inode xattr: invalid ea_ino [ 819.442177][ T8264] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 819.499010][T10748] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1081: couldn't read orphan inode 15 (err -117) [ 819.544047][ T8264] usb 3-1: USB disconnect, device number 14 [ 819.568658][T10748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.722801][T10672] udevd[10672]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.575728][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 822.070106][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.347140][T10770] blktrace: Concurrent blktraces are not allowed on loop4 [ 824.166755][ C1] net_ratelimit: 13 callbacks suppressed [ 829.111394][T10792] tipc: Enabling of bearer rejected, failed to enable media [ 829.841631][T10799] trusted_key: syz.0.1090 sent an empty control message without MSG_MORE. [ 829.937158][ C1] net_ratelimit: 22 callbacks suppressed [ 832.237403][T10809] Bluetooth: MGMT ver 1.22 [ 834.199973][T10822] No source specified [ 834.967089][ C0] net_ratelimit: 13 callbacks suppressed [ 837.485216][T10850] loop2: detected capacity change from 0 to 8 [ 837.493848][T10850] squashfs: Unknown parameter '¿A¢8ôòw¦m' [ 839.983129][ C0] net_ratelimit: 9 callbacks suppressed [ 842.267214][T10863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1102'. [ 845.127456][ C1] net_ratelimit: 8 callbacks suppressed [ 845.482585][T10880] block device autoloading is deprecated and will be removed. [ 845.575078][T10880] md: md1 stopped. [ 846.468651][T10881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.160124][T10079] net_ratelimit: 10 callbacks suppressed [ 855.399869][ C1] net_ratelimit: 11 callbacks suppressed [ 856.651758][T10931] block device autoloading is deprecated and will be removed. [ 860.416752][ C1] net_ratelimit: 23 callbacks suppressed [ 860.501361][T10955] No source specified [ 861.673929][T10969] syz_tun: entered allmulticast mode [ 862.481884][T10960] syz_tun: left allmulticast mode [ 864.011552][T10984] loop2: detected capacity change from 0 to 16 [ 864.722575][T10984] erofs: (device loop2): mounted with root inode @ nid 36. [ 865.446746][ C1] net_ratelimit: 18 callbacks suppressed [ 868.680231][T11008] syz_tun: entered allmulticast mode [ 869.485034][T11005] syz_tun: left allmulticast mode [ 869.763390][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 870.566715][ C1] net_ratelimit: 12 callbacks suppressed [ 871.396519][ T5803] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 871.404999][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.412226][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.426376][T11027] loop2: detected capacity change from 0 to 256 [ 874.428345][T11027] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 876.150897][T11031] trusted_key: encrypted_key: insufficient parameters specified [ 876.260492][ C1] net_ratelimit: 12 callbacks suppressed [ 882.086738][ C1] net_ratelimit: 16 callbacks suppressed [ 887.366689][ C1] net_ratelimit: 16 callbacks suppressed [ 890.201705][T11132] Invalid ELF header magic: != ELF [ 891.508580][T11136] loop2: detected capacity change from 0 to 33280 [ 891.584798][T11136] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 891.690735][T11136] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1165: invalid indirect mapped block 256 (level 1) [ 891.775459][T11136] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1165: invalid indirect mapped block 2683928664 (level 1) [ 891.959805][T11136] EXT4-fs (loop2): 1 truncate cleaned up [ 892.088988][T11136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.566525][T11147] autofs4:pid:11147:autofs_fill_super: called with bogus options [ 893.082243][ C1] net_ratelimit: 22 callbacks suppressed [ 893.386463][T11154] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.1165: Invalid block bitmap block 3 in block_group 0 [ 893.410271][T11154] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.1165: Invalid block bitmap block 3 in block_group 0 [ 893.431428][T11154] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.1165: Invalid block bitmap block 3 in block_group 0 [ 894.942997][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.589147][T11185] loop2: detected capacity change from 0 to 16 [ 898.694366][T11185] erofs: (device loop2): mounted with root inode @ nid 36. [ 898.744773][T11181] syz.2.1174: attempt to access beyond end of device [ 898.744773][T11181] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 898.966692][ C1] net_ratelimit: 28 callbacks suppressed [ 899.172649][T11193] overlayfs: failed to clone upperpath [ 901.619836][T11207] overlayfs: failed to resolve './file1': -2 [ 902.410861][T11207] jffs2: notice: (11207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 904.016764][ C0] net_ratelimit: 14 callbacks suppressed [ 905.447270][T11227] loop2: detected capacity change from 0 to 33280 [ 905.609260][T11227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 905.821419][T11227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.870901][T11227] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.988014][T11237] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 906.253265][T11239] xt_SECMARK: invalid mode: 2 [ 907.222387][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.331642][T11246] capability: warning: `syz.4.1190' uses deprecated v2 capabilities in a way that may be insecure [ 909.520843][ C1] net_ratelimit: 18 callbacks suppressed [ 909.741211][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 911.643376][T11275] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1196'. [ 911.694711][T11275] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1196'. [ 911.740181][T11276] vivid-000: disconnect [ 911.770161][T11276] vivid-000: reconnect [ 914.873319][T11294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 914.997484][ C1] net_ratelimit: 14 callbacks suppressed [ 917.653929][ T28] audit: type=1326 audit(1794590048.674:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 918.919575][ T28] audit: type=1326 audit(1794590048.674:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.005118][ T28] audit: type=1326 audit(1794590048.674:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.131063][ T28] audit: type=1326 audit(1794590048.674:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.184833][ T28] audit: type=1326 audit(1794590048.674:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.214434][ T28] audit: type=1326 audit(1794590048.684:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.276869][ T28] audit: type=1326 audit(1794590048.694:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.376660][ T28] audit: type=1326 audit(1794590048.694:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.451026][ T28] audit: type=1326 audit(1794590048.694:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcdebaad67 code=0x7ffc0000 [ 919.475870][ T28] audit: type=1326 audit(1794590048.694:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1202" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdeba94d9 code=0x7ffc0000 [ 919.537754][ T5803] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 920.007611][ C1] net_ratelimit: 10 callbacks suppressed [ 924.787125][T11356] gretap1: entered promiscuous mode [ 925.286947][ C0] net_ratelimit: 14 callbacks suppressed [ 925.366002][T11357] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 925.581514][T11357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.747511][T11359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.754707][T11359] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 926.761765][T11359] bond1: (slave gre1): Error -95 calling set_mac_address [ 926.975542][T11364] gretap1: entered promiscuous mode [ 926.999980][T11364] bond1: (slave gretap1): making interface the new active one [ 927.018883][T11364] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 927.075554][T11357] macvlan2: entered promiscuous mode [ 927.092571][T11357] macvlan2: entered allmulticast mode [ 927.107293][T11357] bond1: entered promiscuous mode [ 927.113479][T11357] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 927.129695][T11357] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 927.145141][T11357] bond1: left promiscuous mode [ 927.473810][T11381] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1220'. [ 928.233152][T11396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 929.609803][ T5803] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 929.619679][ T5803] CPU: 0 PID: 5803 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 929.627296][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 929.637410][ T5803] Workqueue: hci0 hci_rx_work [ 929.642352][ T5803] Call Trace: [ 929.645682][ T5803] [ 929.648665][ T5803] dump_stack_lvl+0x18c/0x250 [ 929.653444][ T5803] ? show_regs_print_info+0x20/0x20 [ 929.658715][ T5803] ? load_image+0x420/0x420 [ 929.663294][ T5803] sysfs_create_dir_ns+0x26e/0x2a0 [ 929.668513][ T5803] ? sysfs_warn_dup+0xa0/0xa0 [ 929.673260][ T5803] ? do_raw_spin_unlock+0x121/0x230 [ 929.678527][ T5803] kobject_add_internal+0x617/0xc90 [ 929.683820][ T5803] kobject_add+0x164/0x240 [ 929.688303][ T5803] ? kobject_init+0x1d0/0x1d0 [ 929.693049][ T5803] ? get_device_parent+0x366/0x390 [ 929.698297][ T5803] device_add+0x3fa/0xc40 [ 929.702706][ T5803] hci_conn_add_sysfs+0xd5/0x1e0 [ 929.707841][ T5803] le_conn_complete_evt+0xfe7/0x1690 [ 929.713188][ T5803] ? param_get_dyndbg_classes+0x170/0x170 [ 929.718979][ T5803] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 929.725279][ T5803] hci_le_enh_conn_complete_evt+0x189/0x460 [ 929.731220][ T5803] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 929.737693][ T5803] hci_event_packet+0x623/0xe60 [ 929.742603][ T5803] ? hci_remote_host_features_evt+0x150/0x150 [ 929.748870][ T5803] ? bis_list+0x290/0x290 [ 929.753267][ T5803] ? hci_send_to_monitor+0xd7/0x4f0 [ 929.758544][ T5803] hci_rx_work+0x43a/0xd60 [ 929.763097][ T5803] ? process_scheduled_works+0x975/0x1600 [ 929.768859][ T5803] process_scheduled_works+0xa60/0x1600 [ 929.774467][ T5803] ? worker_attach_to_pool+0x370/0x370 [ 929.779984][ T5803] ? assign_work+0x3cc/0x5d0 [ 929.784628][ T5803] worker_thread+0xa5e/0xfe0 [ 929.789287][ T5803] ? _raw_spin_unlock+0x40/0x40 [ 929.794179][ T5803] ? __kthread_parkme+0x71/0x1c0 [ 929.799189][ T5803] kthread+0x2fa/0x390 [ 929.803299][ T5803] ? pr_cont_work+0x550/0x550 [ 929.808022][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 929.812657][ T5803] ret_from_fork+0x48/0x80 [ 929.817256][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 929.821903][ T5803] ret_from_fork_asm+0x11/0x20 [ 929.826737][ T5803] [ 929.831167][ T5803] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 929.845301][ T5803] Bluetooth: hci0: failed to register connection device [ 930.336666][ C0] net_ratelimit: 15 callbacks suppressed [ 930.710225][T11416] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5789] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11416] [ 931.091048][ T9394] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 931.138201][T11414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 931.716444][T11422] Invalid ELF header magic: != ELF [ 931.937315][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 932.415947][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.422730][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.559074][T11424] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 932.607750][T11424] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 932.663828][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 932.674746][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1229'. [ 932.704691][T11424] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 935.003778][T11431] block device autoloading is deprecated and will be removed. [ 935.222410][T11438] futex_wake_op: syz.4.1234 tries to shift op by 144; fix this program [ 935.427460][T11438] overlayfs: failed to clone lowerpath [ 935.526681][ C0] net_ratelimit: 21 callbacks suppressed [ 935.538078][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1232'. [ 939.537220][T11469] loop2: detected capacity change from 0 to 33792 [ 939.547016][T11469] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 940.219455][T11469] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 940.566687][ C0] net_ratelimit: 22 callbacks suppressed [ 940.699388][T11469] EXT4-fs (loop2): invalid journal inode [ 940.731462][T11469] EXT4-fs (loop2): can't get journal size [ 940.773233][T11469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 944.470649][T11511] SET target dimension over the limit! [ 946.406679][ C1] net_ratelimit: 13 callbacks suppressed [ 948.638118][T11528] xt_SECMARK: invalid mode: 2 [ 949.533253][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 949.666057][T11533] gadgetfs: bound to dummy_udc driver [ 950.036987][ T8267] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 950.128270][ C0] gadgetfs: connected [ 950.142341][ T8267] gadgetfs: disconnected [ 952.043706][T11530] gadgetfs: suspended from state 2 [ 952.063232][ C0] net_ratelimit: 15 callbacks suppressed [ 952.298201][ T8267] usb 1-1: device not accepting address 6, error -71 [ 955.301734][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 955.486110][T11573] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6741] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11573] [ 955.537153][ T5803] Bluetooth: Frame is too long (len 16, expected len 4) [ 957.366422][ C0] net_ratelimit: 17 callbacks suppressed [ 962.075520][T11608] rtc_cmos 00:00: Alarms can be up to one day in the future [ 962.806649][ C1] net_ratelimit: 19 callbacks suppressed [ 963.124066][ T790] rtc_cmos 00:00: Alarms can be up to one day in the future [ 963.132607][ T790] rtc_cmos 00:00: Alarms can be up to one day in the future [ 963.748928][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 963.748948][ T28] audit: type=1326 audit(1794590094.284:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 963.787194][ T790] rtc_cmos 00:00: Alarms can be up to one day in the future [ 963.812412][ T790] rtc_cmos 00:00: Alarms can be up to one day in the future [ 963.820520][T11628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 963.850619][ T790] rtc rtc0: __rtc_set_alarm: err=-22 [ 963.858958][ T28] audit: type=1326 audit(1794590094.284:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 963.886715][ T28] audit: type=1326 audit(1794590094.284:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 963.937522][ T28] audit: type=1326 audit(1794590094.294:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 964.004585][ T28] audit: type=1326 audit(1794590094.294:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 964.090115][ T28] audit: type=1326 audit(1794590094.294:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 964.138470][ T28] audit: type=1326 audit(1794590094.294:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 964.163596][ T28] audit: type=1326 audit(1794590094.304:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 964.216124][ T28] audit: type=1326 audit(1794590094.304:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f820ebaad67 code=0x7ffc0000 [ 964.266373][ T28] audit: type=1326 audit(1794590094.304:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820eba94d9 code=0x7ffc0000 [ 964.524138][T11638] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11638] [ 965.925746][ T5803] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 966.621850][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 966.662902][T11669] bridge0: port 4(syz_tun) entered disabled state [ 967.378125][ T5803] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 967.385325][ T5803] Bluetooth: unknown link type 255 [ 967.390797][ T5803] Bluetooth: hci1: connection err: -111 [ 968.141135][ C1] net_ratelimit: 11 callbacks suppressed [ 968.233303][T11669] syz_tun (unregistering): left allmulticast mode [ 968.240239][T11669] syz_tun (unregistering): left promiscuous mode [ 968.249483][T11669] bridge0: port 4(syz_tun) entered disabled state [ 968.540308][T11685] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 968.550560][T11685] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 968.667004][T11688] fuse: Bad value for 'fd' [ 968.855749][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 968.855764][ T28] audit: type=1326 audit(1794590099.944:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 968.951406][ T28] audit: type=1326 audit(1794590099.944:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 968.979699][T11691] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1291'. [ 968.996200][ T28] audit: type=1326 audit(1794590099.994:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 969.027048][ T28] audit: type=1326 audit(1794590099.994:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 969.058601][ T28] audit: type=1326 audit(1794590099.994:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 969.083622][ T28] audit: type=1326 audit(1794590100.004:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 969.110326][ T28] audit: type=1326 audit(1794590100.004:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 969.137849][ T28] audit: type=1326 audit(1794590100.004:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 969.168594][ T28] audit: type=1326 audit(1794590100.004:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 969.392236][ T28] audit: type=1326 audit(1794590100.004:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.0.1291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9713a94d9 code=0x7ffc0000 [ 971.532325][T11708] smc: removing ib device rxe0 [ 972.207848][T11713] capability: warning: `syz.0.1304' uses 32-bit capabilities (legacy support in use) [ 972.221121][T11713] xt_l2tp: invalid flags combination: 8 [ 972.354042][T11714] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11714] [ 973.195941][ C0] net_ratelimit: 14 callbacks suppressed [ 973.986355][T11708] ------------[ cut here ]------------ [ 973.991966][T11708] WARNING: CPU: 0 PID: 11708 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50 [ 974.002882][T11708] Modules linked in: [ 974.006835][T11708] CPU: 0 PID: 11708 Comm: syz.4.1297 Not tainted syzkaller #0 [ 974.014302][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 974.024430][T11708] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 974.029982][T11708] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 50 b5 fa f9 48 83 3b 00 75 07 e8 95 ac a1 f9 5b c3 e8 8e ac a1 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 974.049885][T11708] RSP: 0018:ffffc9000479f0e8 EFLAGS: 00010246 [ 974.055981][T11708] RAX: ffffffff87e63212 RBX: ffff8880325112f0 RCX: 0000000000080000 [ 974.064014][T11708] RDX: ffffc90005009000 RSI: 000000000007ffff RDI: 0000000000080000 [ 974.072045][T11708] RBP: 0000000000000002 R08: ffff888032510753 R09: 1ffff110064a20ea [ 974.080092][T11708] R10: dffffc0000000000 R11: ffffed10064a20eb R12: dffffc0000000000 [ 974.088176][T11708] R13: 0000000000000010 R14: ffffffff87e46ea0 R15: dffffc0000000000 [ 974.096164][T11708] FS: 00007f820fa096c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 974.105709][T11708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.112648][T11708] CR2: 00005595f3bae000 CR3: 000000007585a000 CR4: 00000000003506f0 [ 974.120726][T11708] Call Trace: [ 974.124029][T11708] [ 974.127428][T11708] rxe_dealloc+0x33/0x100 [ 974.131806][T11708] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 974.138637][T11708] ib_dealloc_device+0x4e/0x1f0 [ 974.143658][T11708] __ib_unregister_device+0x110/0x170 [ 974.149134][T11708] ib_unregister_device_and_put+0xb8/0xf0 [ 974.154921][T11708] nldev_dellink+0x27b/0x310 [ 974.159655][T11708] ? nldev_newlink+0x620/0x620 [ 974.164502][T11708] ? apparmor_capable+0x137/0x1a0 [ 974.169683][T11708] ? bpf_lsm_capable+0x9/0x10 [ 974.174386][T11708] ? security_capable+0x89/0xb0 [ 974.179321][T11708] ? nldev_newlink+0x620/0x620 [ 974.184107][T11708] rdma_nl_rcv+0x6fd/0xa60 [ 974.188595][T11708] ? rdma_nl_net_init+0x190/0x190 [ 974.193649][T11708] ? __lock_acquire+0x7eb0/0x7eb0 [ 974.198717][T11708] ? net_generic+0x1e/0x240 [ 974.203305][T11708] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.208565][T11708] netlink_unicast+0x856/0x9e0 [ 974.213401][T11708] netlink_sendmsg+0x8d0/0xbf0 [ 974.218274][T11708] ? netlink_getsockopt+0x590/0x590 [ 974.223510][T11708] ? apparmor_socket_sendmsg+0x8e/0x330 [ 974.223555][T11708] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 974.229531][T11708] ? security_socket_sendmsg+0x80/0xa0 [ 974.240611][T11708] ? netlink_getsockopt+0x590/0x590 [ 974.240648][T11708] ____sys_sendmsg+0x61b/0x980 [ 974.250878][T11708] ? __asan_memset+0x22/0x40 [ 974.255513][T11708] ? __sys_sendmsg_sock+0x30/0x30 [ 974.260648][T11708] ? __import_iovec+0x5f2/0x850 [ 974.265558][T11708] ? import_iovec+0x73/0xa0 [ 974.270125][T11708] ___sys_sendmsg+0x2a6/0x360 [ 974.274823][T11708] ? __sys_sendmsg+0x2b0/0x2b0 [ 974.279705][T11708] __se_sys_sendmsg+0x1d0/0x2c0 [ 974.284576][T11708] ? __x64_sys_sendmsg+0x80/0x80 [ 974.289595][T11708] ? lockdep_hardirqs_on+0x98/0x150 [ 974.294878][T11708] do_syscall_64+0x55/0xb0 [ 974.299559][T11708] ? clear_bhb_loop+0x40/0x90 [ 974.304276][T11708] ? clear_bhb_loop+0x40/0x90 [ 974.309081][T11708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.315003][T11708] RIP: 0033:0x7f820eba94d9 [ 974.319478][T11708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.339226][T11708] RSP: 002b:00007f820fa09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.347700][T11708] RAX: ffffffffffffffda RBX: 00007f820ee25fa0 RCX: 00007f820eba94d9 [ 974.355693][T11708] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 974.363720][T11708] RBP: 00007f820ec3804e R08: 0000000000000000 R09: 0000000000000000 [ 974.371733][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.379768][T11708] R13: 00007f820ee26038 R14: 00007f820ee25fa0 R15: 00007fffd3270fc8 [ 974.387793][T11708] [ 974.390829][T11708] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 974.398115][T11708] CPU: 0 PID: 11708 Comm: syz.4.1297 Not tainted syzkaller #0 [ 974.405578][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 974.415730][T11708] Call Trace: [ 974.419023][T11708] [ 974.421966][T11708] dump_stack_lvl+0x18c/0x250 [ 974.426689][T11708] ? show_regs_print_info+0x20/0x20 [ 974.431909][T11708] ? load_image+0x420/0x420 [ 974.436431][T11708] panic+0x2ca/0x720 [ 974.440359][T11708] ? bpf_jit_dump+0xd0/0xd0 [ 974.444889][T11708] __warn+0x2e0/0x470 [ 974.448891][T11708] ? rxe_pool_cleanup+0x42/0x50 [ 974.453773][T11708] ? rxe_pool_cleanup+0x42/0x50 [ 974.458739][T11708] report_bug+0x2be/0x4f0 [ 974.463097][T11708] ? rxe_pool_cleanup+0x42/0x50 [ 974.467979][T11708] ? rxe_pool_cleanup+0x42/0x50 [ 974.472853][T11708] ? rxe_pool_cleanup+0x44/0x50 [ 974.477714][T11708] handle_bug+0xcf/0x120 [ 974.481975][T11708] exc_invalid_op+0x1a/0x50 [ 974.486505][T11708] asm_exc_invalid_op+0x1a/0x20 [ 974.491387][T11708] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 974.496884][T11708] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 50 b5 fa f9 48 83 3b 00 75 07 e8 95 ac a1 f9 5b c3 e8 8e ac a1 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 974.516525][T11708] RSP: 0018:ffffc9000479f0e8 EFLAGS: 00010246 [ 974.522646][T11708] RAX: ffffffff87e63212 RBX: ffff8880325112f0 RCX: 0000000000080000 [ 974.530627][T11708] RDX: ffffc90005009000 RSI: 000000000007ffff RDI: 0000000000080000 [ 974.538610][T11708] RBP: 0000000000000002 R08: ffff888032510753 R09: 1ffff110064a20ea [ 974.546596][T11708] R10: dffffc0000000000 R11: ffffed10064a20eb R12: dffffc0000000000 [ 974.554595][T11708] R13: 0000000000000010 R14: ffffffff87e46ea0 R15: dffffc0000000000 [ 974.562577][T11708] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 974.569359][T11708] ? rxe_pool_cleanup+0x42/0x50 [ 974.574229][T11708] ? rxe_pool_cleanup+0x42/0x50 [ 974.579107][T11708] rxe_dealloc+0x33/0x100 [ 974.583456][T11708] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 974.590240][T11708] ib_dealloc_device+0x4e/0x1f0 [ 974.595150][T11708] __ib_unregister_device+0x110/0x170 [ 974.600566][T11708] ib_unregister_device_and_put+0xb8/0xf0 [ 974.606321][T11708] nldev_dellink+0x27b/0x310 [ 974.610936][T11708] ? nldev_newlink+0x620/0x620 [ 974.615788][T11708] ? apparmor_capable+0x137/0x1a0 [ 974.620849][T11708] ? bpf_lsm_capable+0x9/0x10 [ 974.625553][T11708] ? security_capable+0x89/0xb0 [ 974.630431][T11708] ? nldev_newlink+0x620/0x620 [ 974.635218][T11708] rdma_nl_rcv+0x6fd/0xa60 [ 974.639675][T11708] ? rdma_nl_net_init+0x190/0x190 [ 974.644728][T11708] ? __lock_acquire+0x7eb0/0x7eb0 [ 974.649774][T11708] ? net_generic+0x1e/0x240 [ 974.654312][T11708] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.659613][T11708] netlink_unicast+0x856/0x9e0 [ 974.664409][T11708] netlink_sendmsg+0x8d0/0xbf0 [ 974.669204][T11708] ? netlink_getsockopt+0x590/0x590 [ 974.674444][T11708] ? apparmor_socket_sendmsg+0x8e/0x330 [ 974.680029][T11708] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 974.685341][T11708] ? security_socket_sendmsg+0x80/0xa0 [ 974.690818][T11708] ? netlink_getsockopt+0x590/0x590 [ 974.696037][T11708] ____sys_sendmsg+0x61b/0x980 [ 974.700822][T11708] ? __asan_memset+0x22/0x40 [ 974.705437][T11708] ? __sys_sendmsg_sock+0x30/0x30 [ 974.710470][T11708] ? __import_iovec+0x5f2/0x850 [ 974.715352][T11708] ? import_iovec+0x73/0xa0 [ 974.719884][T11708] ___sys_sendmsg+0x2a6/0x360 [ 974.724593][T11708] ? __sys_sendmsg+0x2b0/0x2b0 [ 974.729408][T11708] __se_sys_sendmsg+0x1d0/0x2c0 [ 974.734278][T11708] ? __x64_sys_sendmsg+0x80/0x80 [ 974.739257][T11708] ? lockdep_hardirqs_on+0x98/0x150 [ 974.744486][T11708] do_syscall_64+0x55/0xb0 [ 974.748923][T11708] ? clear_bhb_loop+0x40/0x90 [ 974.753618][T11708] ? clear_bhb_loop+0x40/0x90 [ 974.758318][T11708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.764231][T11708] RIP: 0033:0x7f820eba94d9 [ 974.768659][T11708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.788284][T11708] RSP: 002b:00007f820fa09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.796719][T11708] RAX: ffffffffffffffda RBX: 00007f820ee25fa0 RCX: 00007f820eba94d9 [ 974.804726][T11708] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 974.812707][T11708] RBP: 00007f820ec3804e R08: 0000000000000000 R09: 0000000000000000 [ 974.820693][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.828684][T11708] R13: 00007f820ee26038 R14: 00007f820ee25fa0 R15: 00007fffd3270fc8 [ 974.836687][T11708] [ 974.840288][T11708] Kernel Offset: disabled [ 974.844755][T11708] Rebooting in 86400 seconds..