last executing test programs: 19m52.085697984s ago: executing program 1 (id=135): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) 19m51.997704504s ago: executing program 1 (id=136): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)}, 0x8}], 0x1, 0x10020, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x100000, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x2a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x14a, 0x2014a) socket$inet_tcp(0x2, 0x1, 0x0) 19m51.249995351s ago: executing program 32 (id=139): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 19m50.98164928s ago: executing program 1 (id=143): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @mcast2, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0x8, 0x4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 19m47.276394699s ago: executing program 1 (id=158): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) 19m47.164580739s ago: executing program 1 (id=161): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x10000, 0x20000) write$cgroup_int(r0, &(0x7f0000000040)=0xe000000, 0x12) fallocate(r0, 0x8, 0x0, 0x2000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r3, 0x2b, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 19m46.619676647s ago: executing program 1 (id=163): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)}, 0x8}], 0x1, 0x10020, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x100000, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x2a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x14a, 0x2014a) socket$inet_tcp(0x2, 0x1, 0x0) 19m35.120911961s ago: executing program 33 (id=197): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x1080000, &(0x7f0000000780)={[], [{@measure}, {@smackfsdef={'smackfsdef', 0x3d, '{\x82'}}]}, 0x3, 0x4db, &(0x7f0000001900)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200), 0x10) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x20100) prlimit64(r1, 0x8, &(0x7f0000000280)={0x8, 0x7fffffff}, &(0x7f0000000340)) chdir(&(0x7f0000000000)='./file0\x00') utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x4, 0xc}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000140)='\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2]) socket$packet(0x11, 0xa, 0x300) 19m30.873589777s ago: executing program 34 (id=163): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)}, 0x8}], 0x1, 0x10020, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x100000, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x2a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x14a, 0x2014a) socket$inet_tcp(0x2, 0x1, 0x0) 19m29.273628062s ago: executing program 4 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 19m28.021649339s ago: executing program 4 (id=223): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000900)={[{@shortname_mixed}, {@fat=@sys_immutable}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_lower}, {@utf8}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_win95}, {@uni_xlateno}]}, 0x43, 0x350, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = dup3(r4, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 19m18.643648849s ago: executing program 4 (id=247): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x80a0000, 0x4000}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) unshare(0x62040200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x1) 19m15.615821751s ago: executing program 4 (id=249): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd28, 0x25dfdc02}, 0x10}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063"], 0x48}}, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x10161, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x80}}, 0x40800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 19m14.771980868s ago: executing program 4 (id=251): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x2000404, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000010280)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x4}, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19m13.363174474s ago: executing program 4 (id=255): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000900)={[{@shortname_mixed}, {@fat=@sys_immutable}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_lower}, {@utf8}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_win95}, {@uni_xlateno}]}, 0x43, 0x350, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = dup3(r4, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 18m57.81644038s ago: executing program 35 (id=255): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000900)={[{@shortname_mixed}, {@fat=@sys_immutable}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_lower}, {@utf8}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_win95}, {@uni_xlateno}]}, 0x43, 0x350, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = dup3(r4, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 12m3.710246079s ago: executing program 6 (id=1373): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x2, [@datasec={0xb, 0x0, 0x0, 0xf, 0x1, [], "eb"}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x208000, 0x84) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="210927bd7000fedbdf250a000000080002000700000008000400050000002c000180050002000400000005000200090000000800060008000000050002000200000008000600110000000500050000000000050005000300000008000400090000000800020007000000080004000b00000008000300000000000800020004000000"], 0x88}, 0x1, 0x0, 0x0, 0x481c0}, 0x4000000) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000b, 0x30, 0xffffffffffffffff, 0x80179000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200003, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x9, 0x200080) 12m2.402344105s ago: executing program 6 (id=1379): creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x14102, 0x21) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x2, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 11m57.400016692s ago: executing program 6 (id=1389): socket$inet6_tcp(0xa, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0xffff, 0x800}, {0x0, 0x0, 0xb1c8eee2728436fa}], 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 11m55.482520906s ago: executing program 6 (id=1394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0xffff, 0x800}, {0x0, 0x0, 0xb1c8eee2728436fa}], 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="94", 0x1}], 0x1}}], 0x1, 0x4000800) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x11, 0x1, 0x0, 0x0, "833d38738fb55ab5d4f2dbff9267af2bc51ca9da3d62280ed35e75afdb93701cc97e03f5af747819e5f6c65667da79055ff6fa7a795de50ac88bde647e36946f"}}}}, 0x0) 11m52.740853168s ago: executing program 6 (id=1400): mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 11m44.321267434s ago: executing program 6 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = timerfd_create(0x8, 0x80000) timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r7, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 11m27.904896567s ago: executing program 36 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = timerfd_create(0x8, 0x80000) timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r7, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1m50.212732637s ago: executing program 7 (id=2720): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr, {[@timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r3 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/11, 0xb}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 1m48.00677533s ago: executing program 7 (id=2725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m43.983459498s ago: executing program 7 (id=2731): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8800, &(0x7f0000001580)={[{@uid_forget}, {@noadinicb}, {@uid_ignore}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@nostrict}, {@mode={'mode', 0x3d, 0x992}}]}, 0x1, 0xc39, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 1m40.765889138s ago: executing program 7 (id=2738): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xccc7d8b142a83078, 0x0, 0x1, 0x0, &(0x7f0000000000)) epoll_create1(0x0) epoll_create1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x102043, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdir(0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x94, &(0x7f0000000540)=ANY=[], 0x0, 0x9eb8, &(0x7f0000001600)="$eJxEmnPwJ/fyd7+bbLKxbVsntm3btn3ifMZGbNu2bdu2jX1qf/feevqfqZmaelV3n1dXTfV7bhngrQO8bYC3D/COAd45wLsGePcA7xngvQO8b4D3D/CBAT44wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwMcOcChAIcFOFqAowc4PMAxAhwzwBEBjhXg2AGOE+C4AY4X4PgBThDghAFOFODEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4IwBzhTgzAHOEuCsAc4W4OwBzhHgnAHOFeDcAc4T4LwBzhfg/AEuEOCCAS4UIAEuHOAiAS4a4GIBLh7gEgEuGeBSAS4d4DIBLhvgcgEuH+AKAa4Y4EoBrhzgKgGuGuBqAa4e4BoBrhngWgGuHeA6Aa4b4HoBrh/gBgFuGOBGAW4c4CYBbhrgZgFuHuAWAW4Z4FYBbh3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhyM6SEBHhrgYQEeHuARAR4Z4FEBHh2gAR4T4LEBHhcw+ij2JwR4YoAnBXhygIMAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALuAoVGapwR4aoCnBXh6gGcEeGaAZwV4doDnBHhugOcFeH6AFwR4YYAXBXhxgJcEeGmAlwV4eYBXBHhlgFcFeHWA1wR4bYDXBXh9gDcEeGOANwV4c4C3BHhrMNbQ0BDeHuAdAd4Z4F0B3h3gPQHeG+B9Ad4f4AMBPhjgQwE+PGoOwqGhR0ex/WLo/+KJAJ8Mhv+f3tMBPjOqd/8Jnw/whQBfDPClAF8O8JUAXw3wtQBfD/CNAN8M8K0A3w7wnQDfDfC9AN8P8IMAPwzwowA/DvCTAD8N8LMAPw/wiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSAQyEOC3G0cFTdODzEMUIcM8QRIY4V4tghjhPiuCGOFzL7+CFOEOKEIU4U4sQhThLipCFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vT/1Z0xxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQiTEhUNcJMRFQ1wsxMVDXCLEJUNcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3Gm0oaFRHHYJcdcQdwtx9xD3CHHPEPcKce8Q9wlx3xD3C3H/EA8I8cAQDwrx4BAPCfHQEA8L8fAQjwjxyBCPCvHoEA3xmBCPDfG4EI8P8YQQTwzxpBBPDnEQYhBiGGIU/n+fpyFmIeYhFiGWIVYh1iE2IbYhdiH2IZ4S4qkhnhbi6SGeEeKZIZ4V4tkhnhPiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNo9htNu/QsKGhoVtCvDXE20K8PcQ7QrwzxLtCvDvEe0K8N8T7Qrw/xAdCfDDEh0J8eJTfh/DREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8QR4Y4FOGwCEeLcPQIh0c4RoRjRjgiwrEiHDvCcSIcN8LxIhw/wgkinDDCiSKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIiTChSNcJMJFI1wswsUjXCLCJSNcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM0wmMiPDbC4yI8PsITIjwxwpMiPDnCQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hKdEeGqEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0QjvDXC2yK8PcI7IrwzwrsivDvCeyK8N8L7Irw/wgcifDDChyJ8OMJHInw0wscifDzCJyJ8MsKnInw6wmcifDbC5yJ8PsIXInwxwpcifDnCVyJ8NcLXInw9wjcifDPCtyJ8O8J3Inw3wvcifD/CDyL8MMKPIvw4wk8i/DTCzyL8PMIvIvwywq8i/DrCbyL8NsLvIvw+wh8i/DHCnyL8OcJfIvw1wt8i/D3CPyL8M8K/Ivw7wn8i/DfCkREOxTgsxtFiHD3G4TGOEeOYMY6IcawYx45xnBjHjXG8GMePcYIYJ4xxohgnjnGSGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb74kwnnj3GBGBeMcaEYiXHhGBeJcdEYF4tx8RiXiHHJGJcac8ilY1wmxmVjXC7G5WNcIcYVY1wpxpVjXCXGVWNcLcbVY1wjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk1j3CzGzWPcIsYtY9wqxq1j3CZmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjNMZjYjw2xuNiPD7GE2I8McaTYjw5xkGMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYynxHhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEeGuMt8V4e4x3xHhnjHfFeHeM98R4b4z3xXh/jA/E+GCMD8X4cIyPxPhojI/F+HiMT8T4ZIxPxfh0jM/E+GyMz8X4fIwvxPhijC/F+HKMr8T4aoyvxfh6jG/E+Oaofg/h2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMf4T478xjoxxKMFhCY6W4OgJDk9wjATHTHBEgmMlOHaC4yQ4boLjJTh+ghMkOGGCEyU4cYKTJDhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJUiCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgssmuFyCyye4QoIrJrhSgisnuEqCqya4WoKrJ7hGgmsmuFaCaye4ToLrJrhegusnuEGCGya4UYIbJ7hJgpsmuFmCmye4RYJbJrhVglsnuE2C2ya4XYLbJ7hDgjsmuFOCOye4S4K7JrhbgrsnuEeCeya4V4J7J7hPgvsmuF+C+yd4QIIHJnhQggcneEiChyZ4WIKHJ3hEgkcmeFSCRydogsckeGyCxyV4fIInJHhigicleHKCgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BE9J8NQET0vw9ATPSPDMBM9K8OwEz0nw3ATPS/D8BC9I8MIEL0rw4gQvGeXDoaGhyxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wecSfD7BFxJ8McGXEnw5wVcSfDXB1xJ8PcE3EnwzwbcSfDvBdxJ8N8H3Enw/wQ8S/DDBjxL8OMFPEvw0wc8S/DzBLxL8MsGvEvw6wW8S/DbB7xL8PsEfEvwxwZ8S/DnBXxL8NcHfEvw9wT8S/DPBvxL8O8F/Evw3wZEJDqU4LMXRUhw9xeEpjpHimCmOSHGsFMdOcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRRJceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUkxS3T3GHFHdMcacUd05xlxR3TXG3FHdPcY8U90xxrxT3TnGfFPdNcb8U90/xgBQPTPGgFA9O8ZAUD03xsBQPT/GIFI9M8agUj07RFI9J8dgUj0vx+BRPSPHEFE9K8eQUBykGKYYpRinG/803TTFLMU+xSLFMsUqxTrFJsU2xS7FP8ZQUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTPGhFB9O8ZEUH03xsRQfT/GJFJ9M8akUn07xmRSfTXHkyJEjn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxQ/TvGTFD9N8bMUP0/xixS/TPGrFL9O8ZsUv03xuxS/T/GHFH9M8acUf07xlxR/TfG3FH9P8Y8U/0zxrxT/TvGfFP8dlX+KQxkOy3C0DEfPcHiGY2Q4ZoYjMhwrw7EzHCfDcTMcL8PxM5wgwwkznCjDiTOcJMNJM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznGV0nDXD2TKcPcM5MpwzHxoald/cGc6T4bwZzpfh/BkukOGCGS6UIRkunOEiGS6a4WIZLp7hEhkumeFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZqOeHzc0tEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdnaIbHZHhshsdleHyGJ2R4YoYnZXhyhoMMgwzDDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+wxPyfDUDE/L8PQMz8jwzAzPyvDsDM/J8NwMz8vw/AwvyPDCDC/KGPrfvvHSDC/L8PIMr8jwygyvyhh5dYbXZHhthtdleH3G8FEeuTHDmzK8OcNbMrw1w9syvD3DOzK8M8O7Mrw7w3syvDfD+zK8P8MHMnwww4cyfDjDRzJ8NMPHMnw8wycyfDLDpzJ8OsNnMnw2w+cyfD7DFzJ8McOXMnw5w1cyfDXD1zJ8PcM3Mnwzw7cyfDvDdzJ8N8P3Mnw/ww8y/DDDjzL8OMNPMvxz5H/i8wy/yPDLDL/K8OsMv8n+cxbxXYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+McovQz/yvDvDP/J8N8MR2Y4lOOwHEfLcfQch+c4Ro5j5jgix7FyHDvHcXIcN8fxchw/xwlynDDHiXKcOMdJcpw0x8lynDzHKXKcMsepcpw6x2lynDbH6XKcPscZcpwxx5lynDnHWXKcNcfZcpw9xznyUfOPc+U4d47z5DhvjvPlOH+OC+S4YI4L5UiOC+e4SI6L5rhYjovnuESOS+a4VI5L57hMjsvmuFyOy+e4Qo4r5rhSjivnuEqOq+a4Wo6r57hGjmvmuFaOa+e4To7r5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4RY5b5rhVjlvnuE2O2+a4XY7b57hDjjvmuFOOO+e4S4675rhbjrvnuEeOe+a4V45757hPjvvmuF+O++d4QI4H5nhQjgfneEiOh+Z4WI6H53hEjkfmeFSOR+dojsfkeGyOx+V4fI4n5HhijifleHKOgxyDHMMcoxzjHJMc0xyzHPMcixzLHKsc6xybHNscuxz7HE/J8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy/H8HC/I8cIcL8rx4hwvyfHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78rx7hzvyfHeHO/L8f4cH8jxwRwfyvHhHB/J8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDP0b6UY4f5/hJjp/m+FmOn+f4RY5f5vhVjl/n+E2O3+b4XY7f5/hDjj/m+FOOQxMNDf2S4685/pbj7zn+keOfOf6V4985/pPjvzmOHPV+gcMKHK3A0QscXuAYBY5Z4IgCxypw7ALHKXDcAscrcPwCJyhwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqkAIXLnCRAhctcLECFy9wiQKXLHCpApcucJmCoVH1Llfg8gWuUOCKBa5U4MoFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblDghgVuVODGBW5S4KYFblbg5gVuUeCWBW5V4NYFblPgtgVuV+D2Be5Q4I4F7lTgzgXuUuCuBe5W4O4F7lHgngXuVeDeBe5T4L4F7lfg/gUeUOCBBR5U4MEFHlLgoQUeVuDhBR5R/OcbdeTIkccfXaAFHlPgsQUeV+DxBZ5Q4IkFnlTgyQUOCgwKDAuMCowLTApMC8wKzAssCiwLrAqsC2wKbAvsCuwLPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCzyvwPMLvKDACwu8qMCLC7ykwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcLfKTARwt8rMDHC3yiwCcLfKrApwt8psBnC3yuwOcLfKHAFwt8qcCXC3ylwFcLfK3A1wt8o8A3C3yrwLcLfKfAdwt8r8D3C/ygwA8L/KjAjwv8pMBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAvwv8p8B/R3mjwKESh5U4Womjlzi8xDFKHLPEESWOVeLYJY5T4rgljlfi+CVOUOKEJU5U4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlQiJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDuUwdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLtESjynx2BKPK/H4Ek8o8cQSTyrx5BIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlnlLiqSWeVuLpJZ5R4pklnlXi2SWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/JY4scajCYRWOVuHoFQ6vcIwKx6xwRIVjVTh2heNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4YzXW0EwVzlzhLBXOWuFsFc5e4RwVzlnhXBXOXeE8Fc5b4XwVzl/hAhUuWOFCFVLhwhUuUuGiFS5W4eIVLlHhkhUuNTR8aFSdy1S4bIXLVbh8hStUuGKFK1W4coWrVLhqhatVuHqFa1S4ZoVrVbh2hetUuG6F61W4foUbVLhhhRtVuHGFm1S4aYWbVbh5hVtUuGWFW1W4dYXbVLhthdtVuH2FO1S4Y4U7VbhzhbtUuGuFu1W4e4V7VLhnhXtVuHeF+1S4b4X7Vbh/hQdUeGCFB1V4cIWHVHhohYdVeHiFR1R4ZIVHVXh0hVZ4TIXHVnhchcdXeEKFJ1Z4UoUnVzioMKgwrDCqMK4wqTCtMKswr7CosKywqrAe5ZMhbCvsKuwrPKXCUys8rcLTKzyjwjMrPKvCsys8p8JzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwnsrvK/C+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCpyt8psJnKxw5Ymjo+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N9R+Vc4VOOwGkercfQah9c4Ro1j1jiixrFqHLvGcWoct8bxahy/xglqnLDGiWqcuMZJapy0xslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWqctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFamRUDUNDQ4vUuGiNi9W4eI1L1LhkjUvVuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGWNW9W4dY3b1LhtjdvVuH2NO9S4Y4071bhzjbvUuGuNu9W4+7BhJwwN4Z417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1WuMxNR5b43E1Hl/jCTWeWONJNZ5c46DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7GvsZTajy1xtNqPL3GM2o8s8azajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLVmpqGhIW+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGp+s8akan67xmRqfrfG5Gp+v8YUaX6zxpRpfrvGVGl+t8bUaX6/xjRrfrPGtGt+u8Z0a363xvRrfr/GDGj+s8aMaP67xkxo/rfGzGj+v8Ysav/zvbH5d4zc1flvjdzV+X+MPNf5Y4081/lzjLzX+WuNvNf5e4x81/lnjXzX+XeM/Nf5b48gahxoc1uBoDY7e4PAGx2hwzAZHNDhWg2M3OE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VbPyf1e6OG2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNUiDCze4SIOLNrhYg4s3uESDSza4VINLN7hMg8s2uFyDy4/SfABXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGd25wlwZ3bXC3BndvcI8G92xwrwb3bnCfBvdtcL8G92/wgAYPbPCgBg9u8JAGD23wsAYPb/CIBo9s8KgGj27QBo9p8NgGj2vw+AZPaPDEBk9q8OQGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNjvzrP8uGUxo8tcHTGjy9wTMa/N9i/+wGz2nw3AbPa/D8Bi9o8MIGL2rw4uF4SYOXNnhZg5c3jPzvT8he1eDVDV7T4LUNXtfg9Q3e0DDif+cGNzd4S4O3Nnhbg7c3eEeDdzZ4V4N3N3hPg/c2eF+D9zf4QIMPNvhQgw83+EiDjzb4WIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Dh9y5CguLQ5rcbQWR29xeItjtDhmiyNaHGvUdeSE/+lui+O1OH6LE4wc+X/3E7U4cYuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a8tooxjO3uIcLc7Z4lwtzt3iPC3O2+J8Lc7f4gItLtjiQi3S4sItLtLioi0u1uLiLS7R4pItLtXi0i0u0+KyLS7X4vItrtDiii2u1OLKLa7S4qotrtbi6i2u0eKaLa7V4totrtPiui2u1+L6LW7Q4oYtbtTixi1u0uKmLW7W4uYtbtHili1u1eLWLW7T4rYtbtfi9i3u0OKOLe7U4s4t7tLiri3u1uLuLe7R4p4t7tXi3i3u0+K+Le7X4v4tHtDigS0e1OLBLR7S4qEtHtbi4S0e0eKRLR7V4tEt2uIxLR7b4nEtHt/iCS2e2OJJLZ7c4qDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsVTWjy1xdNaPL3FM1o8s8WzWjy7xXNaPLfF81o8v8ULWrywxYtavLjFS1q8tMXLWry8xStavLLFq1q8usVrWry2xetavL7FG1q8scWbWry5xVtavLXF21q8vcU7WryzxbtavLvFe1q8t8X7Wry/xQdafLDFh1p8uMVHWny0xcdafLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfFkS0OdTisw9E6HL3D4R2O0eGYHY7ocKwOx+5wnA7H7XC8DsfvcIIOJ+xwog4n7nCSDiftcLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDulw4Q4X6XDRDhfrcPEOl+hwyQ6X6nDpDpfpcNkOl+tw+Q5X6HDFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw22FDbtfh9h3u0OGOHe7U4c4d7tLhrh3u1uHuHe7R4Z4d7tXh3h3u0+G+He7X4f4dHtDhgR0e1OHBHR7S4aEdHtbh4R0e0eGRHR7V4dEd2uExHR7b4XEdHt/hCR2e2OFJHZ7c4aDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfD8zo8v8MLOryww4s6vLjDSzq8tMPLOry8wys6vLLDqzq8usNrOry2w+s6vL7DGzq8scObOry5w1s6vLXD2zq8vcM7Oryzw7s6vLvDezq8t8P7Ory/wwc6fLDDhzp8uMNHOny0w8c6fLzDJzp8ssOnOny6w2c6fLbD5zp8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfDkR0O9Tisx9F6HL3H4T2O0eOYPY7ocawex+5xnB7H7XG8HsfvcYIeJ+xxoh4n7nGSHiftcbIeJ+9xih6n7HGqHqfucZoep+1xuh6n73GGHmfscaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGeHuftcb4e5+9xgR4X7HGhHulx4R4X6XHRHhfrcfEel+hxyR6X6nHpHpfpcdkel+tx+R5X6HHFHlfqceUeV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf0eN+hxwx436nHjHjfpcdMeN+tx8x636HHLHrfqceset+lx25lwux6373GHHnfscaced+5xlx537XG3nj9H9rhHj3v2uFePe/e4T4/79rhfj/v3eECPB445NDSK4cE9HtLjoT0e1uPhPR7R45E9HtXj0T3a4zE9HtvjcT0e3+MJPZ7Y40k9ntzjoMegx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x1N6PLXH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbH63q8vscberyxx5t6vLnHW3q8tcfbery9xzt6vLPHu3q8u8d7ery3x/t6vL/HB3p8sMeHeny4x0d6fLTHx3p8vMcnenyyx6d6fLrHZ3p8tsfneny+xxd6fHHoPxxe7vGVHl/t8bUeX+/xjR7f7PGtHt/u8Z0e3+3xvR7f7/GDHj/s8aMeP+7xk/7/EXXO0WNd3dZO0jRNatt2+9S2bdu2n7ZJbf+OjdS2bdu2bSTf6Pu9997/z1jjrD3n2GvNufbYGz8dwM8G8PMB/GIAvxzArwbw6wH8ZgC/HcDvBvD7AfxhAH8cwJ8G8OcB/GUAfx3A3wbw9wH8YwD/HMC/BvDvAfxnAMcM4L8cGxTg4ACHBDhOgEMDHDfAYQGOF+DwAEcEOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrwPB//2H2AOcIcM4A5wpw7gDnCXDeAOcLcP4AFwhwwQAXCnDhABcJcNEACXCxABcPcIkAlwxwqQCXDnCZAJcNcLkAlw9whQBXDHClAFcOcJUAVw1wtQBXD3CNANcMcK0A1w5wnQDXDXC9ANcPcIMANwxwowA3DnCTADcNcLMANw9wiwC3DHCrALcOcJsAtw1wuwC3D3CHAHcMcKcAdw5wlwB3DXC3AHcPcI8A9wxwrwD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAI8M8KgAjw5GDTomwGMDPC5AAzw+wBMCPDHAkQGOCvCkAE8O8JQATw3wtABPD/CMAM8M8KwAzw7wnADPHflfpR3gBQFeGOBFAV4c4CUBDgQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYBzg6wEsDvCzAywO8IsArA7wqwKsDxv0frX9dgNcHeEOANwZ4U4A3B3hLgLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCADwf4SICPBvhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAfwb4V4B/B/hPgGMCHBvgoBAHhzgkxHFCHBriuCEOC3G8EIeHOCLE8UOcIMQJQ5woxIlDnCTESUOcLMTJQ5wixClDnCrEqUOcJsRpQ5wuxOlDnCHEGUOcKcSZQ5wlxFlDnC3E2UOcI8Q5Q5wrxLlDnCfEeUOcL8T5Q1wgxAVDXCjEhUNcJMRFQyTExUJcPMQlQlwyxKVCXDrEZUJcNsTlQlw+xBXCEf/rR64c4iohrhriaiGuHuIaIa4Z4lohrh3iOiGuG+J6Ia4f4gYhbhjiRiFuHOImIW4a4mYhbh7iFiFuGeJWIW4d4jYhbhvidiFuH+IOIe4Y4k4h7hziLiHuGuJuIe4e4h4h7hniXiHuHeI+Ie4b4n4h7h/iASEeGOJBIR4c4iEhHhriYSEeHuIRIR4Z4lEhHh3iMSEeG+JxIRri8SGeEOKJIY4McVSIJ4V4coinhHhqiKeFeHqIZ4R4ZohnhXh2iOeEeG6I54V4fogXhHhhiBeFeHGIl4Q4EGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4ugQLw3xshAvD/GKEK8M8aoQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQBz3vOHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X/2cv8IMQPQ/woxI9D/CTET0P8LMTPw8F+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4pgQx/67PhEOjnBIhONEODTCcSMcFuF4EQ6PcESE40c4QYQTRjhRhBNHOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRkiEi0W4eIRLRLhkhEtFuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOtEuG6E60W4foQbRLhhhBtFuHGEm0S4aYSbRbh5hFtEuGWEW0W4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRHRXh0hMdEeGyEx0VohMdHeEKEJ0Y4MsJREZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+FfEZ4X4fkRXhDhhRFeFOHFEV4S4UCEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYSjI7w0wssivDzCKyK8MsKrIrw6wmsivDbC6yK8PsIbIrwxwpsivDnCWyK8NcLbIrw9wjsivDPCuyK8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCx6Jh/6kTT0T4ZIRPRfh0hM9E+GyEz0X4fDTkP9+8GOFLEb4c4SsRvhrhaxG+HuEbEb4Z4VsRvh3hOxG+G+F7Eb4f4QcRfhjhRxF+HOEnEX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/vlf7P6O8J8Ix0Q4NsJBMQ6OcUiM48Q4NMZxYxwW43gxDo9xRIzjxzhBjBPGOFGME8c4SYyTxjhZ/MGgyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWMkxsViXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiNMbjYzwhxhNjHBnjqBhPivHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4nx3BjPi/H8GC+I8cIYL4rx4hgviXEgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7G0TFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjjQzE+HOMjMT4a42MxPh7jEzE+GeNTMT4d4zMxPhvjczE+H+MLMb4Y40sxvhzjKzG+GuNrMb4e4xsxvhnjWzG+HeM7Mb4b43sxvh/jBzF+GONHMX4c4ycxfhrjZzF+HuMXMX4Z41cxfh3jNzF+G+N3MX4f4w8x/hjjTzH+HOMvMf4a428x/h7jHzH+GeNfMf4d4z8xjolxbIyDEhyc4JAEx0lwaILjJjgswfESHJ7giATHT3CCZLL/7Z0nTnCSBCdNcLIEJ09wigSnTHCqBKdOcJoEp01wugSnT3CGBGdMcKYEZ05wlgRnTXC2BGdPcI4E50xwrgTnTnCeBOdNcL4E509wgQQXTHChBBdOcJEEF02QBBdLcPEEl0hwyQSXSnDpBJdJcNkEl0tw+QRXSHDFBFdKcOUEV0lw1QRXS3D1BNdIcM0E10pw7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBI9L0ASPT/CEBE9McGSCoxI8KcGTEzwlwVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMGBBIMEwwSjBOMEkwTTBLME8wSLBMsEqwTrBJsE2wS7BPsERyd4aYKXJXh5glckeGWCVyV4dYLXJHhtgtcleH2CNyR4Y4I3JXhzgrckeGuCtyV4e4J3JHhngncleHeC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8kOCbBsQkOSnFwikNSHCfFoSmOm+KwFMdLcXiKI1IcP8UJUpwwxYlSnDjFSVKcNMX1hg8aNHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inMMG+ScKc6V4twpzpPivCnOl+L8KS4wCBdMcaEUF05xkRQXTZEUF0tx8RSXSHHJFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd1/c0xx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSPSvHoFI9J8dgUj0vRFI9P8YQUT0xxZIqjUjwpxZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxYEUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xRHp3hper2XpXh5ilekeGWKV6V4dYrXpHhtiteleH2KN6R4Y4o3pXhzirekeGuKt6V4e4p3pHhnineleHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpPhoio+l+HiKT6T4ZIpPpfh0is+k+GyKz6X4fIovpPhiii+l+HKKr6T4aoqvpfh6im+k+GaKb6X4dorvpPhuiu+l+H6KH6T4YYofpfhxip+k+GmKn6X4eYpfpPhlil+l+HWK36T4bYrfpfh9ij+k+GOKP6X4c4q/pPhrir+l+HuKf6T4Z4p/pfh3iv+kOCbFsSkOynBwhkMyHCfDoRmOm+GwDMfLcHiGIzIcP8MJMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0QzJcLMPFM1wiwyUzXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw7UzXCfDdTNcL8P1M9wgww0z3CjDjTPcJMNNM9wsw80z3CLDLTPcKsOtM9wmw20z3C7D7TPcIcMdM9wpw50z3CXDXTPcLcPdM9wjG+meGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6T4bEZHpehGR6f4QkZnpjhyAxHZXhShidneEqGp2Z4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhgMZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hmOzvDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4M78rw7gzvyfDeDO/L8P4MH8jwwQwfyvDhDB/J8NEMH8vw8QyfyPDJDJ/K8OkMn8nw2Qyfy/D5DF/I8MUMX8rw5QxfyfDVDF/L8PUM38jwzQzfyvDtDN/J8N0M38vw/Qw/yPDDDD/K8OMMP8nw0ww/y/DzDL/I8MsMv8rw6wy/yfDbDL/L8PsMf8jwxwx/yvDnDH/J8NcMf8vw9wz/yPDPDP/K8O8M/8lwTIZjMxyU4+Ach+Q4To5Dcxw3x2E5jpev4vAcR+Q4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojuS4WI6L57hEjkvmuFSOS+e4TI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+YMHvrfGdU2OW6b43Y5bp/jDjnumONOOe6c4y457prjbjnunuMeOe6Z41457p3jPjnum+N+Oe6f4wE5HpjjQTkenOMhOR6a42E5Hp7jETkemeNROR6d4zE5HpvjcTma4/E5npDjiTmOzHFUjifleHKOp+R4ao6n5Xh6jmfkeGaOZ+U4duyYsefkeG6O5+V4fo4X5HhhjhfleHGOl+Q4kGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2Of4+gcL83xshwvz/GKHK/M8aocr87xmhyvzfG6HK/P8YYcb8zxphxvzvGWHG/N8bYcb8/xjhzvzPGuHO/O8Z4c783xvhzvz/GBHB/M8aEcH87xkRwfzfGxHB/P8Ykcn8zxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHD/N8bMcP8/xixy/zPGrHL/O8Zscv83xuxy/z/GHHH/M8accf87xlxx/zfG3HH/P8Y8c/8zxrxz/zvGfHMf8i2mOgwocXOCQAscpcGiB4xY4rMDxChxe4IgCxy9wggInLHCiAicucJICJy1wsgInL3CKAqcscKoCpy5wmgKnLXC6AqcvcIYCZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLZACFytw8QKXKHDJApcqcOkClylw2QKXK3D5AlcocMUCVypw5QJXKXDVAlcrcPUC1yhwzQLXKnDtAtcpcN0C1ytw/QI3KHDDAjcqcOMCNylw0wI3K3DzArcocMsCtypw6wK3KXDbArcrcPsCdyhwxwJ3KnDnAncpGPw/8+zdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rkALPL7AEwo8scCRBY4q8KQCTy7wlAJPLfC0Ak8v8IwCzyzwrALPLvCcAs8t8LwCzy/wggIvLPCiAi8u8JICBwoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxd4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQVeV+D1Bd5Q4I0F3lQw5OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkCnynw2QKfK/D5Al8o8MUCXyrw5QJfKfDVAl8r8PUC3yjwzQLfKvDtAt8p8N0C3yvw/QI/KPDDAj8q8OMCPynw0wI/K/DzAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ylwTIFjCxxU4uASh5Q4TolDSxy3xGEljlfi8BJHlDh+iROUOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4/QicocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykxEVLpMTFSly8xCVKXLLEpUpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzELUrcssStSty6xG1K3LbE7UrcvsQdStyxxJ1K3LnEXUrctcTdSty9xD1K3PNfDAYNGrR3ifuUuG+J+5W4f4kHlHhgiQeVeHCJh5R4aImHlXh4iUeUeGSJR5V4dInHlHhsiceVaInHl3hCiSeWOLLEUSWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiuSWeV+L5JV5Q4oUlXlTixSVeUuJAiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jo0u8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbyv97r+DWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK/HxEp8o8ckSnyrx6RKfKfHZEp8bhc+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F05duz/+PE/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4ljShxb4qAKB1c4pMJxKhxa4bgVDqtwvAqHVziiwvErnKDCCSucqMKJK5ykwkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5zh33iDBg2aqcKZK5ylwlkrnK3C2Suco8I5K5yrwrkrnKfCeSucr8L5K1ygwgUrXKjChStcpMJFK6TCxSpcvPr/98YuWeFSFS5d4TIVLlvhchUuX+EKFa5Y4UoVrlzhKhWuWuFqFa5e4RoVrlnhWhWuXeE6Fa5b4XoVrl/hBhVuWOFGFW5c4SYVblrhZhVuXuEWFW5Z4VYVbl3hNhVuW+F2FW5f4Q4V7ljhThXuXOEuFe5a4W4V7l7hHhXuWeFeFe5d4T4V7lvhfhXuX+EBFR5Y4UEVHlzhIRUeWuFhFR5e4REVHlnhURUeXeExFR5b4XEVWuHxFZ5Q4YkVjqxwVIUnVXhyhadUeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVXh+hRdUeGGFF1V4cYWXVDhQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/h6AovrfCyCi+v8IoKr6zwqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKb63wtgpvr/COCu+s8K4K767wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8Kx1Q4tsJBNQ6ucUiN49Q4tMZxaxxW43g1Dq9xRI3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWSI2L1bh4jUvUuGSNS9W4dI3L1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1WiNx9d4Qo0n1jiyxlE1nlTjyTWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjQI1BjWG9yn/qUlxjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j6BovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a767xnhrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8ax9Q4tsZBDQ5ucEiD4zQ4tMFxGxzW4HgNDm9wRIPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2SIOLNbh4g0s0uGSDSzW4dDP+4dnk/78/Wq7B5RtcocEVG1ypwZUbXKXBVRtcrcHVG1yjwTUbXKvBtRtcp2H4ug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfgoKG4Q4M7NrhTgzs3uEuDuza4W4O7N7hHg3s2uFeDeze4T4P7Nrhfg/s3eECDBzZ4UIMHN3hIg4c2eFiDhzd4RINHNnhUg0c3eEyDxzZ4XIM2eHyDJzR4YoMjGxzV4EkNntzgKQ2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNDjQYNBg2GDUYN5g0mM6dmDWYN1g0WDZYNVg32DTYNtg12Dc4usFLG7yswcsbvKLBKxu8qsGrG7ymwWsbvK7B6xu8ocEbG7ypwZsbvKXBWxu8rcHbG7yjwTsbvKvBu4cMGvQv5+9t8L4G72/wgQYfbPChBh9u8JEGH23wsQYfb/CJBp9s8KkGn27wmQafbfC5Bp9v8IUGX2zwpQZfbvCVBl9t8LUGX2/wjQbfbPCtBt9u8J0G323wvQbfb/CDBj9s8KMGP27wkwY/bfCzBj9v8IsGv2zwqwa/bvCbBr9t8LsGv2/whwZ/bPCnBn9u8JcGf23wtwZ/b/CPBv9s8K8G/27wnwbHNDj2X062OLjFIS2O0+LQFsdtcViL47U4vMURLY7f4gQtTtjiRC1O3OIkLU7a4mQtTt7iFC1O2eJULU493iCnaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFmlxsRYXb3GJFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBZt8fgWT2jxxBZHtjiqxZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtaHGgxaDFsMWoxbjFpMW0xazFvsWixbLFqsW6xabFtsWuxb3F0i5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLd7Z4V4t3t3hPi/e2eF+L97f4QIsPtvhQiw+3+EiLj7b4WIuPt/hEi0+2+FSLT7f4TIvPtvhci8+3+EKLL7b4Uosvt/hKi6+2+FqLr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBy7+y2I9a/LjFT1r8tMXPWvy8xS/aoX7Z4lctft3iNy1+2+J3LX7f4g8t/tjiTy3+3OIvLf7a4m8t/t7iHy3+2eJfLf7d4j8tjmlxbIuDOhzc4ZAOx+lwaIfjdjisw/E6HN7hiA7H73CCDifscKIOJ+5wkg4n7XCyDifvcIoOp+xwqg6n7nCaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftkA4X63DxDpfocMnu/zz1ZTpctsPlOgb9m+sKHa7Y4UodrtzhKh2u2uFqHa7e4RodrtnhWh2u3eE6Ha7b4Xodrt/hBh1u2OFGHW7c4SYdbtrhZh1u3uEWHW7Z4VYdbt3hNh1u2+F2HW7f4Q4d7tjhTh3u3OEuHe7a4W4d7t7hHh3u2eFeHe7d4T4d7tvhfh3u3+EBHR7Y4UEdHtzhIR0e2uFhHR7e4REdHtnhUR0e3eExHR7b4XEd2uHxHZ7Q4YkdjuxwVIcndXhyh6d0eGqHp3V4eodndHhmh2d1eHaH53R4bofndXh+hxd0eGGHF3V4cYeXdDjQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/h6A4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/sBv/v2dV7Ory3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/LXD3zr8vcM/Ovyzw786/LvDfzoc0+HYDgf1OLjHIT2O0+PQHsftcViP4/U4vMcRPY7f4wQ9TtjjRD1O3OMkPU7a42Q9Tt7jFD1O2eNUPU7d4zQ9TtvjdD1O3+MMPc7Y40w9ztzjLP+NP1uPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9kiPi/W4eI9L9Lhkj0v1uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/Voj8f3eEKPJ/Y4ssdRPZ7U48k9ntLjqT2e1uPpPZ7R45k9ntXj2T2e0+O5PZ7X4/k9XtDjhT1e1OPFPV7S40CPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY+je7z0v/hc3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvjfT3e3+MDPT7Y40M9PtzjIz0+2uNjPT7e4xM9PtnjUz0+3eMzPT7b43M9Pt/jCz2+2ONLPb7c4ys9vtrjaz2+3uMbPb7Z41s9vt3jOz2+2+N7Pb7f4wc9ftjjRz1+3OMnPX7a42c9ft7jFz1+2eNXPX7d4zc9ftvjdz1+3+MPPf7Y4089/tzjLz3+2uNvPf7e4x89/tnjXz3+3eM/PY7pcWyPg0bj4NE4ZDSOMxqHjsZxR+Ow0TjeaBw+GkeMxvFH4wSj/x9R7xw0+BF0bd8bbLSxbfOKbWdjc8ON7VybZDe2bf1s3LFt27bt/Srv87zvN//PTHXXOVUzXX364LAAJw1wsgAnD3CKAKcMcKoApw5wmgCnDXC6AKcPcIYAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDP7fnPqx8wQ4b4DzBTh/gAsEuGCACwW4cICLBLhogIsFuHiASwRIgEsGuFSASwe4TMA4/8W1XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgMMD3DjATQLcNMDNAtw8wC0C3DLArQLcOsBtAtw2wO0C3D7AHQLcMcCdAtw5wF0CHBHgrgHuFuDuAe4R4J4B7hXgyAD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAI8M8KgAjw7wmACPDfC4AA1wVIDHB3hCgCcGODrAMQGeFODJAZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hJgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+BggLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCADwf4SICPBvhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAfwb4V4B/B/hPgP/+x7kAB0IcEuI4IY4b4nghjh/i0BAnCHHCECcKceIQJwlxWIiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T8jI/97t84U4f4gLhLhgiAuFuHCIi4S4aIiLhbh4iEuESIhLhrhUiEuHuEyIy4a4XIjLh7hCiCuGuFKIK4e4SoirhrhaiKuHuEaIa4a4Vohrh7hOiOuGuF6I64e4QYgbhrhRiMND3DjETULcNMTNQtw8xC1C3DLErULcOsRtQtw2xO1C3D7EHULcMcSdQtw5xF1CHBHiriHuFuLuIe4R4p4h7hXiyBD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EA1xVIjHh3hCiCeGODrEMSGeFOLJIZ4S4qkhnhbi6SGeEeKZIZ4V4tkhnhPiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hJiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+JgiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+G+FCID4f4SIiPhvhYiI+H+ESIT4b4VDjg0yE+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIX4W4uchfhHilyF+FeLXIX4T4rchfhfi9yH+EOKPIf4U4s8h/hLiryH+FuLvIf4R4p8h/hXi3yH+E+K/IY4NcSDCIRGOE+G4EY4X4fgRDo1wgggnjHCiCCeOcJIIh0U4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0RIhEtGuFSES0e4TITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEwyPcOMJNItw0ws0i3DzCLSLcMsKtItw6wm0i3DbC7SLcPsIdItwxwp0i3DnCXSIcEeGuEe4W4e4R7hHhnhHuNXasIyPcO8J9Itw3wv0i3D/CAyI8MMKDIjw4wkMiPDTCwyI8PMIjIjwywqMiPDrCYyI8NsLjIjTCUREeH+EJEZ4Y4egIx0R4UoQnR3hKhKdGeFqEp0d4RoRnRnhWhGdHeE6E50Z4XoTnR3hBhBdGeFGEF0d4SYSXRnhZhJdHeEWEV0Z4VYRXR3hNhNdGeF2E10d4Q4Q3RnhThDdHeEuEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYSDEd4a4W0R3h7hHRHeGeFdEd4d4T0R3hvhfRHeH+EDET4Y4UMRPhzhIxE+GuFjET4e4RMRPhnhUxE+HeEzET4b4XMRPh/hCxG+GOFLEb4c4SsRvhrhaxG+HuEbEb4Z4VsRvh3hOxG++78cez/CDyL8MMKPIvw4wk8i/DTCzyL8PMIvIvwywq8i/DrCbyL8NsLvIvw+wh8i/DHCnyL8OcJfIvw1wt8i/D3CPyL8M8K/Ivw7wn8i/DfCsREOxDgkxnFiHDfG8WIcP8ahMU4Q44QxThTjxDFOEuOwGCcdGBj4b9/kMU4R45QxY6aKceoYp4lx2hini3H6GGeIGTLwP6UXZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGIlxyRiXinHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inF4jBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuEOMO8a4U4w7x7hLjCNi3DXG3WLcPcY9Ytwzxr1iHBnj3jHuE+O+Me4X4/4xHhDjgTEeFOPBMR4S46ExHhbj4TEeEeORMR4V49ExHhPjsTEeF6Mxjorx+Ph//BL+W6NjHBPjSTGeHOMpMZ4a42kxnh7jGTGeGeNZMZ4dD/WcGM+N8bwYz4/xghgvjPGiGC+O8ZIYL43xshgvj/GKGK+M8aoYr47xmhivjfG6GK+P8YYYb4zxphhvjvGWGIP/8DcwMBDFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Mc4GOOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R45MxPhXj0zE+E+OzMT4X4/MxvhDjizG+FOPLMb4S46sxvhbj6zG+EeObMb4V49sxvhPjuzG+F+P7MX4Q44cxfhTjxzF+EuOnMX4W4+cxfhHjlzF+FePXMX4T47cxfhfj9zH+EOOPMf4U488x/hLjrzH+FuPvMf4R458x/hXj3zH+E+O/MY4dDwcSHJLgOAmOm+B4CY6f4NAEJ0hwwgQnSnDiBCdJcFiCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCJLhkgksluHTCqGUSXDbB5RJcPsEVElwxwZUSXDnBVRJcNcHVElw9wTUSXDPBtRJcO8F1Elw3wfUSXD/BDRLcMMGNEhye4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4IgEd01wtwR3T3CPBPdMcK8ERya4d4L7JLhvgvsluH+CByR4YIIHJXhwgockeGiChyV4eIJHJHhkgkcleHSCxyR4bILHJWiCoxI8PsETEjwxwdEJjknwpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEgwTDBKME4wSThLH/O3bQPMEiwTLBKsE6wSbBNsEuwT7BwQRvTfC2BG9P8I4E70zwrgTvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEH03wsQQfT/CJBJ9M8KkEn07wmQSfTfC5BJ9P8IUEX0zwpQRfTvCVBF9N8LUEX0/wjQTfTPCtBN9O8J0E303wvQTfT/CDBD9M8KMEP07wk7En+mmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+CYxMcSHFIiuOkOG6K46U4fopDU5wgxQlTnCjFiVOcJMVhKU6a4mQpTp7iFClOmeJUKU6d4jQpTpvidClOn+IMKc6Y4kwpzpziLCnOmuJsKc6e4hwpzpniXCnOneI8Kc6b4nwpzp/iAikumOJCKS6c4iIpLpriYikunuISKZLikikuleLSKS6T4rIpLpfi8imukOKKKa6U4soprpLiqimuluLqKa6RMmR0imuluHaK66S4borrpbh+ihukuGGKG6U4PMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcURKe6a4m4p7p7iHinumeJeKY5Mce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSPSvHoFI9J8dgUj0vRFEeleHyKJ6R4Yor/xT0mxZNSPDnFU1I8NcXTUjw9xTNSPDPFs1I8O8VzUjw3xfNSPD/FC1K8MMWLUrw4xUtSvDTFy1K8PMUrUrwyxatSvDrFa1K8NsXrUrw+xRtSvDHFm1K8Od1v2C0pBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ikOpnhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+k+GSKT6X4dIrPpPhsis+l+HyKL6T4Yoovpfhyiq+k+GqKr6X4eopvpPhmim+l+HaK76T4borvpfh+ih+k+GGKH6X4cYqfpPhpip+lqw98nuIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pvi2BQHMhyS4TgZjpvheBmOn+HQDCfIcMIMJ8pw4gwnyXBYhpNmOFmGk2c4RYZTZjhVhlNnOE2G02Y4XYbTZzhDhjNmOFOGM2c4S4azZjhbhrNnOEeGc2Y4V4ZzZzhPhvNmOF+G82e4QIYLZrhQhgtnuEiGi2aMWSzDxTNcIkMyXDLDpTJcOsNlMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTIcnuHGGW6SMWTTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lwRIa7ZrhbhrtnuEeGe2a4V4YjM9w7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyNMNRGR6f4QkZnpjh6AzHZHhShidneEqGp2Z4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4ZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hoMZ3prhbRnenuEdGd6Z4V0Z3p3hPRnem+F9Gd6f4QMZPpjhQxk+nOEjGT6a4WMZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvh2AwHchyS4zg5jpvjeDmOn+PQHCfIccIcJ8px4hwnyXFYjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDzkwLDgw4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESO5LhkjkvluHSOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvlODzHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHETnumuNuOe6e4x457pnjXjmOzHHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L0RxH5Xh8jifkeGKOo3Mck+NJOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OQ7meGuOt+V4e4535HhnjnfleHeO9+R4b4735Xh/jg/k+GCOD+X4cI6P5Phojo/l+HiOT+T4ZI5P5fh0js/k+GyOz+X4fI4v5Phiji/l+HKOr+T4ao6v5fh6jm/k+GaOb+X4dj7Gd3J8N8f3cnw/xw9y/DDHj3L8OMdPcvw0x89y/DzHL3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9y/DPHv3L8O8d/cvw3x7E5DhQ4pMBxChy3wPEKHL/AoQVOUOCEBU5U4MQFTlLgsAInLXCyAicvcIoCpyxwqgKnLnCaAqctcLoCpy9whgJnLHCmAmcucJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy9wiQIpcMkClxo7duyJBS5T4LIFLlfg8gWuUOCKBa5U4MoFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblDghgVuVODwAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAkcUuGuBuxW4e4F7FLhngXsVOLLAvQvcp8B9CxwzMDCwf4EHFHhggQcVeHCBhxR4aIGHFXh4gUcUeGSBRxV4dIHHFHhsgccVaIGjCjy+wBMK/C9Xo/87u8CTCjy5wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwo8t8DzCjy/wAsKvLDAiwq8uMBLCry0wMsKvLzAKwq8ssCrCry6wGsKvLbA6wq8vsAbCryxmOD/9ebdMjDEoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsDBAm8t8LYCby/wjgLvLPCuAu8u8J4C7y3wvgLvL/CBAh8s8KECHy7wkQIfLfCxAh8v8IkCnyzwqQKfLvCZAp8t8LkCny/whQJfLPClAl8u8JUCXy3wtQJfL/CNAt8s8K0C3y7wnQLfLfC9At8v8IMCPyzwowI/LvCTAj8t8LMCPy/wiwK/LPCrAr8u8JsCvy3wuwK/L/CHAn8s8KcCfy7wlwJ/LfC3An8v8I8C/yzwrwL/LvCfAv8tcGyBAyUOKXGcEsctcbwSxy9xaIkTlDhhiROVOHGJk5Q4rMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKX8/zXas5c4R4lzljhXiXOXOE+J85Y4X4nzl7hAiQuWuFCJC5e4SImLlrhYiYuXuESJlLhkiUuVuHSJy5S4bInLlbh8iSuUuGKJK5W4comrlLhqiauVuHqJa5S4Zolrlbh2ieuUuG6J65W4fokblLhhiRuVOLzEjUvcpMRNS9ysxM1L3KLELUvcqsStS9ymxG1L3K7E7UvcocQdS9ypxJ1L3KXEESXuWuJuJe5e4h4l7lniXiWOLHHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r0RJHlXh8iSeUeGKJo0scU+JJJZ5c4iklnlriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSUGJYYlRiXGJSYlpiVmJeYlFiWW5f/t8R5tU2JbYldiX+JgibeWeFuJt5d4R4l3lnhXiXeXeE+J95Z4X4n3l/hAiQ+W+FCJD5f4SImPlvhYiY+X+ESJT5b4VIlPl/hMic+W+FyJz5f4QokvlvhSiS+X+EqJr5b4Womvl/hGiW+W+FaJb5f4Tonvlvheie+X+EGJH5b4UYkfl/hJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XYnfl/hDiT+W+FOJP5f4S4m/lvhbib+X+EeJf5b4V4l/l/hPif+WOLbEgQqHVDhOheNWOF6F41c4tMIJKpywwokqnLjCSaqhDqtw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K5/nf++ercP4KF6hwwQoXqnDhChepcNEKF6tw8QqXqJAKl6xwqQqXrnCZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowqHV7hxhZtUuGmFm1W4eYVbVLhlhVtVuHWF21S4bYXbVbh9hTtUuGOFO1W4c4W7VDiiwl0r3K3C3Svco8I9K9yrwpEV7l3hPhXuW+F+Fe5f4QEVHljhQRUeXOEhFR5a4WEVHl7hERUeWeFRFR5d4TEVHlvhcRVa4agKj6/whApPrHB0hWMqPKnCkys8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrPK/C8yu8oMILK7yowosrvKTCSyu8rGLgP2xdUeGVFV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUmFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4WCFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F//7H9wEcqHFIjePUOG6N49U4fo1Da5ygxglrnKjGiWucpMZhNU5a42Q1Tl7jFDVOWeNUNU5d4zQ1TlvjdDVOX+MMNc5Y40w1zlzjLDXOWuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXuMSNVLjkjUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOPwGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGkfUuGuNu9W4e4171Ou7Z4171Tiyxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxsNrPKLGI2s8qsajazymxmNrPK5GaxxV4/E1nlDjiTWOrnFMjSfVeHKNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231BjUGNYY1RjXmNSY1pjVmNdY1FjWWNVY19jU2NbY1djXOFjjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszMOGfiPO8/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1ji2xoEGhzQ4ToPjNjheg+M3OLTBCRqcsMGJGpy4wUkaHNbgpA1O1uDkDU7R4JQNTtXg1A1O0+C0DU7X4PQNztDgjA3O1ODMDc7S4KwNztbg7A3O0eCcDc7V4NwNztPgvA3O1+D8DS7Q4IINLtTgwg0u0uCiDS7W4OINLtEgDS7Z4FINLt3gMg0u2+ByDS7f4AoNrtjgSg2u3OAqDa7a4GoNrt7gGv/lYMjAwFoNrt3gOg2u2+B6Da7f4AYNbtjgRg0Ob3DjBjdpcNMGN2tw8wa3aHDLBrdqcOsGt2lw2wa3a3D7BndocMcGd2pw5wZ3aXBEg7s2uFuDuze4R4N7NrhXgyMb3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8ssGjGjy6wWMaPLbB4xq0wVENHt/gCQ2e2ODoBsc0eFKDJzd4SoOnNnhag6c3eEaDZzZ4VoNnN3hOg+c2eF6D5zd4QYMXNnhRgxc3eEmDlzZ4WYOXN3hFg1c2eFWDVzd4TYPXNnhdg9c3eEODNzZ4U4M3NwyMHhgwaDBsMGowbjBpMG0wazBvsGiwbLBqsG6wabBtsGuwb3CwwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBzxv8osEvG/yqwa8b/KbBbxv8rsHvG/yhwR8b/KnBnxv8pcFfG/ytwd8b/KPBPxv8q8G/G/ynwX8bHNvgQItDWhynxXFbHK/F8Vsc2v4fTfL/+adP1OLELU7S4rAWJ21xshYnb3GKFqdscaoWp25xmhanbXG6FqdvcYYWZ2xxphZnbnGWFmdtcbYWZ29xjhbnbHGuFuducZ4W521xvhbn/79WfS0u1OLCLS7S4qItLtbi4i0u0SItLtniUi0u3eIyLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi0Ob3HjFjdpcdMWN2tx8xa3aHHLFrdqcesWt2lx2xa3a3H7FndocccWd2px5xZ3aXFEi7u2uFuLu7e4R4t7trhXiyNbnGBgYGCfFvdtcb8W92/xgBYPbPGgFg9u8ZAWD22HDBzW4uEtHtHikS0e1eLRLR7T4rEtHteiLY5q8fgWT2jxxBZHtzimnWjgpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xYHW7y1xdtavL3FO1q8s8W7Wry7xXtavLfF+1q8v8UHWnywxYdafLjFR1p8tMXHWny8xSdafLLFp1p8usVnWny2xedafL7FF1p8scWXWny5xVdafLXF11p8vcU3WnyzxbdafLvFd1p8t8X3Wny/xQ9a/LDFj1r8uMVPWvy0xc9a/LzFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xbEtDnQ4pMNxOhy3w/E6HL/DoR1O0OGEHU7U4cQdTtLhsA4n7XCyDifvcIoOp+xwqg6n7nCaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtm7EJAMDOEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh3S4ZIdLdbh0h8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdTi8w4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylwxEd7trhbh3u3uEeHe7Z4V4djuxw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P69AOR3V4fIcndHhih6M7HNPhSR2e3OEpHZ7a4Wkdnt7hGR2e2eFZHZ7d4TkdntvheR2e3+EFHV7Y4UUdXtzhJR1e2uFlHV7e4RUdXtkx5D9cXd3hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdDnZ4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3X4eIdPdPhkh091+HSHz3T4bIfPdfh8hy90+GKHL3X4coevdPhqh691+HqHb3T4Zodvdfh2h+90+G6H73X4focfdPhhhx91+HGHn3T4aYefdfh5h190+GWHX3X4dYffdPhth991+H2HP3T4Y4c/dfhzh790+GuHv3X4e4d/dPhnh391+HeH/3T4b4djOxzocUiP4/Q4bo/j9Th+j0N7nKDHCXucqMeJe5ykx2E9TtrjZD1O3uMUPU7Z41Q9Tt3jND1O2+N0PU7f4ww9ztjjTD3O3OMsPc7a42w9zt7jHD3O2eNcPc7d4zw9ztvjfD3O3+MCw3HBHhfqceEeF+lx0R4X63HxHpfokR6X7HGpHpfucZkel+1xuR6X73GFHlfscaUeV+5xlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+9xgx437HGjHof3uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0OKLHXXvcrcfde9yjxz173KvHkT3u3eM+Pe7b43497t/jAT0e2ONBPR7c4yE9HtrjYT0e3uMRPR7Z41E9Ht3jMT0e2+NxPdrjqB6P7/GEHk/scXSPY3o8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHoMewx6jHuMekx7THrMe8x6LHsseqx3r8gYH/MNz22PXY9zjY46093tbj7T3e0eOdPd7V4939/2gL7u3xvh7v7/GBHh/s8aEeH+7xkR4f7fGxHh/v8Yken+zxqR6f7vGZHp/t8bken+/xhR5f7PGlHl/u8ZUeX+3xtR5f7/GNHt/s8a0e3+7xnR7f7fG9Ht/v8YMeP+zxox4/7vGTHj/t8bMeP+/xix6/7PGrHr/u8Zsev+3xux6/7/GHHn/s8acef+7xlx5/7fG3Hn/v8Y8e/+zxrx7/7vGfHv/tcWyPA4M4ZBDHGcRxB3G8QRx/EIcO4gSDOOEgTjSIEw/iJIM4bBAnHcTJBnHyQZxiEKccxKkGcepBnGYQpx3E6QZx+kGcYRBnHMSZBnHmQZxlEGcdxNkGcfZBnGMQ5xzEuQZx7kGcZxDnHcT5BnH+QVxgEBccxIUG+f9oOsfwMY6Ha/+StE1t29Zd225Tpk5tm3fbJLVt227XRm3bto28V563//k232YPdq+zO3vGhQJcOMBFAlw0wMUCXDxAAlwiwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAYQFuHOAmAW4a4GYBbr7qwMBYLIcHuGWAWwW4dYDbBLhtgNsFuH2AIwLcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM0wOMCPD7AEwIcGeCoAEcHeGKAJwV4coCnBHhqgKcFeHqAZwR4ZoBnBXh2gOcEeG7w/7uWx44LArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7ArwzwLsCvDvAewK8N8D7Arw/YMxfAT4Y4EMBPhxgEGA4lt//1pcEmAaY/ae3IsAywCrAOsAmwDbALsA+wEcCfDTAxwJ8PMAnAnwywKcCfDrAZwJ8NsDnAnw+wBcCfDHAlwJ8OcBXAnw1wNcCfD3ANwJ8M8C3Anw7wHcCfDfA9wJ8P/i/b5gzDh7AjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAsTj9HeA/Af4b4JgAB0IcFOLgEIeEOE6I44Y4XohDQxw/xAlCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxHBh/phBnDnGWEGcNcbYQZw9xjhDnDHGuEOcOcZ4Q5w1xvhDnD3GBEBcMcaEQFw5xkRAXDXGxEBcPkRCXCHHJEJcKcekQlwlx2RCXC3H5EFcIccUQVwpx5RBXCXHVEFcLcfUQ1whxzRDXCnHtENcJcd0Q1wtx/RA3CHHDEDcKcViIG4e4SYibhrhZiJuHuEWIw0PcMsStQtw6xG1C3DbE7ULcPsQRIe4Q4o4h7hTiziHuEuKuIe4W4u4h7hHiniHuFeLeIe4T4r4h7hfi/iEeEOKBIR4U4sEhHhLioSEeFuLhIR4R4pEhHhXi0SEeE+KxIRricSEeH+IJIY4McVSIo0M8McSTQjw5xFNCPDXE00I8PcQzQjwzxLNCPDvEc0I8N8TzQjw/xAtCvDDEi0K8OMRLQrw0xMtCvDzEK0K8MsSrQrw6xGtCvDbE60K8PsQbQrwxxJtCvDnEW0K8NcTbQrw9xDtCvDPEu0K8O8R7Qrw3xPtCvD/EB0J8MMSHQnw4xCDEMBwzdGy+jENMQkxDzELMQyxCLEOsQqxDbEJsQ+xC7EN8JMRHQ3wsxMdDfCLEJ0N8KsSnQ3wmxGdDfC7E50N8IcQXQ3wpxJdDfCXEV0N8LcTXQ3wjxDdDfGuCgYGxfnsnxHdDfC/E90P8IMQPQ/woxI9D/CTET0P8LMTPQ/wixC9D/CrEr0P8JsRvQ/wuxO9D/CHEH0P8KcSfQ/wlxF9D/C3E30P8I8Q/Q/wrxL9D/CfEf0McE+JAhIMiHBzhkAjHiXDcCMeLcGiE40c4QYQTRjhRhBNHOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNG+GWEs0c4R4RzRrjWZDh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aISLRbh4hES4RIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0e4SoSrRrhahKtHuEaEa45dQ4RrR7hOhOtGuF6E60e4QYQbRrhRhMMi3DjCTSLcNMLNItw8wi0iHB7hlhFuFeHWEW4T4bYRbhfh9hGOiHCHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjdAIj4vw+AhPiHBkhKMiHB3hiRGeFOHJEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuRGeF+H5EV4Q4YVj9TKAF0d4SYSXRnhZhJdHeEWEV0Z4VYRXR3hNhNdGeF2E10d4Q4Q3RnhThDdHeEuEt0Z4W4S3R3hHhHdGeFeEd0d4T4T3RnhfhPdH+ECED0b4UIQPRxhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhH+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+NFYnw0MDHwS4acRfhbh5xGDv/jPK19F+HWE30T4bYTfRfh9hD9E+GOEP0X4c4S/RPhrhL9F+HuEf0T4Z4R/Rfh3hP9E+G+EYyIciHFQjINjHBLjODGOG+N4MQ6NcfwYJ4hxwhgninHiGCeJcdIYJ4tx8hiniHHKGKeKceoYp4lx2hini3H6GGeIccYYZ4px5hhniXHWGGeLcfYY54hxzhjninHuGOeJcd4Y54tx/hgXiHHBGBeKceEYF4lx0RgXi3HxGIlxiRiXjHGpGJeOcZkYl41xuRiXj3GFGFeMcaUYV45xlRhXjXG1GFePcY0Y14xxrRjXjnGdGNeNcb0Y149xgxg3jHGjGIfFuHGMm8S4aYybxbh5jFvEODzGLWPcKsatY9wmxm1j3C7G7WMcEeMOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYWODbYxHxHhkjEfFeHSMx8R4bIzGeFyMx8d4QowjYxwV4+gYT4zxpBhPjvGUGE+N8bQYT4/xjBjPjPGsGM+O8ZwYz43xvBjPj/GCGC+M8aIYL47xkhgvjfGyGC+P8YoYr4zxqhivjvGamBHXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xnhXjHfHeE+M98Z4X4z3xwwMDBrwwRgfivHhGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYH4nx0Rgfi/HxGJ+I8ckYn4rx6RififHZGJ+L8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGMfEOJDgoAQHJzgkYejY+bgJjpfg0ATHT3CCBCdMcKIEJ05wkgQnTXCyBCdPcIoEp0xwqgSnTnCaBKdNcLoEp09whgRnTHCmBGdOcJYEZ01wtgRnT3COBOdMcK4E505wngTnTXC+BOdPcIEEF0xwoQQXTnCRBBdNcLEEF0+QBJdIcMkEl0pw6QSXSXDZBJdLcPkEV0hwxQRXSnDlBFdJcNUEV0tw9QTXSHDNBNdKcO0E10lw3QTXS3D9BDdIcMMEN0pwWIIbJ7hJgpsmuFmCmye4RYLDE9wywa0S3DrBbRLcNsHtEtw+wREJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJmuBxCR6f4AkJjkxwVIKjEzwxwZP+tzM7wVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwTsTvCvBuxO8J8F7E7wvwfsTfCDBBxN8KMGHEwwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCTBRxN8LMHHE3wiwScTfCrBpxN8JsFnE3wuwecTfCHBFxN8KcGXE3wlwVcTfC3B1xN8I8E3E3wrwbcTfCfBdxN8L8H3E/wgwQ8T/CjBjxP8JMFPE/wswc8T/CLBLxP8KsGvE/wmwW8T/C7B7xP8IcEfE/wpwZ8T/CXBXxP8LcHfE/wjwT8T/CvBvxP8J8F/ExyT4ECKg1IcnOKQFMdJcdwUx0txaIrjpzhBihOmOFGKE6c4SYqTpjhZipOnOEWKU6Y4VYpTpzhNitOmOF2K06c4Q4ozpjhTijOnOEuKs6Y4W4qzpzhHytgnl3OlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKpLhEikumuFSKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKw1LcOMVNUtw0xc1S3DzFLVIcnuKWKW6V4tYpbpPitilul+L2KY5IcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOh7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpmiKx6V4fIonpDgyxVEpjk7xxBRPSvHkFE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFIMUw3SC//ufKE4xSTFNMUsxT7FIsUyxSrFOsUmxTbFLsU/xkRQfTfGxFB9P8YkUn0zxqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxQ/TvGTFD9N8bMUP0/xixS/TPGrFL9O8ZsUv03xuxS/H+uz/27bP6X4c4q/pPhrir+l+HuKf6T4Z4p/pfh3iv+k+G+KY1IcyHBQhoMzHJLhOBmOm+F4GQ7NcPwMJ8hwwgwnynDiDCfJcNIMJ8tw8gynyHDKDKfKcOoMp8lw2gyny3D6DGfIcMYMZ8pw5gxnyXDWDGfLcPYM58hwzgznynDuDOfJcN4M58tw/gwXyHDBDBfKcOEMF8lw0QwXy3DxDMlwiQyXzHCpDJfOcJkMl81wuQyXz3CFDFfMcKUMV85wlQxXzXC1DFfPcI0M18wm/z/NrJ3hOhmum+F6Ga6f4QYZbpjhRhkOy3DjDDfJcNMMN8tw8wy3yHB4hltmuFWGW2e4TYbbZrhdhttnOCLDHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8+H8v4TM8LMPDMzwiwyMzPCpj0NEZHpPhsRma4XEZHp/hCRmOzHBUhqMzPDHDkzI8OcNTMjw1w9MyPD3DMzI8M8OzMjw7w3MyPDfD8zI8P8MLMrwww4syvDjDSzK8NMPLMrw8wysyvDIbGHVVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4a3ZnhbhrdneEeGd2Z4V4Z3Z3hPhvdmeN9Y3AZG/tccjQ9l+HA2aJyxHIYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GT6S4aMZPpbh4xk+keGTGT6V4dMZPpPhsxk+l+HzGb6Q4YsZvpThyxm+kuGrGb6W4esZvpHhmxm+leHbGb6T4bsZvpfh+xl+kOGHGX6U4ccZfpLhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4d8Z/pPhvxmOyXAgx0E5Ds5xSI7j5DhujuPlODTH8XOcIMcJc5wox4lznCTHSXOcLGfI5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOZLjEjkumeNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOQ7LceMcN8lx0xw3y3HzHLfIcXiOW+a4VY5b57hNjtvmuF2O2+c4Iscdctwxx51y3DnHXXLcNcfdctw9xz1y3DPHvXLcO8d9ctw3x/1y3D/HA3I8MMeDcjw4x0NyPDTHw3I8PMcjcjwyx6NyPDrHY3I8NkdzPC7H43M8IceROY7KcXSOJ+Z4Uo4n53hKjqfmeFqOp+d4Ro5n5nhWjmfneE6O5/6nl/NzvCDHC3O8KMeLc7wkx0tzvCzHy3O8Iscrc7wqx6tzvCbHa3O8Lsfrc7whxxtzvCnHm8cdGBiryVtzvC3H23O8I8c7c7wrx7tzvCfHe3O8L8f7c3wgxwdzfCjHh3MMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLsc3wkx0dzfCzHx3N8Iscnc3wqx6dzfCbHZ3N8Lsfnc3whxxdzfCnHl3N8JcdXc3wtx9dzfCPHN3N8K8e3c3wnx3dzfC/H93P8IMcPc/wox49z/CTHT3P8LMfPc/wixy9z/CrHr3P8Jsdvc/wux+9z/CHHH3P8Kcefc/wlx19z/C3H33P8I8c/c/wrx79z/CfHf3Mck+NAgYMKHFzgkALHKXDcAscrcGiB4xc4wX/ziQqcuMBJCpy0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4wEUKXLTAxQpcvEAKXKLAJQtcqsClC1ymwGULXK7A5QtcocAVi//LGf+3p3mVAlctcLUCVy9wjQLXLHCtAtcucJ0C1y1wvQLXL3CDAjcscKMChxW4cYGbFLhpgZsVuHmBWxQ4vMAtC9yqwK0L3KbAbQvcrsDtCxxR4A7DBgbG4r5TgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZogccVeHyBJxQ4ssBRBY4u8MQCTyrw5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QKDAsP/iB6Lc1JgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4CMFPlrgYwU+XuATBT5Z4FMFPl3gMwU+W+BzBT5f4AsFvljgSwW+XOArxRBfLfC1Al8v8I0C3yzwrQLfLvCdAt8t8L0C3y/wgwI/LPCjAj8u8JMCPy3wswI/L/CLAr8s8KsCvy7wmwK/LfC7Ar8v8IcCfyzwpwJ/LvCXAn8t8LcCfy/wjwL/LPCvAv8u8J8C/y1wTIEDJQ4qcXCJQ0ocp8RxSxyvxKEljl/iBCVOWOJEJU5c4iQlTlriZCVOXuIUJU5Z4lQlTl3iNCVOW+J0JU5f4gwlzljiTCXOXOIsJc5a4mwlzl7iziXOWeJcJc5d4jwlzlvifCXOX+ICJS5Y4kIlLlziIiUuWuJiJS5eIiUuUeKSJS5V4tIlLlPisiUuV+LyJa5Q4oolrlTiyiWuUuKqJa5W4uolrlHimiWuVeLaJa5T4rolrlfi+iVuUOKGJW5U4rASNy5xkxI3LXGzEjcvcYsSh5cDg//XZbF1iduUuG2J25W4fYkjStyhxB1L3Om/a9+lxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxAPHDBkYy93BJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSVa4nElHl/iCSWOLHFUiaNLPLHEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0r+527vL/GBEh8s8aESHy4xKDEsMSoxLjEpMS0xKzEvsSixLLEqsS6xKbEtsSuxL/GREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8v8Y0S3yzxrRLfLvGdEt8t8b0S3y/xgxI/LPGjEj8u8ZMSPy3xsxI/L/GLEr8s8asSvy7xmxK/LfG7Er8v8YcSfyzxpxJ/LvGXEn8t8bcSfy/xjxL/LPGvEv8u8Z8S/y1xTIkDFQ6qcHCFQyocp8JxKxyvwqEVjl/hBBVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5eIRUuUeGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4bAKN65wkwo3rXCzCjevcIsKh1e4ZYVbVbh1hdtUuG2F21W4fYUjKtyhwh0r3KnCnSvcpcJdK9ytwt0r3KPCPSvcq8K9K9ynwn0r3K/C/Ss8oMIDKzyowoMrPKTCQys8rMLDKzyiwiMrPKrCoys8psJjK7TC4yo8vsITKhxZ4agKR1d4YoUnVXhyhadUeGqFp1V4eoVn/M9tFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0V3l3hPRXeW+F9Fd5f4QMVPljhQxU+XGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+Ww1/4LkKn6/whQpfrPClCl+u8JUKX63wtQpfr/CNCt+s8K0K367wnQrfrfC9Ct+v8IMKP6zwowo/rvCTCj+t8LMKP6/wiwq/rPCrCr+u8JsKv63wuwq/r/CHCn+s8KcKf67wlwp/rfC3Cn+v8I8K/6zwrwr/rvCfCv+tcEyFAzUOqnFwjUNqHKfGcWscr8ahNY5f4wQ1TljjRDVOXOMkNU5a42Q1Tl7jFDVOWeNUNU5d4zQ1TlvjdDVOX+MMNc5Y40w1zlzjLDXOWuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXiM1LlHjkjUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOOwGjeucZMaN61xsxo3r3GLGofXuGWNW9W4dY3b1LhtjdvVuH2NI2rcocYda9ypxp1r3KXGXWvcrcbda9yjxj1r3KvGvWvcp8Z9a9yvxv3HwwNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLZGazyuxuNrPKHGkTWOqnF0jSfWeFKNJ9d4So2n1nhajafXeEaNZ9Z4Vo1n13hOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9cY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY1/hIjY/W+FiNj9f4RI1P1vhUjU/X+EyNz9b4XI3P1/hCjS/W+FKNL9f4So2v1vhaja/X+EaNb9b4Vo1v1/hOje/W+F6N79f4QY0f1vhRjR/X+EmNn9b4WY2f1/hFjV/W+FWNX9f4TY3f1vhdjd/X+EONP9b4U40/1/hLjb/W+FuNv9f4R41/1vhXjX/X+E+N/9Y4psaBBgc1OLjBIQ2O0+C4DY7X4NAGx29wggYnbHCiBiducJIGJ21wsgYnb3CKBqdscKoGp25wmganbXC6BqdvcIYGZ2xwpgZnbnCWBmdtcLYGZ29wjgbnbHCuBuducJ4G521wvgbnb3CBBhdscKEGF25wkQYXbXCxBhdvkAaXaHDJBpdqcOkGl2lw2YZxlmtw+QZXaHDFBldqcOUGV2lw1QZXa3D1BtdocM0G12pw7QbXaXDdBtdrcP0GN2hwwwY3anBYgxs3uEmDmza4WYObN7hFg8Mb3LLBrRrcusFtGty2we0a3L7BEQ3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ3a4HENHt/gCQ2ObHBUg6MbPLHBkxo8ucFTGjy1wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxqGXt3gNQ1e2+B1DV7f4A0N3tjgTQ3e3OAtDd7a4G0N3t7gHWO5GsCxmeruBu9p8N4G72vw/gYfaPDBBh9q8OEGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wYfafDRBh9r8PEGn2jwyQafavDpBp9p8NkGn2vw+QZfaPDFBl9q8OUGX2nw1QZfa/D1Bt9o8M0G32rw7QbfafDdBt9r8P0GP2jwwwY/avDjBj9p8NMGP2vw8wa/aPDLBr9q8OsGv2nw2wa/a/D7Bn9o8McGf2rw5wZ/afDXBn9r8PcG/2jwzwb/avDvBv9p8N8GxzQ40OKgFge3OKTFcVoct8XxWhza4vgtTtDihC1O1OLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLdLiEi0u2eJSLS7d4jItLtvici0u3+IKLa7Y4kotrvy/E4laXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFYS1u3OImLW7a4mYtbt7iFi0Ob3HLFrdqcesWt2lx2xa3a3H7Fke0uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2aIvHtXh8iye0OLLFUS2ObvHEFk9q8eQWT2nx1BZPa/H0Fs9o8cwWz2rx7BbPafHcFs9r8fwWL2jxwhYvavHiFi9p8dIWL2vx8havaPHKFq9qGX11i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi2NaHOhwUIeDOxzS4TgdjtvheB0O7XD8DifocMIOJ+pw4g4n6XDSDifrcPIOp+hwyg6n6nDqDqfpcNoOp+tw+g5n6HDGDmfqcOYOZ+lw1g5n63D2DufocM4O5+pw7g7n6XDeDufrcP4OF+hwwQ4X6nDhDhfpcNEOF+tw8Q7pcIkOl+xwqQ6X7nCZDpftcLkOl+9whQ5X7P5/p8bYsUo3MLBqh6t1uHqHa3S4Zodrdbh2h+t0uG6H63W4focbdLhhhxt1OKzDjTvcpMNNO9ysw8073KLD4R1u2eFWHW7d4TYdbtvhdh1u3+GIDnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDu3wuA6P7/CEDkd2OKrD0R2e2OFJHZ7c4SkdntrhaR2e3uEZHZ7Z4Vkdnt3hOR2e2+F5HZ7f4QUdXtjhRR1e3OElHV7a4WUdXt7hFR1e2eFVHV7d4TUdXtvhdR1e3+ENqw54Y8f/2l68pcNbO7ytw9s7vKPDOzu8q8O7O7ynw3s7vK/D+zt8oMMHO3yow4c7DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Dt8pMNHO3ysw8c7fKLDJzt8qsOnO3ymw2c7fK7D5zt8ocMXO3ypw5c7fKXDVzt8rcPXO3yjwzc7fKvDtzt8p8N3O3yvw/c7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfO/ytw987/KPDPzv8q8O/O/ynw387HNPhQI+Dehzc45Aex+lx3B7H63Foj+P3OEGPE/Y4UY8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L90iPS/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9Tisx4173KTHTXvcrMfNe9yix+E9btnjVj1u3eM2PW7b43Y9bt/jiB536HHHHnfqceced+lx1x5363H3Hvfocc8e9+px7x736XHfcXC/Hvfv8YAeD+zxoB4P7vGQ8QcGxvJ4WI+H93hEj0f2eFSPR/d4TI/H9miPx/V4fI8n9Diyx1E9ju7xxB5P6vHkHk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHv9fAAAA//8vgQKF") 1m38.39286809s ago: executing program 7 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m36.296159124s ago: executing program 7 (id=2745): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r2, 0x1, 0xd, &(0x7f0000abaff9)={0x77359400}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 1m19.446456833s ago: executing program 37 (id=2745): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r2, 0x1, 0xd, &(0x7f0000abaff9)={0x77359400}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 1m14.332471997s ago: executing program 5 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) socket$pptp(0x18, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m11.258478048s ago: executing program 5 (id=2784): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x185004, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000007c0)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x40}}, {@errors_remount}, {@gid}, {@errors_remount}, {@umask}, {@namecase}]}, 0x4, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="64796e6c569e5cc64f2cbd"]) 1m8.58653014s ago: executing program 5 (id=2788): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m5.37145954s ago: executing program 5 (id=2792): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000680), 0x1, 0x14fe, &(0x7f0000003f80)="$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") syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x5) shutdown(r0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x18024, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0xc0049364, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ptrace(0x10, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m1.350961378s ago: executing program 5 (id=2807): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x185004, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000007c0)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x40}}, {@errors_remount}, {@gid}, {@errors_remount}, {@umask}, {@namecase}]}, 0x4, 0x1510, &(0x7f00000037c0)="$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") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="64796e6c569e5cc64f2cbd"]) getdents64(0xffffffffffffffff, 0x0, 0x900) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 57.124821155s ago: executing program 5 (id=2803): r0 = socket(0x2a, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0xffff}, {0x8, 0xb}, {0x10, 0xffff}}, [@TCA_RATE={0x0, 0x5, {0x3, 0x2}}, @TCA_CHAIN={0x0, 0xb, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x4880) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/243, 0xf3}, {&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000640)=""/61, 0x3d}, {&(0x7f0000000580)=""/122, 0x7a}], 0xb}, 0x80000000}], 0x4, 0x20, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) socket$netlink(0x10, 0x3, 0x0) 40.542930294s ago: executing program 38 (id=2803): r0 = socket(0x2a, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0xffff}, {0x8, 0xb}, {0x10, 0xffff}}, [@TCA_RATE={0x0, 0x5, {0x3, 0x2}}, @TCA_CHAIN={0x0, 0xb, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x4880) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/243, 0xf3}, {&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000640)=""/61, 0x3d}, {&(0x7f0000000580)=""/122, 0x7a}], 0xb}, 0x80000000}], 0x4, 0x20, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) socket$netlink(0x10, 0x3, 0x0) 19.73971665s ago: executing program 2 (id=2864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0xfd, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0xfffffffffffffffd, 0x16, 0x100000001, 0x1, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40001}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000440)={0xbc, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.54761057s ago: executing program 2 (id=2865): r0 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x4004, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000080"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r2}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) write$vga_arbiter(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='lock io'], 0x8) ppoll(&(0x7f0000000300)=[{r3, 0x9000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYRES32=r1, @ANYRES64=r2], 0xb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/file1'}}, {@nfs_export_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x280500, 0x11) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 18.215712936s ago: executing program 2 (id=2871): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x4004, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r3, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002900), 0x0, &(0x7f0000002940)}}], 0x2, 0x40002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r2}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = open(0x0, 0x280500, 0x11) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open$dir(0x0, 0x80200, 0x84) 13.687847962s ago: executing program 2 (id=2880): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) 11.459749095s ago: executing program 2 (id=2888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x85d1, @void, @void, @void, @val={0x4, 0x6, {0xc2, 0x8, 0x5, 0x401}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 11.011597114s ago: executing program 2 (id=2892): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8a040, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x50010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020400030c000000000700000000000005000600000000000a004e230001000000000000000000000000000000000001020000000000000002000100000000000000030d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) fdatasync(r3) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff0200000000000000000000000000010200000000fc010000000000000000000000000000fc0200000000000000000000000000003a0100000000000007080000000000008000"/130], 0x0) 4.643847314s ago: executing program 8 (id=2916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 4.511636874s ago: executing program 8 (id=2919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4044040) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.123655843s ago: executing program 3 (id=2923): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x0, 0x29, 0x1, @local, @mcast2}}}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xaa2c5000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x330f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) 3.786921622s ago: executing program 8 (id=2925): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000012140500000070000000000008004f000300000008001500010000000800010000000000080003000100000008004b"], 0x38}}, 0x0) 3.699704871s ago: executing program 8 (id=2927): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.25196937s ago: executing program 8 (id=2930): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2.867707259s ago: executing program 9 (id=2931): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061109800000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 2.744260728s ago: executing program 0 (id=2933): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x62) 2.651417098s ago: executing program 9 (id=2934): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 2.531725668s ago: executing program 0 (id=2935): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_get$uid(0x3, 0xee01) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0b, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) ioctl$TCSETSW2(0xffffffffffffffff, 0x5425, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000020c0)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x20000094) 2.439838977s ago: executing program 3 (id=2936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.344207327s ago: executing program 0 (id=2937): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002100)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="0498dc47", 0x4}], 0x1}], 0x1, 0x2004034) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x7, 0x9, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfd}, 0x10}}, 0x20000000) 2.231651887s ago: executing program 3 (id=2938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048844) 2.091924177s ago: executing program 3 (id=2939): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000006c0)) chdir(&(0x7f0000000140)='./bus\x00') 2.017339406s ago: executing program 0 (id=2940): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x2d) 1.679752245s ago: executing program 3 (id=2941): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz1\x00', {0x3ff, 0x6, 0x0, 0x4}, 0x2e, [0x8, 0x8, 0x7, 0x8e, 0x1e69, 0x3, 0x3, 0x10, 0x7f, 0x7d, 0xa, 0xffffffff, 0x7, 0x81, 0x4, 0xc, 0x1, 0x8, 0x9, 0x401, 0x3, 0x80, 0x10, 0x400, 0x4ab, 0x200, 0x80bb, 0x3, 0x6, 0xfffffffb, 0x1002, 0x3, 0x6, 0x5, 0x7, 0x34, 0x7, 0x2, 0x3d4e23a4, 0x9, 0x5, 0x8, 0x9, 0x0, 0x73060f7a, 0xffffffff, 0x494f5a75, 0x2, 0x100, 0x93fc, 0x9, 0xa, 0x3, 0x7fffffff, 0x8, 0x2, 0x1, 0x20000000, 0x2, 0x2, 0x1, 0x2, 0x1, 0x8001], [0x433, 0xe, 0xfffffffe, 0x659, 0x9, 0x6, 0x401, 0x5, 0x101, 0x3, 0x8, 0x8, 0x6, 0x4a9, 0x6, 0x10000, 0x7f, 0x2, 0x99d0, 0x3ff, 0x200, 0x3, 0xa2e, 0x9, 0xffff95a0, 0x7, 0x4, 0x4, 0x0, 0xcb6, 0x6, 0x9, 0x9, 0x9, 0x7, 0x0, 0x4, 0x29800000, 0x6, 0x7, 0x23, 0xe756, 0xffff934e, 0x6, 0x9, 0x2d, 0x7, 0x5, 0x80, 0x4, 0x81, 0xa4c, 0xffffff0e, 0x1, 0x1000, 0xff, 0x67b0, 0x171680f8, 0x3, 0x6, 0x754b, 0x9, 0xffffffff, 0x5], [0x7a9, 0xfffffffe, 0x7fffffff, 0x2430, 0x220, 0x9, 0x7, 0xc0d, 0x5, 0x2b, 0xfff, 0x2, 0x7, 0x42af, 0x4, 0x5, 0x4c, 0x7, 0x5, 0x101, 0x4, 0x4, 0x1, 0x101, 0x9, 0x2, 0x80, 0x1, 0x3, 0xd0, 0x0, 0xfffffffa, 0x9, 0x8, 0x100, 0x6, 0x4, 0x4, 0x5, 0x9, 0x8001, 0x5, 0x0, 0x8, 0x401, 0x8, 0x80000001, 0xe29, 0x6, 0x7, 0x2d, 0xe0000000, 0x101, 0x3, 0x5, 0x6d4, 0x8, 0x9, 0x7, 0x9, 0xc, 0xc, 0x9, 0xc], [0xfffff001, 0xc3c7, 0x3ff, 0x2, 0x2, 0x5, 0x6, 0x2, 0x3, 0x8, 0x3ff, 0x7, 0x5, 0x1, 0x7a4c, 0xe25, 0xffffb705, 0x8, 0x5db45c26, 0x80, 0xa14, 0x1, 0x80, 0xfff, 0xf, 0x5, 0x4, 0x2, 0xb90d, 0x2, 0x45a, 0xc, 0x8, 0x7, 0x4b2, 0x101, 0x2, 0x401, 0x2, 0xa328, 0x7ff, 0x0, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x8, 0x2, 0x70e8, 0x1, 0x3, 0x7, 0x0, 0x7, 0x3, 0x100, 0x0, 0x700, 0x3, 0x80, 0xf, 0xa]}, 0x45c) 1.629897025s ago: executing program 9 (id=2942): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r1, 0x3d810686a7d95765, 0x70bd29, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 1.508806375s ago: executing program 9 (id=2943): syz_emit_ethernet(0x42, &(0x7f0000000880)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x10, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x32d}]}}}}}}}, 0x0) 1.447712385s ago: executing program 3 (id=2944): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.371133605s ago: executing program 0 (id=2945): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) 1.319970954s ago: executing program 9 (id=2946): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x5, 0x49, 0x9, 0xd, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_address={0x3, 0x17, 0x33, 0x80, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x6, @empty, 0x9}, @in6={0xa, 0x4e23, 0xbc5, @remote, 0x6}}]}, 0x68}}, 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000340)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dbc18398ceec7bced0ce723cfb2061934f111647a9e6df8034c449e64138a4aea2a8df6d35031bd3263f0013761154db9baff04108f25fc80fb985cc", 0x65}], 0x2}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.227535654s ago: executing program 0 (id=2947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, &(0x7f00000001c0)=0x7fffffff, 0x8) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') read$FUSE(r5, &(0x7f0000001240)={0x2020}, 0x2020) timerfd_gettime(r5, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) fsopen(&(0x7f0000000040)='afs\x00', 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='csyz1:syz0.backup\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x344, 0x20a, 0x278, 0x344, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x188, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x9, 0x381, 'syz0\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xec, 0x154, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0xdac5, 0x800, 0x4, 0x9, 0xc34d, 0x5f, 0xff, 0x2, 0x582, 0xa1, 0xc73, 0x9, 0x9, 0x8, 0x1, 0xfe9], 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x1, 0x2, 'syz1\x00', 'syz1\x00', {0x1000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) 246.824381ms ago: executing program 8 (id=2948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x400454a4, &(0x7f0000000200)={{0x1}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket(0x1d, 0x2, 0x6) getsockname$packet(r2, 0x0, &(0x7f0000000380)) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) r4 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x200000000000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 9 (id=2949): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$usbfs(0x0, 0x9, 0x101000) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x20400, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, &(0x7f0000000180)) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000440)=@usbdevfs_disconnect={0x9}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$inet6(0xa, 0x40000080806, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r10]) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000080)) listen(r7, 0x20000005) kernel console output (not intermixed with test programs): .524240][ T4211] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.600043][T10924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1596'. [ 658.805747][ T4211] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.834697][ T4211] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.860845][ T4211] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.870450][ T4211] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.997863][ T4211] usb 9-1: config 0 descriptor?? [ 660.085049][ T4211] usb 9-1: can't set config #0, error -71 [ 660.113165][ T4211] usb 9-1: USB disconnect, device number 17 [ 662.496595][T10956] loop2: detected capacity change from 0 to 1024 [ 662.714314][ T1107] usb 6-1: USB disconnect, device number 2 [ 662.839665][T10956] hfsplus: unable to parse mount options [ 663.454813][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1604'. [ 663.463832][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1604'. [ 663.472784][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1604'. [ 663.491326][ T26] audit: type=1326 audit(1738689058.909:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10961 comm="syz.8.1604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5f00ada9 code=0x0 [ 665.120412][T10986] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1608'. [ 666.780004][ T23] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 666.967991][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 667.018545][T11009] xt_cgroup: path and classid specified [ 667.237102][ T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.262782][ T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.300632][ T23] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 667.342780][ T23] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 667.377867][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.407167][ T23] usb 9-1: config 0 descriptor?? [ 667.933879][ T23] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 668.126359][ T23] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 668.148860][ T23] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 676.436935][ T13] usb 9-1: USB disconnect, device number 18 [ 676.460227][T11067] loop2: detected capacity change from 0 to 1024 [ 676.484263][ T1107] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 676.531854][T11067] hfsplus: unable to parse mount options [ 676.815899][ T1107] usb 10-1: device descriptor read/64, error -71 [ 677.044976][T11067] loop2: detected capacity change from 0 to 128 [ 678.950915][ T1107] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 678.986275][T11067] EXT4-fs (loop2): Test dummy encryption mode enabled [ 679.341065][T11067] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 679.392462][T11067] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 681.627130][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 685.788811][T11141] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1637'. [ 688.337537][T11147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1636'. [ 688.346665][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1636'. [ 688.355785][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1636'. [ 688.371433][ T26] audit: type=1326 audit(1738689082.191:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11138 comm="syz.2.1636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea907eda9 code=0x0 [ 695.375589][T11212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1651'. [ 700.141519][T11235] xt_socket: unknown flags 0x50 [ 704.925773][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.942595][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.282279][ T4240] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 711.549648][ T4240] usb 9-1: device descriptor read/64, error -71 [ 716.811770][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 716.820894][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1680'. [ 716.829960][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1680'. [ 717.105616][ T26] audit: type=1326 audit(1738689109.065:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.2.1680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea907eda9 code=0x0 [ 726.926913][T11418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 727.020631][T11418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 727.209737][T11418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 727.227102][T11418] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 731.964089][T11475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 732.073261][T11475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 732.156842][T11475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 733.566747][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 733.773453][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 734.195211][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 734.345313][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1712'. [ 734.354332][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1712'. [ 734.363333][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1712'. [ 734.380677][ T26] audit: type=1326 audit(1738689125.219:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.8.1712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5f00ada9 code=0x0 [ 734.762526][T11498] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 734.998863][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 735.034372][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 735.050296][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 735.062207][T11515] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 735.080984][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1714'. [ 736.113825][T11531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 736.178687][T11531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 736.248325][T11531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 738.473590][T11552] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 740.104158][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 740.585712][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 740.673884][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 740.745892][T11562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 741.180287][T11569] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 741.994770][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1726'. [ 742.182911][T11585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 742.277120][T11585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 742.357506][T11585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 742.583515][T11587] xt_socket: unknown flags 0x50 [ 742.766556][T11598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 742.794672][T11598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 742.816502][T11598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 743.470603][T11609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 743.553886][T11609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 743.601771][T11609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.565429][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 744.611791][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 744.664964][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.988762][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1739'. [ 748.706685][T11642] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 753.507828][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1751'. [ 754.381149][T11706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 754.671846][T11706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 756.585446][T11706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.747133][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.814848][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.858113][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.952504][T11741] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 759.171538][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 759.194616][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.235249][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.269850][T11743] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 760.322822][T11757] delete_channel: no stack [ 760.961658][T11751] delete_channel: no stack [ 762.150088][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 762.179033][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.019536][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 764.306887][T11787] tmpfs: Unknown parameter 'usrquota' [ 764.404438][T11790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1774'. [ 764.413574][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1774'. [ 764.423106][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1774'. [ 764.532402][ T26] audit: type=1326 audit(1738689153.375:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.7.1774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2bb0dada9 code=0x0 [ 765.447702][T11787] overlayfs: failed to resolve './file0': -2 [ 768.009612][T11812] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 768.296018][T11814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 768.366690][T11814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 768.413193][T11814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 768.423269][T11814] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 768.504328][T11818] loop2: detected capacity change from 0 to 1024 [ 768.628901][T11818] hfsplus: unable to parse mount options [ 770.636884][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.643242][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 770.961981][T11828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 771.236483][T11828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 771.267811][T11828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 771.962229][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1789'. [ 771.971758][T11838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1789'. [ 771.981062][T11838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1789'. [ 772.017946][ T26] audit: type=1326 audit(1738689160.437:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.5.1789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x0 [ 773.917551][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 773.959129][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 773.988593][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1791'. [ 773.997703][T11848] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1791'. [ 774.006845][T11848] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1791'. [ 774.111081][ T26] audit: type=1326 audit(1738689162.336:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.7.1791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2bb0dada9 code=0x0 [ 774.330187][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 774.428870][T11852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.474034][T11852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 774.514070][T11852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 774.961863][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 778.193110][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.238425][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.476850][T11874] loop7: detected capacity change from 0 to 1024 [ 778.538963][T11874] hfsplus: unable to parse mount options [ 778.620989][T11876] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 779.001648][T11877] tmpfs: Unknown parameter 'usrquota' [ 787.645948][T11940] tmpfs: Unknown parameter 'usrquota' [ 789.667831][T11958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 789.676970][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'. [ 789.686073][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'. [ 789.711524][ T26] audit: type=1326 audit(1738689176.975:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.2.1821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea907eda9 code=0x0 [ 793.953726][T11984] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 795.313840][T11989] tmpfs: Unknown parameter 'usrquota' [ 796.763412][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1829'. [ 796.978890][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1833'. [ 796.988148][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1833'. [ 796.997394][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1833'. [ 797.122011][ T26] audit: type=1326 audit(1738689183.916:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.2.1833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea907eda9 code=0x0 [ 801.692750][ T4240] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 801.933763][ T4240] usb 6-1: device descriptor read/64, error -71 [ 802.376872][ T4240] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 802.740800][ T4240] usb 6-1: device descriptor read/64, error -71 [ 803.395889][ T4240] usb usb6-port1: attempt power cycle [ 803.482389][T12039] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 803.482389][T12039] program syz.7.1844 not setting count and/or reply_len properly [ 809.641561][T12092] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 809.641561][T12092] program syz.8.1859 not setting count and/or reply_len properly [ 809.742959][ T1107] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 811.047081][ T1107] usb 6-1: device descriptor read/64, error -71 [ 811.403684][ T1107] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 816.144078][T12132] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 816.905156][T12130] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1869'. [ 816.914230][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1869'. [ 816.923239][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1869'. [ 816.948225][ T26] audit: type=1326 audit(1738689202.455:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.9.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x0 [ 817.043062][T12135] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 817.043062][T12135] program syz.7.1870 not setting count and/or reply_len properly [ 817.172646][ T1107] usb 6-1: device descriptor read/64, error -110 [ 817.301950][ T1107] usb usb6-port1: attempt power cycle [ 820.854887][T12168] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 820.854887][T12168] program syz.2.1880 not setting count and/or reply_len properly [ 821.059874][ T26] audit: type=1326 audit(1738689206.225:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 821.303234][ T26] audit: type=1326 audit(1738689206.225:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 821.305605][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1881'. [ 821.709721][ T26] audit: type=1326 audit(1738689206.337:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 821.745480][ T26] audit: type=1326 audit(1738689206.365:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 823.776386][ T26] audit: type=1326 audit(1738689206.365:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 823.801873][ T26] audit: type=1326 audit(1738689206.375:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 823.830789][ T26] audit: type=1326 audit(1738689206.375:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 823.924050][ T26] audit: type=1326 audit(1738689206.375:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 823.988306][ T26] audit: type=1326 audit(1738689206.384:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 824.091609][ T26] audit: type=1326 audit(1738689206.384:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 824.114488][ T26] audit: type=1326 audit(1738689206.384:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 825.807070][ T26] audit: type=1326 audit(1738689206.393:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 825.829560][ T26] audit: type=1326 audit(1738689206.393:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 825.862490][ T26] audit: type=1326 audit(1738689206.393:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.9.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x7ffc0000 [ 826.213603][T12210] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 826.213603][T12210] program syz.8.1891 not setting count and/or reply_len properly [ 826.563504][T12216] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 827.770098][T12225] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 827.770098][T12225] program syz.7.1897 not setting count and/or reply_len properly [ 829.221080][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 829.221097][ T26] audit: type=1326 audit(1738689213.914:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 829.266830][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1898'. [ 829.309418][ T26] audit: type=1326 audit(1738689213.914:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 829.334062][ T26] audit: type=1326 audit(1738689213.970:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 829.359626][ T26] audit: type=1326 audit(1738689213.970:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 829.628274][ T26] audit: type=1326 audit(1738689213.970:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d6778d710 code=0x7ffc0000 [ 831.078689][ T26] audit: type=1326 audit(1738689213.970:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 831.138948][ T26] audit: type=1326 audit(1738689213.980:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 831.164373][ T26] audit: type=1326 audit(1738689213.980:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 831.208749][ T26] audit: type=1326 audit(1738689213.980:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 832.596796][T12257] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 833.284963][ T1107] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 833.481183][ T26] audit: type=1326 audit(1738689213.980:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x7ffc0000 [ 836.314401][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 836.323606][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 843.625001][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1918'. [ 843.634332][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1918'. [ 843.643455][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1918'. [ 843.665033][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 843.665048][ T26] audit: type=1326 audit(1738689227.440:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.5.1918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x0 [ 848.627249][T12371] delete_channel: no stack [ 849.416046][T12367] delete_channel: no stack [ 852.811477][T12399] ipt_ECN: cannot use operation on non-tcp rule [ 853.038222][T12400] ubi0: attaching mtd0 [ 853.044654][T12400] ubi0: scanning is finished [ 853.049265][T12400] ubi0: empty MTD device detected [ 853.406934][T12400] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 853.414719][T12400] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 853.422285][T12400] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 853.429370][T12400] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 853.436787][T12400] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 853.443800][T12400] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 853.452013][T12400] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 652526139 [ 853.462050][T12400] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 853.518218][T12401] ubi0: background thread "ubi_bgt0d" started, PID 12401 [ 853.577105][T12406] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 853.577105][T12406] program syz.8.1945 not setting count and/or reply_len properly [ 855.622611][T12414] delete_channel: no stack [ 856.418228][T12409] delete_channel: no stack [ 859.321388][T12435] ipt_ECN: cannot use operation on non-tcp rule [ 863.119250][T12464] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 863.119250][T12464] program syz.9.1962 not setting count and/or reply_len properly [ 863.335000][ T23] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 863.762404][ T23] usb 8-1: device descriptor read/64, error -71 [ 868.369107][T12507] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 868.369107][T12507] program syz.5.1975 not setting count and/or reply_len properly [ 869.210744][T12512] ipt_ECN: cannot use operation on non-tcp rule [ 869.541495][T12509] ubi: mtd0 is already attached to ubi0 [ 869.548442][T12509] ubi0: detaching mtd0 [ 869.561362][T12509] ubi0: mtd0 is detached [ 871.556496][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1980'. [ 871.565484][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1980'. [ 871.574510][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1980'. [ 871.595970][ T26] audit: type=1326 audit(1738689253.575:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.8.1980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5f00ada9 code=0x0 [ 872.283945][T12524] ipt_ECN: cannot use operation on non-tcp rule [ 872.505010][T12518] ubi0: attaching mtd0 [ 872.510064][T12518] ubi0: scanning is finished [ 872.557483][T12518] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 872.565192][T12518] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 872.572488][T12518] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 872.579681][T12518] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 872.587114][T12518] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 872.593887][T12518] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 872.601880][T12518] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 872.611797][T12518] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 872.651159][T12548] ubi0: background thread "ubi_bgt0d" started, PID 12548 [ 872.621858][T12524] ubi0: detaching mtd0 [ 874.551704][T12524] ubi0: mtd0 is detached [ 874.689525][T12566] ipt_ECN: cannot use operation on non-tcp rule [ 874.908080][T12566] ubi0: attaching mtd0 [ 874.931053][T12558] loop2: detected capacity change from 0 to 1024 [ 874.941840][T12563] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 874.941840][T12563] program syz.7.1986 not setting count and/or reply_len properly [ 874.964468][T12566] ubi0: scanning is finished [ 875.864093][T12566] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 875.912042][T12558] hfsplus: unable to parse mount options [ 876.268429][T12577] delete_channel: no stack [ 878.925959][T12569] delete_channel: no stack [ 880.274385][T12599] ipt_ECN: cannot use operation on non-tcp rule [ 880.375994][T12599] ubi0: attaching mtd0 [ 880.433314][T12599] ubi0: scanning is finished [ 880.916435][T12599] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 881.834507][T12612] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 881.834507][T12612] program syz.5.1999 not setting count and/or reply_len properly [ 882.882927][T12621] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2000'. [ 882.892080][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2000'. [ 882.901111][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2000'. [ 883.611764][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2001'. [ 883.626128][ T26] audit: type=1326 audit(1738689264.164:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.7.2000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2bb0dada9 code=0x0 [ 883.872047][T12618] loop5: detected capacity change from 0 to 1024 [ 884.226775][T12618] hfsplus: unable to parse mount options [ 884.951309][T12638] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2006'. [ 884.960346][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2006'. [ 884.969690][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2006'. [ 886.771511][ T26] audit: type=1326 audit(1738689267.063:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.8.2006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5f00ada9 code=0x0 [ 887.158121][T12648] ipt_ECN: cannot use operation on non-tcp rule [ 887.464286][T12648] ubi0: attaching mtd0 [ 887.514822][T12648] ubi0: scanning is finished [ 887.934675][T12648] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 888.355034][T12662] delete_channel: no stack [ 888.993953][T12660] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 888.993953][T12660] program syz.9.2012 not setting count and/or reply_len properly [ 889.033660][T12654] delete_channel: no stack [ 889.628588][T12659] ipt_ECN: cannot use operation on non-tcp rule [ 889.647635][T12659] ubi0: attaching mtd0 [ 889.666720][T12659] ubi0: scanning is finished [ 889.826975][T12659] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 889.834789][T12659] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 889.846017][T12659] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 889.854987][T12659] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 889.865108][T12659] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 889.874198][T12659] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 889.884299][T12659] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 889.895434][T12659] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 889.905512][T12664] ubi0: detaching mtd0 [ 889.998813][T12664] ubi0: mtd0 is detached [ 890.269085][T12681] delete_channel: no stack [ 890.977439][T12666] delete_channel: no stack [ 891.094662][T12685] loop8: detected capacity change from 0 to 1024 [ 891.353150][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2020'. [ 891.362427][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2020'. [ 891.371495][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2020'. [ 891.654075][ T26] audit: type=1326 audit(1738689272.115:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.7.2020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2bb0dada9 code=0x0 [ 891.848266][T12685] hfsplus: unable to parse mount options [ 892.287147][T12679] ipt_ECN: cannot use operation on non-tcp rule [ 892.297885][T12679] ubi0: attaching mtd0 [ 892.302866][T12679] ubi0: scanning is finished [ 892.380990][T12679] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 892.388647][T12679] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 892.396818][T12679] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 892.403973][T12679] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 892.411560][T12679] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 892.418471][T12679] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 892.426598][T12679] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 892.436678][T12679] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 892.465475][T12697] ubi0: background thread "ubi_bgt0d" started, PID 12697 [ 892.467622][T12682] ubi0: detaching mtd0 [ 892.562534][T12682] ubi0: mtd0 is detached [ 893.288545][T12715] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 893.288545][T12715] program syz.5.2027 not setting count and/or reply_len properly [ 895.072781][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2029'. [ 896.727336][T12738] ipt_ECN: cannot use operation on non-tcp rule [ 896.807225][T12738] ubi0: attaching mtd0 [ 896.812090][T12738] ubi0: scanning is finished [ 896.867314][T12738] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 896.875042][T12738] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 896.882621][T12738] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 896.889556][T12738] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 896.896974][T12738] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 896.903767][T12738] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 896.911751][T12738] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 896.921659][T12738] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 896.931664][T12748] ubi0: detaching mtd0 [ 896.939761][T12745] ubi0: background thread "ubi_bgt0d" started, PID 12745 [ 897.007790][T12748] ubi0: mtd0 is detached [ 897.165017][T12751] ipt_ECN: cannot use operation on non-tcp rule [ 897.188529][T12751] ubi0: attaching mtd0 [ 897.232142][T12751] ubi0: scanning is finished [ 897.683828][T12751] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 897.693878][T12751] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 897.702855][T12751] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 897.711826][T12751] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 897.720834][T12751] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 897.729920][T12751] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 897.739373][T12751] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 897.752082][T12751] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 897.763554][T12753] ubi0: background thread "ubi_bgt0d" started, PID 12753 [ 897.764586][T12752] ubi0: detaching mtd0 [ 897.767111][T12752] ubi0: mtd0 is detached [ 897.948787][T12756] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 897.948787][T12756] program syz.5.2039 not setting count and/or reply_len properly [ 898.696581][T12767] loop5: detected capacity change from 0 to 16 [ 898.732152][T12767] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 899.183419][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2045'. [ 902.988328][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.994699][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 904.169398][T12801] loop7: detected capacity change from 0 to 16 [ 904.355034][T12801] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 904.646719][T12810] loop2: detected capacity change from 0 to 16 [ 904.686710][T12810] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 904.736438][T12813] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 904.736438][T12813] program syz.9.2055 not setting count and/or reply_len properly [ 908.633876][T12822] loop9: detected capacity change from 0 to 16 [ 908.718348][T12822] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 911.074003][T12836] ipt_ECN: cannot use operation on non-tcp rule [ 911.106044][T12836] ubi0: attaching mtd0 [ 911.124157][T12836] ubi0: scanning is finished [ 911.437685][T12836] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 912.111953][T12854] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 912.111953][T12854] program syz.9.2068 not setting count and/or reply_len properly [ 912.854128][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2065'. [ 912.863145][T12858] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2065'. [ 912.872286][T12858] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2065'. [ 912.952987][ T26] audit: type=1326 audit(1738689292.263:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.5.2065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6778eda9 code=0x0 [ 914.057362][T12864] ipt_ECN: cannot use operation on non-tcp rule [ 914.111683][T12864] ubi0: attaching mtd0 [ 914.121755][T12864] ubi0: scanning is finished [ 914.512894][T12864] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 914.763390][T12863] ipt_ECN: cannot use operation on non-tcp rule [ 914.792444][T12863] ubi0: attaching mtd0 [ 914.799233][T12863] ubi0: scanning is finished [ 915.333578][T12863] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 915.341160][T12863] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 915.348496][T12863] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 915.355604][T12863] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 915.363001][T12863] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 915.369827][T12863] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 915.377913][T12863] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 915.388223][T12863] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 915.399867][T12868] ubi0: background thread "ubi_bgt0d" started, PID 12868 [ 916.563869][T12869] ubi0: detaching mtd0 [ 916.598727][T12869] ubi0: mtd0 is detached [ 916.917315][T12884] ubi0: attaching mtd0 [ 916.924228][T12884] ubi0: scanning is finished [ 916.973662][T12884] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 916.981258][T12884] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 916.988510][T12884] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 916.995633][T12884] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 917.003094][T12884] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 917.009900][T12884] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 917.017944][T12884] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 917.028685][T12884] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 917.039292][T12891] ubi0: detaching mtd0 [ 917.054217][T12889] ubi0: background thread "ubi_bgt0d" started, PID 12889 [ 917.063524][T12895] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 917.063524][T12895] program syz.2.2080 not setting count and/or reply_len properly [ 917.798021][T12891] ubi0: mtd0 is detached [ 922.937490][T12920] loop2: detected capacity change from 0 to 16 [ 922.989680][T12920] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 924.498484][T12930] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 924.498484][T12930] program syz.7.2091 not setting count and/or reply_len properly [ 925.172343][T12944] loop5: detected capacity change from 0 to 16 [ 925.213563][T12944] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 927.922600][T12959] loop7: detected capacity change from 0 to 16 [ 928.441846][T12959] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 930.638745][T12960] ubi0: attaching mtd0 [ 930.643751][T12960] ubi0: scanning is finished [ 930.672186][T12960] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 930.679717][T12960] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 930.686971][T12960] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 930.693912][T12960] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 930.701341][T12960] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 930.708419][T12960] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 930.716391][T12960] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 930.726335][T12960] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 930.748779][T12973] ubi0: background thread "ubi_bgt0d" started, PID 12973 [ 930.758878][T12974] ubi0: detaching mtd0 [ 930.803972][T12974] ubi0: mtd0 is detached [ 931.202101][T12985] loop9: detected capacity change from 0 to 16 [ 931.216715][T12982] loop8: detected capacity change from 0 to 1024 [ 931.222825][T12986] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 931.222825][T12986] program syz.7.2105 not setting count and/or reply_len properly [ 931.299663][T12985] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 931.308516][T12982] hfsplus: unable to parse mount options [ 931.543703][T12982] loop8: detected capacity change from 0 to 128 [ 931.851231][T12982] EXT4-fs (loop8): Test dummy encryption mode enabled [ 932.512265][T12982] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 932.576167][T12982] ext4 filesystem being mounted at /369/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 933.270251][T12995] ubi0: attaching mtd0 [ 933.277490][T12995] ubi0: scanning is finished [ 935.410780][T12995] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 935.418661][T12995] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 935.426288][T12995] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 935.433463][T12995] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 936.051989][T12995] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 936.058847][T12995] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 936.066866][T12995] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 936.076873][T12995] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 936.134570][T13009] ubi0: background thread "ubi_bgt0d" started, PID 13009 [ 936.144459][T13011] loop2: detected capacity change from 0 to 16 [ 936.210304][T13019] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2114'. [ 936.363667][T13011] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 936.477160][T13031] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2111'. [ 936.486257][T13031] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2111'. [ 936.495327][T13031] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2111'. [ 938.916094][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2118'. [ 938.925180][T13042] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2118'. [ 938.934331][T13042] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2118'. [ 940.664264][T13050] loop2: detected capacity change from 0 to 1024 [ 940.736015][T13050] hfsplus: unable to parse mount options [ 941.009289][T13055] loop5: detected capacity change from 0 to 16 [ 941.056024][T13055] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 941.061721][T13050] loop2: detected capacity change from 0 to 128 [ 941.460049][T13050] EXT4-fs (loop2): Test dummy encryption mode enabled [ 942.255775][T13048] ubi: mtd0 is already attached to ubi0 [ 942.263025][T13048] ubi0: detaching mtd0 [ 942.269354][T13048] ubi0: mtd0 is detached [ 942.321994][T13059] loop5: detected capacity change from 0 to 16 [ 942.392371][T13059] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 942.416651][T13050] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 942.430423][T13050] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 942.658062][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2127'. [ 944.521031][T13075] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 944.521031][T13075] program syz.2.2128 not setting count and/or reply_len properly [ 947.497547][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2140'. [ 947.658297][T13119] ubi0: attaching mtd0 [ 947.666651][T13119] ubi0: scanning is finished [ 947.770946][T13119] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 947.778724][T13119] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 947.786265][T13119] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 947.793395][T13119] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 947.800876][T13119] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 947.807776][T13119] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 947.815955][T13119] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 947.826033][T13119] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 947.836219][T13121] ubi0: detaching mtd0 [ 947.836454][T13120] ubi0: background thread "ubi_bgt0d" started, PID 13120 [ 948.351026][T13123] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 948.351026][T13123] program syz.8.2142 not setting count and/or reply_len properly [ 948.392132][T13121] ubi0: mtd0 is detached [ 948.976024][T13143] ubi0: attaching mtd0 [ 948.981338][T13143] ubi0: scanning is finished [ 949.125052][T13143] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 949.132899][T13143] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 949.145857][T13143] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 949.153022][T13143] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 949.162145][T13143] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 949.169136][T13143] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 949.177339][T13143] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 949.187494][T13143] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 949.375841][T13144] ubi0: detaching mtd0 [ 949.791024][T13144] ubi0: mtd0 is detached [ 949.886325][ T1107] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 950.142561][ T1107] usb 8-1: device descriptor read/64, error -71 [ 950.377139][T13159] loop8: detected capacity change from 0 to 16 [ 950.475188][T13159] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 950.501500][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 950.862436][ T1107] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 951.528799][T13169] sg_write: data in/out 2031668/67 bytes for SCSI command 0x26-- guessing data in; [ 951.528799][T13169] program syz.9.2156 not setting count and/or reply_len properly [ 951.735453][ T1107] usb 8-1: device descriptor read/64, error -71 [ 951.875440][ T1107] usb usb8-port1: attempt power cycle [ 952.014652][T13167] ubi0: attaching mtd0 [ 952.019912][T13167] ubi0: scanning is finished [ 952.205764][T13167] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 952.221031][T13167] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 952.256825][T13167] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 952.269820][T13182] loop7: detected capacity change from 0 to 16 [ 952.304970][T13167] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 952.329421][T13182] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 952.397772][T13167] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 952.405438][T13167] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 952.417040][T13167] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 952.444602][T13167] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 952.629744][T13170] ubi0: detaching mtd0 [ 952.630023][T13179] ubi0: background thread "ubi_bgt0d" started, PID 13179 [ 952.647752][T13170] ubi0: mtd0 is detached [ 953.888230][T13199] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2165'. [ 954.352941][T13207] ubi0: attaching mtd0 [ 954.359195][T13207] ubi0: scanning is finished [ 954.404740][T13207] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 954.412347][T13207] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 954.419651][T13207] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 954.426682][T13207] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 954.434096][T13207] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 954.440991][T13207] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 954.448997][T13207] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 954.459024][T13207] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 954.469403][T13213] ubi0: detaching mtd0 [ 954.477664][T13209] ubi0: background thread "ubi_bgt0d" started, PID 13209 [ 954.520853][T13213] ubi0: mtd0 is detached [ 955.970403][T13221] ubi0: attaching mtd0 [ 955.975438][T13221] ubi0: scanning is finished [ 956.010637][T13221] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 956.018269][T13221] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 956.025694][T13221] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 956.032657][T13221] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 956.040051][T13221] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 956.046840][T13221] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 956.055018][T13221] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 956.064964][T13221] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 956.075210][T13230] ubi0: detaching mtd0 [ 956.090338][T13227] ubi0: background thread "ubi_bgt0d" started, PID 13227 [ 956.698901][T13230] ubi0: mtd0 is detached [ 956.703333][T13218] ubi0: attaching mtd0 [ 956.708282][T13218] ubi0: scanning is finished [ 956.726574][T13218] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 956.804109][T13233] ubi0: attaching mtd0 [ 956.809389][T13233] ubi0: scanning is finished [ 956.831972][T13238] loop5: detected capacity change from 0 to 16 [ 956.889443][T13238] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 958.204841][T13233] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 959.421264][T13262] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2177'. [ 959.586771][T13250] ubi0: attaching mtd0 [ 959.592000][T13250] ubi0: scanning is finished [ 959.630607][T13250] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 959.638234][T13250] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 959.645493][T13250] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 959.653743][T13250] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 959.661212][T13250] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 959.668110][T13250] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 959.676113][T13250] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 959.686289][T13250] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 959.696337][T13273] ubi0: background thread "ubi_bgt0d" started, PID 13273 [ 959.713104][T13259] ubi0: detaching mtd0 [ 959.723219][T13259] ubi0: mtd0 is detached [ 959.897187][T13277] loop8: detected capacity change from 0 to 512 [ 960.034588][T13282] loop7: detected capacity change from 0 to 16 [ 960.131354][T13282] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 960.249832][T13277] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2185: invalid indirect mapped block 256 (level 2) [ 960.584684][T13277] EXT4-fs (loop8): Remounting filesystem read-only [ 960.596802][T13277] EXT4-fs (loop8): 2 truncates cleaned up [ 960.602821][T13277] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 962.617176][ T4240] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 964.036959][ T4240] usb 6-1: device descriptor read/64, error -71 [ 964.109474][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2193'. [ 964.250062][T13304] loop9: detected capacity change from 0 to 512 [ 964.826536][T13304] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2191: invalid indirect mapped block 256 (level 2) [ 964.855010][T13304] EXT4-fs (loop9): Remounting filesystem read-only [ 964.862458][T13304] EXT4-fs (loop9): 2 truncates cleaned up [ 964.868368][T13304] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 965.870178][T13312] ubi0: attaching mtd0 [ 965.876989][T13312] ubi0: scanning is finished [ 966.339011][T13312] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 966.346561][T13312] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 966.353962][T13312] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 966.360979][T13312] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 966.368392][T13312] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 966.375251][T13312] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 966.383350][T13312] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 652526139 [ 966.393636][T13312] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 966.403771][T13320] ubi0: detaching mtd0 [ 966.947990][T13323] ubi0: background thread "ubi_bgt0d" started, PID 13323 [ 967.061798][T13320] ubi0: mtd0 is detached [ 967.348086][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.354573][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.367822][T13332] loop5: detected capacity change from 0 to 16 [ 967.504833][T13332] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 967.534544][T13336] loop8: detected capacity change from 0 to 16 [ 967.822081][T13336] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 967.833891][T13340] loop9: detected capacity change from 0 to 16 [ 968.043471][T13340] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 970.746741][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2208'. [ 970.755981][T13370] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2208'. [ 970.766345][T13370] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2208'. [ 971.645537][ T26] audit: type=1326 audit(1738689346.357:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.9.2208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c20bda9 code=0x0 [ 972.405263][T13395] loop9: detected capacity change from 0 to 512 [ 972.684024][T13395] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2214: invalid indirect mapped block 256 (level 2) [ 973.493812][T13395] EXT4-fs (loop9): Remounting filesystem read-only [ 973.572174][T13395] EXT4-fs (loop9): 2 truncates cleaned up [ 973.578385][T13395] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 974.604716][T13415] loop7: detected capacity change from 0 to 64 [ 975.632662][T13420] loop8: detected capacity change from 0 to 512 [ 975.910526][T13420] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2220: invalid indirect mapped block 256 (level 2) [ 975.941893][T13420] EXT4-fs (loop8): Remounting filesystem read-only [ 975.949307][T13420] EXT4-fs (loop8): 2 truncates cleaned up [ 975.955504][T13420] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 976.241368][T13426] loop7: detected capacity change from 0 to 512 [ 976.419720][T13426] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2221: invalid indirect mapped block 256 (level 2) [ 976.438638][T13426] EXT4-fs (loop7): Remounting filesystem read-only [ 976.447113][T13426] EXT4-fs (loop7): 2 truncates cleaned up [ 976.453054][T13426] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 977.628305][T13440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2225'. [ 977.637292][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2225'. [ 977.646307][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2225'. [ 977.970182][ T26] audit: type=1326 audit(1738689353.045:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.2.2225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea907eda9 code=0x0 [ 979.947364][T13457] loop2: detected capacity change from 0 to 512 [ 980.522026][T13457] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2228: invalid indirect mapped block 256 (level 2) [ 980.537185][T13457] EXT4-fs (loop2): Remounting filesystem read-only [ 980.544071][T13457] EXT4-fs (loop2): 2 truncates cleaned up [ 980.549891][T13457] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 982.967155][T13498] loop9: detected capacity change from 0 to 512 [ 983.153301][T13498] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2239: invalid indirect mapped block 256 (level 2) [ 983.171878][T13498] EXT4-fs (loop9): Remounting filesystem read-only [ 983.180892][T13498] EXT4-fs (loop9): 2 truncates cleaned up [ 983.186888][T13498] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 983.710074][T13505] loop9: detected capacity change from 0 to 512 [ 983.965677][T13505] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2241: invalid indirect mapped block 256 (level 2) [ 983.980525][T13505] EXT4-fs (loop9): Remounting filesystem read-only [ 983.988621][T13505] EXT4-fs (loop9): 2 truncates cleaned up [ 983.994638][T13505] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 984.384923][T13513] loop2: detected capacity change from 0 to 512 [ 984.874483][T13513] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2243: invalid indirect mapped block 256 (level 2) [ 984.888406][T13513] EXT4-fs (loop2): Remounting filesystem read-only [ 984.895778][T13513] EXT4-fs (loop2): 2 truncates cleaned up [ 984.901785][T13513] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 985.289748][T13533] loop5: detected capacity change from 0 to 1024 [ 985.465481][T13533] hfsplus: unable to parse mount options [ 986.584510][T13533] loop5: detected capacity change from 0 to 128 [ 986.638311][T13533] EXT4-fs (loop5): Test dummy encryption mode enabled [ 986.667658][T13533] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 986.683104][T13533] ext4 filesystem being mounted at /469/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 987.289056][T13553] loop8: detected capacity change from 0 to 64 [ 988.633681][T13560] loop5: detected capacity change from 0 to 64 [ 990.271950][T13564] delete_channel: no stack [ 990.277232][T13564] delete_channel: no stack [ 990.389607][ T1110] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 990.595721][ T1110] usb 8-1: device descriptor read/64, error -71 [ 990.884482][ T1110] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 991.205027][ T1110] usb 8-1: device descriptor read/64, error -71 [ 991.333671][ T1110] usb usb8-port1: attempt power cycle [ 991.414719][T13588] loop7: detected capacity change from 0 to 1024 [ 991.484946][T13588] hfsplus: unable to parse mount options [ 991.991885][T13598] loop9: detected capacity change from 0 to 16 [ 992.062598][T13598] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 993.037113][T13599] delete_channel: no stack [ 993.042361][T13599] delete_channel: no stack [ 995.000038][T13619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2273'. [ 995.009074][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2273'. [ 995.018069][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2273'. [ 995.209767][ T26] audit: type=1326 audit(1738689369.050:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.2.2273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea907eda9 code=0x0 [ 998.193608][T13636] loop2: detected capacity change from 0 to 16 [ 998.213783][T13637] loop7: detected capacity change from 0 to 1024 [ 998.266828][T13636] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 998.561672][T13637] hfsplus: unable to parse mount options [ 998.733535][T13647] loop9: detected capacity change from 0 to 64 [ 1001.117560][T13637] loop7: detected capacity change from 0 to 128 [ 1001.190820][T13637] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1001.459670][T13637] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1001.567764][T13637] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.436350][T13653] delete_channel: no stack [ 1002.441665][T13653] delete_channel: no stack [ 1002.771156][T13664] loop9: detected capacity change from 0 to 16 [ 1003.050071][T13664] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1005.652970][T13686] loop7: detected capacity change from 0 to 512 [ 1005.916760][T13686] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2294: invalid indirect mapped block 256 (level 2) [ 1005.934235][T13686] EXT4-fs (loop7): Remounting filesystem read-only [ 1005.941948][T13686] EXT4-fs (loop7): 2 truncates cleaned up [ 1005.947903][T13686] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1007.846729][T13716] loop2: detected capacity change from 0 to 1024 [ 1008.112579][T13716] hfsplus: unable to parse mount options [ 1008.707781][T13719] delete_channel: no stack [ 1008.712442][T13719] delete_channel: no stack [ 1008.810889][T13716] loop2: detected capacity change from 0 to 128 [ 1008.859721][T13716] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1008.898394][T13716] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1009.322860][T13739] loop9: detected capacity change from 0 to 512 [ 1009.327123][T13738] loop5: detected capacity change from 0 to 512 [ 1009.346751][T13716] ext4 filesystem being mounted at /480/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.399457][T13738] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2306: invalid indirect mapped block 256 (level 2) [ 1009.405404][T13739] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2305: invalid indirect mapped block 256 (level 2) [ 1009.413630][T13738] EXT4-fs (loop5): Remounting filesystem read-only [ 1009.428174][T13739] EXT4-fs (loop9): Remounting filesystem read-only [ 1009.433649][T13738] EXT4-fs (loop5): 2 truncates cleaned up [ 1009.440186][T13739] EXT4-fs (loop9): 2 truncates cleaned up [ 1009.445660][T13738] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1009.463431][T13739] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1010.252805][T13750] loop5: detected capacity change from 0 to 64 [ 1010.932326][T13753] loop2: detected capacity change from 0 to 16 [ 1011.102066][T13753] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1011.764227][T13764] loop7: detected capacity change from 0 to 64 [ 1013.361049][T13779] loop9: detected capacity change from 0 to 16 [ 1013.402736][T13774] delete_channel: no stack [ 1013.407419][T13774] delete_channel: no stack [ 1014.276140][T13779] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1014.554129][T13788] loop5: detected capacity change from 0 to 1024 [ 1014.597766][T13788] hfsplus: unable to parse mount options [ 1015.149913][T13788] loop5: detected capacity change from 0 to 128 [ 1016.189317][T13788] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1016.297623][T13788] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1016.391466][T13788] ext4 filesystem being mounted at /487/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.135537][T13823] delete_channel: no stack [ 1018.140121][T13823] delete_channel: no stack [ 1021.141484][T13867] delete_channel: no stack [ 1021.146091][T13867] delete_channel: no stack [ 1025.487428][T13901] loop5: detected capacity change from 0 to 16 [ 1025.579703][T13901] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1026.761475][T13912] delete_channel: no stack [ 1026.766190][T13912] delete_channel: no stack [ 1026.842788][T13899] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1027.213060][T13923] loop9: detected capacity change from 0 to 512 [ 1027.522033][T13923] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2357: invalid indirect mapped block 256 (level 2) [ 1027.536857][T13923] EXT4-fs (loop9): Remounting filesystem read-only [ 1027.545230][T13923] EXT4-fs (loop9): 2 truncates cleaned up [ 1027.551091][T13923] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1031.269457][T13953] loop9: detected capacity change from 0 to 64 [ 1032.115732][T13956] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1032.301905][T13961] loop7: detected capacity change from 0 to 16 [ 1032.530367][T13961] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1033.031275][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.037771][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1033.512737][T13981] loop8: detected capacity change from 0 to 16 [ 1034.361255][T13985] loop2: detected capacity change from 0 to 512 [ 1034.556325][T13981] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1034.730250][T13985] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2376: invalid indirect mapped block 256 (level 2) [ 1034.749537][T13985] EXT4-fs (loop2): Remounting filesystem read-only [ 1034.758112][T13985] EXT4-fs (loop2): 2 truncates cleaned up [ 1034.764066][T13985] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1036.495925][T14008] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1037.578165][T14013] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1040.766930][T14032] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1041.204600][T14035] loop2: detected capacity change from 0 to 64 [ 1043.207811][T14051] loop5: detected capacity change from 0 to 512 [ 1043.746312][T14051] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2393: invalid indirect mapped block 256 (level 2) [ 1043.769702][T14051] EXT4-fs (loop5): Remounting filesystem read-only [ 1043.776971][T14051] EXT4-fs (loop5): 2 truncates cleaned up [ 1043.783229][T14051] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1047.645561][T14090] kvm [14089]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86b [ 1048.742210][T10567] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1048.999569][T10567] usb 6-1: device descriptor read/64, error -71 [ 1049.262665][T14115] loop2: detected capacity change from 0 to 512 [ 1049.340698][T10567] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1049.530445][T14115] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2410: invalid indirect mapped block 256 (level 2) [ 1049.549609][T14115] EXT4-fs (loop2): Remounting filesystem read-only [ 1049.557894][T14115] EXT4-fs (loop2): 2 truncates cleaned up [ 1049.563774][T14115] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1049.597311][T10567] usb 6-1: device descriptor read/64, error -71 [ 1049.747048][T10567] usb usb6-port1: attempt power cycle [ 1049.817622][T14116] kvm [14114]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86b [ 1050.117272][T14123] kvm [14122]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86b [ 1050.206566][T10567] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1050.324236][T10567] usb 6-1: device descriptor read/8, error -71 [ 1050.653908][T10567] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1050.773545][T10567] usb 6-1: device descriptor read/8, error -71 [ 1050.914295][T10567] usb usb6-port1: unable to enumerate USB device [ 1053.836218][T14152] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1057.923998][T14169] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1062.181341][T14196] loop2: detected capacity change from 0 to 1024 [ 1062.240198][T14196] hfsplus: unable to parse mount options [ 1062.302176][T14205] loop5: detected capacity change from 0 to 64 [ 1065.018623][T14232] loop2: detected capacity change from 0 to 16 [ 1066.674826][T14232] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1067.787571][T14253] loop9: detected capacity change from 0 to 512 [ 1067.913093][T14258] loop7: detected capacity change from 0 to 1024 [ 1068.086813][T14258] hfsplus: unable to parse mount options [ 1068.360775][T14253] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2447: invalid indirect mapped block 256 (level 2) [ 1068.403734][T14253] EXT4-fs (loop9): Remounting filesystem read-only [ 1068.760594][T14253] EXT4-fs (loop9): 2 truncates cleaned up [ 1068.766516][T14253] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1071.844128][T14289] loop9: detected capacity change from 0 to 1024 [ 1071.877816][T14289] hfsplus: unable to parse mount options [ 1071.988867][ T5183] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1072.057351][T14289] loop9: detected capacity change from 0 to 128 [ 1072.082419][T14289] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1072.155457][T14289] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1072.222540][T14289] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.272089][ T5183] usb 6-1: device descriptor read/64, error -71 [ 1072.852927][ T5183] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1072.890802][T14303] loop7: detected capacity change from 0 to 1024 [ 1073.202965][ T5183] usb 6-1: device descriptor read/64, error -71 [ 1073.235949][T14303] hfsplus: unable to parse mount options [ 1073.330604][ T5183] usb usb6-port1: attempt power cycle [ 1073.342569][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2461'. [ 1073.520311][T14303] overlayfs: failed to get inode (-116) [ 1073.577081][T14303] overlayfs: failed to look up (file0) for ino (-116) [ 1073.648899][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2464'. [ 1075.583666][T14334] loop2: detected capacity change from 0 to 512 [ 1076.607566][T14334] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2469: invalid indirect mapped block 256 (level 2) [ 1076.631464][T14334] EXT4-fs (loop2): Remounting filesystem read-only [ 1076.640382][T14334] EXT4-fs (loop2): 2 truncates cleaned up [ 1076.646242][T14334] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1076.940426][ T9306] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1076.968444][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2463'. [ 1076.981330][T14342] loop7: detected capacity change from 0 to 1024 [ 1077.040583][T14342] hfsplus: unable to parse mount options [ 1077.200349][ T9306] usb 6-1: device descriptor read/64, error -71 [ 1077.230551][T14351] loop2: detected capacity change from 0 to 1024 [ 1077.270881][T14351] hfsplus: unable to parse mount options [ 1077.395056][T14351] loop2: detected capacity change from 0 to 128 [ 1077.431126][T14351] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1077.531306][T14351] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1077.531840][T14351] ext4 filesystem being mounted at /513/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.533409][ T9306] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1078.056047][ T9306] usb 6-1: device descriptor read/64, error -71 [ 1078.204330][ T9306] usb usb6-port1: attempt power cycle [ 1080.156258][T14379] loop5: detected capacity change from 0 to 512 [ 1080.336554][T14379] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2481: invalid indirect mapped block 256 (level 2) [ 1080.367386][T14379] EXT4-fs (loop5): Remounting filesystem read-only [ 1080.375910][T14379] EXT4-fs (loop5): 2 truncates cleaned up [ 1080.381774][T14379] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1080.700710][T14385] loop9: detected capacity change from 0 to 1024 [ 1080.765136][T14385] hfsplus: unable to parse mount options [ 1080.885480][T14390] loop5: detected capacity change from 0 to 512 [ 1080.973238][T14390] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2483: invalid indirect mapped block 256 (level 2) [ 1081.011578][T14390] EXT4-fs (loop5): Remounting filesystem read-only [ 1081.019256][T14390] EXT4-fs (loop5): 2 truncates cleaned up [ 1081.025055][T14390] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1082.204963][T14406] loop8: detected capacity change from 0 to 1024 [ 1082.270671][T14406] hfsplus: unable to parse mount options [ 1083.069680][T10382] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1083.326523][T10382] usb 6-1: device descriptor read/64, error -71 [ 1083.531003][T14420] loop8: detected capacity change from 0 to 1024 [ 1083.534313][T14421] loop9: detected capacity change from 0 to 512 [ 1083.641604][T10382] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1083.665326][T14421] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2493: invalid indirect mapped block 256 (level 2) [ 1083.683237][T14421] EXT4-fs (loop9): Remounting filesystem read-only [ 1083.691668][T14421] EXT4-fs (loop9): 2 truncates cleaned up [ 1083.697590][T14421] EXT4-fs (loop9): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1083.743081][T14420] hfsplus: unable to parse mount options [ 1084.031628][T10382] usb 6-1: device descriptor read/64, error -71 [ 1084.161405][T10382] usb usb6-port1: attempt power cycle [ 1084.837984][T10382] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1084.954550][T10382] usb 6-1: device descriptor read/8, error -71 [ 1085.295108][T10382] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1085.769509][T10382] usb 6-1: device descriptor read/8, error -71 [ 1086.204439][T14453] loop2: detected capacity change from 0 to 64 [ 1087.323686][T10382] usb usb6-port1: unable to enumerate USB device [ 1087.589932][T14458] loop8: detected capacity change from 0 to 1024 [ 1087.708696][T14458] hfsplus: unable to parse mount options [ 1087.839927][T14462] loop5: detected capacity change from 0 to 512 [ 1088.056356][T14462] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2505: invalid indirect mapped block 256 (level 2) [ 1088.071124][T14462] EXT4-fs (loop5): Remounting filesystem read-only [ 1088.079581][T14462] EXT4-fs (loop5): 2 truncates cleaned up [ 1088.085605][T14462] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1088.602643][T14475] loop5: detected capacity change from 0 to 512 [ 1088.769144][T14475] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2509: invalid indirect mapped block 256 (level 2) [ 1088.809636][T14475] EXT4-fs (loop5): Remounting filesystem read-only [ 1088.818316][T14475] EXT4-fs (loop5): 2 truncates cleaned up [ 1088.824251][T14475] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1089.267875][T14479] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1089.921421][T14494] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1090.374619][T14502] loop7: detected capacity change from 0 to 64 [ 1091.217787][T14506] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1098.754076][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1098.754218][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1099.459764][T14558] loop2: detected capacity change from 0 to 2048 [ 1099.622398][T14558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1101.477691][T14577] loop8: detected capacity change from 0 to 512 [ 1101.608799][T14577] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2538: invalid indirect mapped block 256 (level 2) [ 1101.626669][T14577] EXT4-fs (loop8): Remounting filesystem read-only [ 1101.633842][T14577] EXT4-fs (loop8): 2 truncates cleaned up [ 1101.639697][T14577] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1102.095162][T14587] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1104.529512][T14610] loop5: detected capacity change from 0 to 128 [ 1104.558875][T14611] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1104.713321][T14610] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1104.766426][T14610] sysv_free_block: trying to free block not in datazone [ 1104.820318][T14610] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1105.193607][T14620] loop9: detected capacity change from 0 to 32768 [ 1105.284009][T14626] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1106.456829][T14633] loop7: detected capacity change from 0 to 32768 [ 1106.553860][T14639] loop5: detected capacity change from 0 to 128 [ 1108.020793][T14639] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1108.028731][T14639] sysv_free_block: trying to free block not in datazone [ 1108.039187][T14635] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1108.043946][T14639] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1108.688438][T14643] loop2: detected capacity change from 0 to 32768 [ 1109.077491][T14647] loop5: detected capacity change from 0 to 32768 [ 1110.058207][T14660] loop9: detected capacity change from 0 to 128 [ 1110.854598][T14660] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 1110.862184][T14660] sysv_free_block: trying to free block not in datazone [ 1110.871568][T14660] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1111.156009][T14665] loop2: detected capacity change from 0 to 1024 [ 1111.301453][T14667] loop7: detected capacity change from 0 to 32768 [ 1111.416327][T14665] hfsplus: unable to parse mount options [ 1111.659782][T14665] loop2: detected capacity change from 0 to 128 [ 1111.746945][T14665] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1111.799483][T14665] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1111.893454][T14665] ext4 filesystem being mounted at /530/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.944140][T14673] loop9: detected capacity change from 0 to 32768 [ 1114.892439][T14691] loop2: detected capacity change from 0 to 128 [ 1114.975198][T14691] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1114.980038][T14691] sysv_free_block: trying to free block not in datazone [ 1114.992703][T14691] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1116.402611][T14702] loop2: detected capacity change from 0 to 128 [ 1116.868993][T14702] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1117.060760][T14702] sysv_free_block: trying to free block not in datazone [ 1117.357423][T14702] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1118.637534][T14717] loop2: detected capacity change from 0 to 32768 [ 1118.704838][T14721] loop9: detected capacity change from 0 to 1024 [ 1118.836884][T14721] hfsplus: unable to parse mount options [ 1119.112088][T14726] loop7: detected capacity change from 0 to 32768 [ 1120.561800][T14733] loop2: detected capacity change from 0 to 1024 [ 1120.744940][T14733] hfsplus: unable to parse mount options [ 1120.819375][T14739] loop9: detected capacity change from 0 to 32768 [ 1121.075901][T14741] loop7: detected capacity change from 0 to 32768 [ 1122.641730][T14750] loop2: detected capacity change from 0 to 128 [ 1122.841670][T14750] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1122.852370][T14750] sysv_free_block: trying to free block not in datazone [ 1122.879854][T14750] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1124.111050][T14758] loop2: detected capacity change from 0 to 32768 [ 1125.687618][T14769] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1125.922782][T14775] loop2: detected capacity change from 0 to 1024 [ 1125.980756][T14775] hfsplus: unable to parse mount options [ 1126.223096][T14777] loop7: detected capacity change from 0 to 32768 [ 1127.409369][T14788] loop9: detected capacity change from 0 to 128 [ 1127.597714][T14788] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 1127.606017][T14788] sysv_free_block: trying to free block not in datazone [ 1127.615646][T14788] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1127.643679][T14787] loop2: detected capacity change from 0 to 32768 [ 1128.806582][T14794] loop7: detected capacity change from 0 to 32768 [ 1129.029979][T14798] loop5: detected capacity change from 0 to 128 [ 1129.389219][T14798] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1129.407281][T14798] sysv_free_block: trying to free block not in datazone [ 1129.455802][T14798] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1131.784134][T14815] loop9: detected capacity change from 0 to 128 [ 1131.906462][T14815] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 1131.908573][T14815] sysv_free_block: trying to free block not in datazone [ 1131.928078][T14815] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1133.023244][T14818] loop2: detected capacity change from 0 to 128 [ 1133.641620][T14818] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1133.641939][T14818] sysv_free_block: trying to free block not in datazone [ 1133.643138][T14818] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1134.285144][T14825] loop5: detected capacity change from 0 to 1024 [ 1134.678547][T14825] hfsplus: unable to parse mount options [ 1134.909129][T14825] loop5: detected capacity change from 0 to 128 [ 1134.980351][T14825] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1134.989185][T14831] loop2: detected capacity change from 0 to 32768 [ 1135.038034][T14825] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1135.038439][T14825] ext4 filesystem being mounted at /555/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.927429][T14844] loop5: detected capacity change from 0 to 32768 [ 1137.183488][T14847] loop7: detected capacity change from 0 to 32768 [ 1138.058178][T14855] loop9: detected capacity change from 0 to 32768 [ 1139.503368][T14870] loop5: detected capacity change from 0 to 32768 [ 1139.660926][T14872] loop9: detected capacity change from 0 to 2048 [ 1140.639318][T14872] EXT4-fs (loop9): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1140.907204][T14872] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1141.003093][T14883] loop5: detected capacity change from 0 to 1024 [ 1141.125855][T14883] hfsplus: unable to parse mount options [ 1141.358870][T14883] loop5: detected capacity change from 0 to 128 [ 1141.515919][T14883] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1142.960501][T14893] loop2: detected capacity change from 0 to 32768 [ 1143.179875][T14883] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1143.179985][T14883] ext4 filesystem being mounted at /560/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.549083][T14904] loop9: detected capacity change from 0 to 32768 [ 1144.556709][T14920] loop5: detected capacity change from 0 to 128 [ 1144.621501][T14920] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1144.629280][T14920] sysv_free_block: trying to free block not in datazone [ 1144.638139][T14920] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1144.678248][T14925] loop2: detected capacity change from 0 to 2048 [ 1144.889189][T14925] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1148.332456][T14961] loop9: detected capacity change from 0 to 32768 [ 1149.889048][T14970] loop8: detected capacity change from 0 to 32768 [ 1152.897360][T14993] loop9: detected capacity change from 0 to 32768 [ 1153.606220][T15005] loop8: detected capacity change from 0 to 32768 [ 1154.110757][T15010] loop2: detected capacity change from 0 to 32768 [ 1156.342174][T15023] loop8: detected capacity change from 0 to 1024 [ 1156.406341][T15027] loop5: detected capacity change from 0 to 1024 [ 1156.426226][T15023] hfsplus: unable to parse mount options [ 1156.469284][T15025] loop2: detected capacity change from 0 to 32768 [ 1156.485227][T15023] overlayfs: failed to get inode (-116) [ 1156.494894][T15027] hfsplus: unable to parse mount options [ 1156.525635][T15023] overlayfs: failed to look up (file0) for ino (-116) [ 1158.497101][T15050] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2675'. [ 1159.035277][T15055] loop9: detected capacity change from 0 to 32768 [ 1161.191906][T15070] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1161.597024][T15076] loop9: detected capacity change from 0 to 32768 [ 1163.214644][T15086] loop7: detected capacity change from 0 to 32768 [ 1163.973304][T15091] loop2: detected capacity change from 0 to 128 [ 1164.085390][T15090] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2687'. [ 1164.102629][T15091] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1164.110522][T15091] sysv_free_block: trying to free block not in datazone [ 1164.120518][T15091] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1164.417898][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1164.424417][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1167.619799][T15113] ALSA: mixer_oss: invalid OSS volume '' [ 1172.482116][T15150] loop5: detected capacity change from 0 to 32768 [ 1174.644947][T15162] loop7: detected capacity change from 0 to 32768 [ 1175.439062][T15168] loop9: detected capacity change from 0 to 128 [ 1175.625281][T15168] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 1175.634716][T15168] sysv_free_block: trying to free block not in datazone [ 1175.656175][T15168] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1176.335282][T15171] loop2: detected capacity change from 0 to 32768 [ 1177.193802][T15179] loop5: detected capacity change from 0 to 32768 [ 1177.466463][T15181] loop7: detected capacity change from 0 to 32768 [ 1178.858174][T15192] loop8: detected capacity change from 0 to 128 [ 1180.734044][T15192] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1180.742272][T15192] sysv_free_block: trying to free block not in datazone [ 1180.750601][T15192] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1181.305478][T15198] loop8: detected capacity change from 0 to 32768 [ 1181.350165][T15196] loop2: detected capacity change from 0 to 32768 [ 1182.164608][T15209] loop7: detected capacity change from 0 to 128 [ 1182.970691][T15209] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 1182.978386][T15209] sysv_free_block: trying to free block not in datazone [ 1182.989433][T15209] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1183.793142][T15219] autofs4:pid:15219:autofs_fill_super: called with bogus options [ 1185.606130][T15230] loop8: detected capacity change from 0 to 32768 [ 1185.815556][T15232] loop5: detected capacity change from 0 to 32768 [ 1187.012628][T15241] loop7: detected capacity change from 0 to 32768 [ 1187.264248][T15243] loop8: detected capacity change from 0 to 32768 [ 1188.274192][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2727'. [ 1189.355116][T15253] loop8: detected capacity change from 0 to 32768 [ 1191.597775][T15272] loop7: detected capacity change from 0 to 2048 [ 1191.857239][T15274] loop9: detected capacity change from 0 to 32768 [ 1192.776101][T15272] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1193.126643][T15289] loop5: detected capacity change from 0 to 2048 [ 1193.179967][T15289] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1193.972100][T15301] loop7: detected capacity change from 0 to 128 [ 1194.722578][T15301] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 1194.738317][T15301] sysv_free_block: trying to free block not in datazone [ 1194.753274][T15301] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1195.841244][T15305] loop7: detected capacity change from 0 to 32768 [ 1197.876152][T15317] loop8: detected capacity change from 0 to 32768 [ 1198.095450][T15319] loop5: detected capacity change from 0 to 2048 [ 1198.203470][T15321] loop2: detected capacity change from 0 to 32768 [ 1198.910711][T15319] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1205.678441][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2759'. [ 1208.775506][T15390] loop5: detected capacity change from 0 to 128 [ 1208.836657][T15390] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1208.845547][T15390] sysv_free_block: trying to free block not in datazone [ 1208.862593][T15390] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1209.596919][T15387] loop8: detected capacity change from 0 to 32768 [ 1212.271016][T15406] loop9: detected capacity change from 0 to 128 [ 1212.666318][T15407] loop5: detected capacity change from 0 to 128 [ 1213.776931][T15409] loop2: detected capacity change from 0 to 128 [ 1213.835695][T15407] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1213.845029][T15407] sysv_free_block: trying to free block not in datazone [ 1213.855914][T15406] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 1213.865298][T15406] sysv_free_block: trying to free block not in datazone [ 1213.883552][T15406] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1213.890984][T15407] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1214.399472][T15409] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1214.409090][T15409] sysv_free_block: trying to free block not in datazone [ 1214.520306][T15409] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1218.153610][T13298] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.324579][T13298] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.544194][T13298] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.590724][T15445] loop9: detected capacity change from 0 to 32768 [ 1218.673113][T13298] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.866208][T15436] chnl_net:caif_netlink_parms(): no params data found [ 1219.204208][T15454] loop2: detected capacity change from 0 to 2048 [ 1219.401320][T15454] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1219.624684][T15436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.659564][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.688800][T15436] device bridge_slave_0 entered promiscuous mode [ 1219.850781][T15436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.948211][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.986034][T15436] device bridge_slave_1 entered promiscuous mode [ 1220.113643][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.291491][T15477] loop2: detected capacity change from 0 to 128 [ 1220.329257][ T9705] Bluetooth: hci2: command 0x0409 tx timeout [ 1222.153921][T15477] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1222.162883][T15477] sysv_free_block: trying to free block not in datazone [ 1222.185103][T15477] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1222.577099][ T9705] Bluetooth: hci2: command 0x041b tx timeout [ 1222.586303][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.650397][T15484] loop5: detected capacity change from 0 to 1024 [ 1222.694984][T15482] loop9: detected capacity change from 0 to 1024 [ 1222.770658][T15436] team0: Port device team_slave_0 added [ 1223.045893][T15436] team0: Port device team_slave_1 added [ 1223.350514][T15492] afs: Unknown parameter 'dynlVž\ÆO' [ 1224.549463][T15494] afs: Unknown parameter 'dynlVž\ÆO' [ 1225.063113][ T4344] hfsplus: b-tree write err: -5, ino 4 [ 1225.220123][ T9705] Bluetooth: hci2: command 0x040f tx timeout [ 1225.255415][T12402] hfsplus: b-tree write err: -5, ino 4 [ 1225.565094][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.575312][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.962717][T15510] loop8: detected capacity change from 0 to 128 [ 1226.713519][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.831780][T15510] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1226.840112][T15510] sysv_free_block: trying to free block not in datazone [ 1227.746336][ T5183] Bluetooth: hci2: command 0x0419 tx timeout [ 1227.760695][T15510] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1227.764439][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.788482][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.328955][T15522] xt_l2tp: invalid flags combination: c [ 1228.525533][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.847774][T15525] loop5: detected capacity change from 0 to 256 [ 1229.306451][T15525] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x079995a4, utbl_chksum : 0xe619d30d) [ 1231.169877][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1231.176244][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.233888][T15436] device hsr_slave_0 entered promiscuous mode [ 1232.460697][T15436] device hsr_slave_1 entered promiscuous mode [ 1232.489395][T15544] loop2: detected capacity change from 0 to 1024 [ 1232.979435][T15548] loop8: detected capacity change from 0 to 1024 [ 1233.435275][T15550] loop5: detected capacity change from 0 to 1024 [ 1233.563336][T15436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1233.570945][T15436] Cannot create hsr debugfs directory [ 1233.805889][T15554] afs: Unknown parameter 'dynlVž\ÆO' [ 1234.641818][T15557] afs: Unknown parameter 'dynlVž\ÆO' [ 1235.335662][ T4344] hfsplus: b-tree write err: -5, ino 4 [ 1235.408524][T12402] hfsplus: b-tree write err: -5, ino 4 [ 1235.763741][T15563] afs: Unknown parameter 'dynlVž\ÆO' [ 1236.750572][ T4607] hfsplus: b-tree write err: -5, ino 4 [ 1240.615674][T15581] loop2: detected capacity change from 0 to 1024 [ 1242.823022][T15600] afs: Unknown parameter 'dynlVž\ÆO' [ 1243.321472][T15603] loop8: detected capacity change from 0 to 128 [ 1244.845120][T12402] hfsplus: b-tree write err: -5, ino 4 [ 1245.071696][T15605] loop9: detected capacity change from 0 to 128 [ 1245.324771][T15603] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1245.333051][T15603] sysv_free_block: trying to free block not in datazone [ 1245.341563][T15603] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1245.370568][T15605] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 1245.378213][T15605] sysv_free_block: trying to free block not in datazone [ 1245.386500][T15605] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1247.693313][T15626] loop2: detected capacity change from 0 to 128 [ 1248.085621][T15626] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1248.093359][T15626] sysv_free_block: trying to free block not in datazone [ 1248.102255][T15626] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1250.463025][T15628] loop8: detected capacity change from 0 to 1024 [ 1250.547152][T15638] loop9: detected capacity change from 0 to 1024 [ 1251.163472][T15640] afs: Unknown parameter 'dynlVž\ÆO' [ 1252.334563][T15644] afs: Unknown parameter 'dynlVž\ÆO' [ 1253.172742][T12402] hfsplus: b-tree write err: -5, ino 4 [ 1253.273383][ T154] hfsplus: b-tree write err: -5, ino 4 [ 1254.798067][T15660] loop2: detected capacity change from 0 to 1024 [ 1257.291272][T15672] loop8: detected capacity change from 0 to 1024 [ 1257.314960][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1258.513539][T15678] afs: Unknown parameter 'dynlVž\ÆO' [ 1259.283050][ T154] hfsplus: b-tree write err: -5, ino 4 [ 1259.325555][T13012] Bluetooth: hci5: command 0x0409 tx timeout [ 1259.379179][T13298] device hsr_slave_0 left promiscuous mode [ 1259.398814][T13298] device hsr_slave_1 left promiscuous mode [ 1259.428123][T15682] loop8: detected capacity change from 0 to 1024 [ 1259.451903][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.471065][T13298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.508234][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.668991][T13298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.708419][T13298] device bridge_slave_1 left promiscuous mode [ 1259.714767][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.723420][T13298] device bridge_slave_0 left promiscuous mode [ 1259.729688][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.792741][T13298] device veth1_macvtap left promiscuous mode [ 1259.836797][T13298] device veth0_macvtap left promiscuous mode [ 1259.942656][T15693] afs: Unknown parameter 'dynlVž\ÆO' [ 1260.713532][T13298] device veth1_vlan left promiscuous mode [ 1260.726998][T13298] device veth0_vlan left promiscuous mode [ 1260.844226][ T3058] hfsplus: b-tree write err: -5, ino 4 [ 1262.106160][ T4211] Bluetooth: hci5: command 0x041b tx timeout [ 1262.275122][T13298] team0 (unregistering): Port device team_slave_1 removed [ 1262.343283][T13298] team0 (unregistering): Port device team_slave_0 removed [ 1262.359613][T13298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.377176][T13298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.840107][T13298] bond0 (unregistering): Released all slaves [ 1263.396409][T15705] loop9: detected capacity change from 0 to 1024 [ 1263.871214][T15436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1265.154757][ T1110] Bluetooth: hci5: command 0x040f tx timeout [ 1265.913266][T15436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1266.044624][ T4344] hfsplus: b-tree write err: -5, ino 4 [ 1266.061735][T15668] chnl_net:caif_netlink_parms(): no params data found [ 1266.282791][T15727] loop9: detected capacity change from 0 to 256 [ 1266.290141][T15723] loop8: detected capacity change from 0 to 1024 [ 1266.302250][T15436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1266.335261][T15727] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x079995a4, utbl_chksum : 0xe619d30d) [ 1266.405620][T15436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1268.015208][ T4211] Bluetooth: hci5: command 0x0419 tx timeout [ 1268.155574][T15744] afs: Unknown parameter 'dynlVž\ÆO' [ 1268.810262][T15668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.818292][T15668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.828149][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1268.838562][T15668] device bridge_slave_0 entered promiscuous mode [ 1268.868719][T15668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.882774][T15668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.024567][T15668] device bridge_slave_1 entered promiscuous mode [ 1269.906153][T15668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.012135][T15668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.238720][T15776] netlink: 'syz.8.2840': attribute type 10 has an invalid length. [ 1270.326527][T15436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.369438][T15668] team0: Port device team_slave_0 added [ 1270.443543][T15436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.504393][T15668] team0: Port device team_slave_1 added [ 1270.539617][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1270.559117][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1270.601854][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1270.614180][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1270.667518][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.674677][T11917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.718428][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1270.740068][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1270.761144][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.768313][T11917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.842119][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1270.872169][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1270.885836][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1270.925924][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1270.977177][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1271.171774][T15668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.179590][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.843860][T15668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.059492][T15668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.066477][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.116528][T15668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.238989][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1272.252046][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1272.298910][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1272.340682][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1272.388462][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1272.481336][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1272.514443][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1272.551163][T15436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1272.612979][T15668] device hsr_slave_0 entered promiscuous mode [ 1272.634807][T15668] device hsr_slave_1 entered promiscuous mode [ 1272.657744][T15668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.679225][T15668] Cannot create hsr debugfs directory [ 1272.788850][T15831] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2855'. [ 1273.395556][T12402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1273.406903][T12402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1273.477026][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.752263][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1273.771547][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1273.795635][T15857] : renamed from ipvlan1 [ 1274.037805][T15436] device veth0_vlan entered promiscuous mode [ 1274.053274][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1274.068667][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1274.120969][T15436] device veth1_vlan entered promiscuous mode [ 1274.150471][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1274.171883][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1274.211267][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1274.540875][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1274.605569][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1274.615609][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1274.635730][T15436] device veth0_macvtap entered promiscuous mode [ 1274.697280][T15886] overlayfs: missing 'workdir' [ 1274.702819][T15436] device veth1_macvtap entered promiscuous mode [ 1274.782241][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.811192][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.839495][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.876252][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.887825][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.922348][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.951990][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.983706][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.040984][T15436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.075438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1275.095163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1275.139647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1275.165983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1275.194187][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.226722][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.275205][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.294956][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.305256][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.336477][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.360949][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.379286][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.425064][T15436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.456883][T15910] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1275.469079][T15436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.496407][T15436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.514442][T15436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.524226][T15910] kvm: pic: non byte write [ 1275.540945][T15910] kvm: pic: non byte write [ 1275.552187][T15436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.553138][T15910] kvm: pic: non byte write [ 1275.579548][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1275.602595][T15910] kvm: pic: non byte write [ 1275.618913][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1275.632968][T15910] kvm: pic: non byte write [ 1275.653295][T15668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1275.673573][T15910] kvm: pic: non byte write [ 1275.691717][T15668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1275.700861][T15910] kvm: pic: non byte write [ 1275.724008][T15668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1275.733045][T15910] kvm: pic: non byte write [ 1275.821494][T15910] kvm: pic: non byte write [ 1275.826260][T15910] kvm: pic: non byte write [ 1275.844108][T15668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1276.113643][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.142071][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.241113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1276.277829][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.311133][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.357082][T15668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.380590][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1276.444091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1276.459951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1276.493944][T15668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.543620][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1276.598537][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1276.608058][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.615229][T11917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.681006][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1276.707895][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1276.731222][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1276.805376][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.812471][T11917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.842450][ T9306] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1276.859576][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1276.900957][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1276.924001][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1276.979782][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1277.187969][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1277.237670][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1277.339846][ T9306] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1277.382683][ T9306] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1277.404436][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1277.747739][ T9306] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1277.762753][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1277.783544][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1277.802418][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1277.812193][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1277.845735][T15668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1277.921514][ T9306] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1277.937807][ T9306] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1277.961934][ T9306] usb 9-1: Product: syz [ 1277.966165][ T9306] usb 9-1: Manufacturer: syz [ 1278.037546][ T9306] cdc_wdm 9-1:1.0: skipping garbage [ 1278.043658][ T9306] cdc_wdm 9-1:1.0: skipping garbage [ 1278.064992][ T9306] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 1278.204872][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1278.226911][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1278.271185][T15668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.362569][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1278.406974][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1278.500080][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1278.534084][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1278.684486][ T5183] usb 9-1: USB disconnect, device number 21 [ 1278.733175][T15668] device veth0_vlan entered promiscuous mode [ 1278.780654][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1278.794089][T11917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1279.645702][T15668] device veth1_vlan entered promiscuous mode [ 1281.360271][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1281.382747][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1281.416372][T15668] device veth0_macvtap entered promiscuous mode [ 1281.440553][T15668] device veth1_macvtap entered promiscuous mode [ 1281.572514][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.592321][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.630995][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.681586][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.701034][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.782426][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.818772][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.829880][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.839741][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.851325][T16027] syz.3.2886 uses obsolete (PF_INET,SOCK_PACKET) [ 1281.859204][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.882354][T15668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.938652][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1281.958244][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1281.993833][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1282.034947][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1282.082856][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.102213][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.121594][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.140623][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.156963][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.171488][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.181798][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.193241][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.203211][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.214546][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.228001][T15668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.250026][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1282.276428][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1282.328075][T15668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.414563][T15668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.440235][T15668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.453150][T16037] crypto_alloc_aead failed rc=-4 [ 1282.476754][T15668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.835741][T12402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.844139][T12402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.939332][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1283.089900][T12402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.111238][T12402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.286600][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1283.604810][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1283.942710][ T23] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1283.952204][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.965390][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1283.966093][ T23] usb 4-1: config 0 descriptor?? [ 1284.049362][ T23] as10x_usb: device has been detected [ 1284.178678][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1284.241503][ T23] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1284.584948][ T23] as10x_usb: error during firmware upload part1 [ 1284.609803][T16061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2889'. [ 1284.624934][ T23] Registered device nBox DVB-T Dongle [ 1285.633643][ T9705] usb 4-1: USB disconnect, device number 4 [ 1286.033931][T16108] chnl_net:caif_netlink_parms(): no params data found [ 1286.100685][ T9705] Unregistered device nBox DVB-T Dongle [ 1286.106175][T16128] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 1286.121169][ T9705] as10x_usb: device has been disconnected [ 1286.476744][T16108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.607125][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.616159][T16108] device bridge_slave_0 entered promiscuous mode [ 1286.625038][T16108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.635529][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.645322][T16108] device bridge_slave_1 entered promiscuous mode [ 1287.665734][ T9306] Bluetooth: hci3: command 0x0409 tx timeout [ 1287.906614][ T5183] Bluetooth: hci2: command 0x0409 tx timeout [ 1288.130374][T16108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.119987][T16108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.249751][T16108] team0: Port device team_slave_0 added [ 1289.293552][T16174] netlink: 'syz.9.2918': attribute type 4 has an invalid length. [ 1289.455338][T16108] team0: Port device team_slave_1 added [ 1289.463211][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2918'. [ 1289.617612][T16179] netlink: 'syz.9.2918': attribute type 4 has an invalid length. [ 1289.725779][T16108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.770234][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.857891][T16108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.899908][T16108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.924678][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.000744][T16108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.114601][ T9705] Bluetooth: hci3: command 0x041b tx timeout [ 1290.462996][T16108] device hsr_slave_0 entered promiscuous mode [ 1290.549092][T16108] device hsr_slave_1 entered promiscuous mode [ 1290.606665][T16108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.640956][T16108] Cannot create hsr debugfs directory [ 1290.777753][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2929'. [ 1291.339118][T16252] syz.9.2934 sent an empty control message without MSG_MORE. [ 1291.462310][T16108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.663814][T16108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.769746][T16108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.914101][T16275] overlayfs: missing 'lowerdir' [ 1291.941004][T16108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.175611][T16285] input: syz1 as /devices/virtual/input/input50 [ 1292.264782][T16108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1292.330321][T16108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1292.348040][T13012] Bluetooth: hci3: command 0x040f tx timeout [ 1292.393274][T16108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1292.444729][T16108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1292.730780][T16108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.818997][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1292.841469][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.872812][ T4240] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1293.270205][T16108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.330046][T16304] device geneve2 entered promiscuous mode [ 1293.416474][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1293.438612][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1293.483156][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.490317][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.513543][T16301] kAFS: unparsable volume name [ 1293.533991][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1293.591827][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1293.611305][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.618450][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.626142][ T4240] usb 4-1: Using ep0 maxpacket: 32 [ 1293.648884][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.673279][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1294.744177][T13012] Bluetooth: hci3: command 0x0419 tx timeout [ 1297.085090][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1297.091443][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1406.695491][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1406.702538][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10396/1:b..l [ 1406.711181][ C0] (detected by 0, t=10502 jiffies, g=67425, q=159) [ 1406.717772][ C0] task:syz-executor state:R running task stack:20128 pid:10396 ppid: 10383 flags:0x00004000 [ 1406.729899][ C0] Call Trace: [ 1406.733200][ C0] [ 1406.736156][ C0] __schedule+0x12c4/0x45b0 [ 1406.740680][ C0] ? unwind_next_frame+0x1437/0x1fa0 [ 1406.745998][ C0] ? mark_lock+0x98/0x340 [ 1406.750348][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1406.756342][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1406.762260][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 1406.767563][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 1406.772684][ C0] ? __cond_resched+0x20/0x20 [ 1406.777405][ C0] irqentry_exit+0x53/0x80 [ 1406.781835][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1406.788208][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 1406.793506][ C0] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1406.813145][ C0] RSP: 0018:ffffc90002d8f6c0 EFLAGS: 00000206 [ 1406.819228][ C0] RAX: 0000000000000001 RBX: 1ffff920005b1ee4 RCX: 1ffff920005b1e84 [ 1406.827301][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 1406.835369][ C0] RBP: ffffc90002d8f820 R08: dffffc0000000000 R09: fffffbfff2131821 [ 1406.843352][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005b1ee0 [ 1406.851336][ C0] R13: dffffc0000000000 R14: ffffc90002d8f720 R15: 0000000000000246 [ 1406.859346][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1406.864755][ C0] rcu_lock_acquire+0x20/0x30 [ 1406.869442][ C0] ? obj_cgroup_put+0xc0/0xc0 [ 1406.874154][ C0] slab_post_alloc_hook+0x1a6/0x380 [ 1406.879374][ C0] ? anon_vma_fork+0x1ff/0x580 [ 1406.884148][ C0] kmem_cache_alloc+0xf3/0x280 [ 1406.888932][ C0] anon_vma_fork+0x1ff/0x580 [ 1406.893535][ C0] ? dup_userfaultfd+0x9f/0x5f0 [ 1406.898417][ C0] ? kmem_cache_alloc+0x128/0x280 [ 1406.903460][ C0] copy_mm+0x9f2/0x1370 [ 1406.907643][ C0] ? copy_signal+0x630/0x630 [ 1406.912246][ C0] ? __init_rwsem+0x11e/0x160 [ 1406.916944][ C0] ? copy_signal+0x529/0x630 [ 1406.921550][ C0] copy_process+0x1816/0x3ef0 [ 1406.926360][ C0] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 1406.931486][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 1406.936536][ C0] kernel_clone+0x210/0x960 [ 1406.941062][ C0] ? create_io_thread+0x1e0/0x1e0 [ 1406.946120][ C0] ? __context_tracking_enter+0x5f/0x90 [ 1406.951941][ C0] ? __context_tracking_exit+0x4c/0x80 [ 1406.957423][ C0] __x64_sys_clone+0x23f/0x290 [ 1406.962205][ C0] ? __do_sys_vfork+0x130/0x130 [ 1406.967071][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1406.973081][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1406.979084][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 1406.984339][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1406.990348][ C0] do_syscall_64+0x3b/0xb0 [ 1406.994780][ C0] ? clear_bhb_loop+0x15/0x70 [ 1406.999471][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1407.005416][ C0] RIP: 0033:0x7f0f2c202613 [ 1407.009843][ C0] RSP: 002b:00007ffdd169e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1407.018269][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f2c202613 [ 1407.026253][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1407.034231][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1407.042215][ C0] R10: 000055556edf77d0 R11: 0000000000000246 R12: 0000000000000000 [ 1407.050196][ C0] R13: 00000000000927c0 R14: 000000000012de10 R15: 00007ffdd169e1e0 [ 1407.058198][ C0] [ 1407.061228][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10282 jiffies! g67425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1407.073583][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=47546 [ 1407.081473][ C0] rcu: rcu_preempt kthread starved for 10288 jiffies! g67425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1407.092849][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1407.102834][ C0] rcu: RCU grace-period kthread stack dump: [ 1407.108728][ C0] task:rcu_preempt state:I stack:26488 pid: 15 ppid: 2 flags:0x00004000 [ 1407.118054][ C0] Call Trace: [ 1407.121349][ C0] [ 1407.124298][ C0] __schedule+0x12c4/0x45b0 [ 1407.128823][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1407.134732][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1407.140658][ C0] ? __mod_timer+0xa8e/0xeb0 [ 1407.145279][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1407.151211][ C0] ? mod_timer_pending+0x20/0x20 [ 1407.156224][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 1407.161628][ C0] schedule+0x11b/0x1f0 [ 1407.165902][ C0] schedule_timeout+0x1b9/0x300 [ 1407.170775][ C0] ? console_conditional_schedule+0x40/0x40 [ 1407.176704][ C0] ? update_process_times+0x200/0x200 [ 1407.182206][ C0] ? prepare_to_swait_event+0x321/0x340 [ 1407.187878][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 1407.192782][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1407.192818][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1407.204234][ C0] ? rcu_gp_init+0xdae/0x1140 [ 1407.209041][ C0] ? rcu_gp_init+0x1140/0x1140 [ 1407.213836][ C0] ? finish_swait+0xc5/0x1d0 [ 1407.218439][ C0] rcu_gp_kthread+0xa4/0x360 [ 1407.223040][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1407.227921][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1407.233048][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1407.238977][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 1407.244028][ C0] kthread+0x3f6/0x4f0 [ 1407.248117][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1407.253247][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1407.256026][ T9306] ODEBUG: Out of memory. ODEBUG disabled [ 1407.257851][ C0] ret_from_fork+0x1f/0x30 [ 1407.257894][ C0] [ 1407.257903][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1407.257910][ C0] NMI backtrace for cpu 0 [ 1407.282589][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.178-syzkaller #0 [ 1407.290400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1407.300473][ C0] Call Trace: [ 1407.303762][ C0] [ 1407.306610][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 1407.311323][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1407.316980][ C0] ? panic+0x860/0x860 [ 1407.318937][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1407.321089][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 1407.321117][ C0] ? __wake_up_klogd+0xd5/0x100 [ 1407.327504][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1407.332282][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1407.349537][ C0] ? _printk+0xd1/0x120 [ 1407.353724][ C0] ? cpu_online+0x1f/0x40 [ 1407.358090][ C0] ? panic+0x860/0x860 [ 1407.362277][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1407.368373][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 1407.374384][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 1407.380662][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 1407.386176][ C0] ? print_cpu_stall+0x600/0x600 [ 1407.391140][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 1407.396195][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 1407.401421][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 1407.406734][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 1407.411600][ C0] ? hrtimer_run_queues+0x163/0x450 [ 1407.416827][ C0] ? account_process_tick+0x232/0x3a0 [ 1407.422224][ C0] update_process_times+0x196/0x200 [ 1407.427541][ C0] tick_sched_timer+0x386/0x550 [ 1407.432416][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 1407.437983][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 1407.443224][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1407.448362][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 1407.454455][ C0] hrtimer_interrupt+0x392/0x980 [ 1407.459433][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 1407.465433][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1407.471066][ C0] [ 1407.473982][ C0] [ 1407.476897][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1407.482864][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 1407.488673][ C0] Code: a5 37 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 84 1f 3e f7 0f 1f 44 00 00 e8 1a a1 37 f7 0f 00 2d a3 4f bb 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 db 89 81 f7 [ 1407.508365][ C0] RSP: 0018:ffffffff8c807b80 EFLAGS: 000002d3 [ 1407.514419][ C0] RAX: ffffffff8a48e476 RBX: 0000000000000000 RCX: ffffffff8c8bd680 [ 1407.522374][ C0] RDX: 0000000000000000 RSI: ffffffff8aab2b80 RDI: ffffffff8af9f2c0 [ 1407.530333][ C0] RBP: ffffffff8c807c10 R08: ffffffff81870420 R09: fffffbfff1917ad1 [ 1407.538304][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1900f70 [ 1407.546345][ C0] R13: ffff88801e397004 R14: ffffffff8c807ba0 R15: dffffc0000000000 [ 1407.554308][ C0] ? trace_hardirqs_on+0x30/0x80 [ 1407.559236][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 1407.564426][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 1407.569635][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 1407.575170][ C0] ? rcu_qs+0x190/0x190 [ 1407.579317][ C0] acpi_idle_enter+0x352/0x4f0 [ 1407.584071][ C0] cpuidle_enter_state+0x521/0xef0 [ 1407.589181][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 1407.594541][ C0] ? can_stop_idle_tick+0x20d/0x2b0 [ 1407.599727][ C0] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 1407.605438][ C0] cpuidle_enter+0x59/0x90 [ 1407.609845][ C0] do_idle+0x3e4/0x670 [ 1407.613904][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1407.619091][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1407.625236][ C0] ? schedule_idle+0x57/0x90 [ 1407.629815][ C0] cpu_startup_entry+0x14/0x20 [ 1407.634574][ C0] ? time_init+0x40/0x40 [ 1407.638841][ C0] start_kernel+0x48c/0x540 [ 1407.643336][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 1407.649225][ C0] [ 1407.678525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1407.781869][ T4211] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1407.790890][ T4211] Bluetooth: hci5: Injecting HCI hardware error event [ 1407.798159][ T4179] Bluetooth: hci5: hardware error 0x00 [ 1407.808115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1407.817653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready SYZFAIL: failed to send rpc fd=3 want=328 sent=0 n=-1 (errno 32: Broken pipe) [ 1407.889514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1407.899410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1407.908464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1408.461691][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1408.470512][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1408.478967][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1408.488714][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1408.498371][T16108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1409.778293][ T5248] device hsr_slave_0 left promiscuous mode [ 1409.785026][ T5248] device hsr_slave_1 left promiscuous mode [ 1409.802302][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.816803][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.826201][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.842665][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.854720][ T5248] device bridge_slave_1 left promiscuous mode [ 1409.867499][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.880868][ T5248] device bridge_slave_0 left promiscuous mode [ 1409.895694][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.918759][ T5248] device veth1_macvtap left promiscuous mode [ 1409.929551][ T5248] device veth0_macvtap left promiscuous mode [ 1409.939801][ T5248] device veth1_vlan left promiscuous mode [ 1409.951510][ T5248] device veth0_vlan left promiscuous mode [ 1410.367963][ T5248] team0 (unregistering): Port device team_slave_1 removed [ 1410.392224][ T5248] team0 (unregistering): Port device team_slave_0 removed [ 1410.418416][ T5248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.433154][ T5248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.504374][ T5248] bond0 (unregistering): Released all slaves [ 1410.768918][ T4240] usb 4-1: unable to read config index 0 descriptor/all [ 1410.775931][ T4240] usb 4-1: can't read configurations, error -71 [ 1412.924588][ T5248] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.967154][ T5248] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.031069][ T5248] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.097435][ T5248] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.238725][ T5248] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.290201][ T5248] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.374097][ T5248] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.426596][ T5248] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.602655][ T5248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.689986][ T5248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.758470][ T5248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.811978][ T5248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.621378][ T5248] device hsr_slave_0 left promiscuous mode [ 1415.627926][ T5248] device hsr_slave_1 left promiscuous mode [ 1415.644980][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.652884][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.669586][ T5248] device bridge_slave_1 left promiscuous mode [ 1415.684319][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.701877][ T5248] device bridge_slave_0 left promiscuous mode [ 1415.711664][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.727693][ T5248] device hsr_slave_0 left promiscuous mode [ 1415.737950][ T5248] device hsr_slave_1 left promiscuous mode [ 1415.748531][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.760173][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.777257][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.786983][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.795313][ T5248] device bridge_slave_1 left promiscuous mode [ 1415.801486][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.809946][ T5248] device bridge_slave_0 left promiscuous mode [ 1415.816971][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.830123][ T5248] device hsr_slave_0 left promiscuous mode [ 1415.840618][ T5248] device hsr_slave_1 left promiscuous mode [ 1415.847296][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.854734][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.862721][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.870470][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.878112][ T5248] device bridge_slave_1 left promiscuous mode [ 1415.884395][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.893080][ T5248] device bridge_slave_0 left promiscuous mode [ 1415.899269][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.910649][ T5248] device hsr_slave_0 left promiscuous mode [ 1415.917056][ T5248] device hsr_slave_1 left promiscuous mode [ 1415.923551][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.930997][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.938928][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.946437][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.957327][ T5248] device bridge_slave_1 left promiscuous mode [ 1415.963503][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.973397][ T5248] device bridge_slave_0 left promiscuous mode [ 1415.979967][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.999543][ T5248] device veth1_vlan left promiscuous mode [ 1416.005329][ T5248] device veth0_vlan left promiscuous mode [ 1416.012508][ T5248] device veth1_vlan left promiscuous mode [ 1416.018464][ T5248] device veth0_vlan left promiscuous mode [ 1416.025189][ T5248] device veth1_macvtap left promiscuous mode [ 1416.031627][ T5248] device veth0_macvtap left promiscuous mode [ 1416.037667][ T5248] device veth1_vlan left promiscuous mode [ 1416.043878][ T5248] device veth0_vlan left promiscuous mode [ 1416.369592][ T5248] team0 (unregistering): Port device team_slave_1 removed [ 1416.385822][ T5248] team0 (unregistering): Port device team_slave_0 removed [ 1416.397355][ T5248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.412586][ T5248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.476766][ T5248] bond0 (unregistering): Released all slaves [ 1416.584546][ T5248] team0 (unregistering): Port device team_slave_1 removed [ 1416.600793][ T5248] team0 (unregistering): Port device team_slave_0 removed [ 1416.612477][ T5248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.628764][ T5248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface