last executing test programs: 6.053240706s ago: executing program 0 (id=1): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000004280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) setreuid(0x0, 0xee00) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x10000}) 5.914876416s ago: executing program 1 (id=2): syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x400, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@ssd}]}, 0x0, 0x55bd, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzKaWFAu03flFMk8kY6rZspmIm6BSLDBwV5A7ckGSMVmYbJChr5pZ20TWODRfnUvmxjSWoS2RktdGObpA5opgQhTh+DI0x46eM0Yw45OfCmMal995zufcc2l7ZZp2+XqQ957mf53nuc0/OH/d96Tk3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCAIkjPaW5f8+uotb55+95mmq18ZOPCxiX9u/OFtq0aM+/Sjfypb9fsDL88fXVc56fL2/Yl5TfvGLQ2CRGpcIjN+3s1fnFk/a9700nDC2i+ltxUVPT1leuiBdGNQ3oPd4/J/6oIgKI5MUJTZTi5LbwfkTZDdbYxP2KvxQ99aMuxYTdva2rKGZY9MOx5/6XQr7e8F9JfMeXXo3LlUnfo9INIj28459RJ5p2h6fPSEe19eBADwnlQlU5vs29HMW9xsuyVaj7SrI+3WSDt8h9Ca27gQ6XkH9bTOUdF6P62zOh0VSnpcZ6SeOf7ZdjI6PtKORI33sM78rplIU9rTOhdH6v21TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAPkge3bf77LdOfPzLp5ienXr/v9TkvnJr85RcWffv4wX9UXrLm4D/XHnh5/ui6ykmXt+9PzGvaN25pEFSkxiXSwxOzhky55LM/r/nOb7qapq0f2vpKUVCSKhRl5h+Y0zl4Pdy5rjwI7sypHAqn/evwIEjmF1LNYFW8sCC1MzUsAAAA8GFyaer3gGw7HQeL89qJVJpMpP6F0mFx/NC3lgw7VtO2trasYdkj045f+HzJHuarPu982XbFuZ9ETjAO4290vnP1sGtjbJ7eRWeM5vmirqtWJHes++rOx868dM2+O7ZX1t177UV3tzWs+//BNSd2/mVOLP9X9J7/wyMn/wMAAPDvkP+j8/Sur/x/8cGyXYvOvrbxhi/87tmv3b79ntO//MHWb9zddfhoy9jvNizdsjWW/0flPWUs/4crDvP/gODC8j8AAAB8kP238391bJ7e9ZX/q6veWX7vfYvXLdu17eyE317R/mTHm1esuW7mmJXtQf1znYffjuX/qsLy/8DcZYcP/iFc8MLyIKgq/KACAAAAecL/dz/30UKY19OfHETz+p23Tizfc+Kyb03efPsDe0c2HbzrzF3j69Yt3LLgE1X3T3+8+lAs/1cXlv+L35+XCwAAABRgzOqddW/PvmrP2Ff33t/49J720jUz/vbqDTvarmw5eWTR1l13xPJ/srD8X9I/LwcAAAA4jx89e+33b2le8vW5NZsnnD35xrCH3tl7UWP77ok/Xrl/+7vPrdwdy/+1heX/IZlt5sqH9KAXw79CWF4eBKXdO4vThZeC1puyBQAAAOA/JMzpy8aM61pZP+KTs0umNrStWP3wZaOOfCzR+tCIuc0TivduOnpfLP8v7v3+/+GdDsLr//Pu/xe7/j+nkL7r3+fdGAAAAICPovj1/OHt8dPfXBD//v1o/96v/199/bZfbE/c9MaMlkvn/2zUovFTphzdv6n51IO1n9n82pAN6x+N5f+WwvJ/Ue628Pv/B0Ewsvfv/wMAAIAL8L/2/X9zYvP0rq/7/7de0/zM4wfuef7Fp7bcenrw4bM3dl75VOeG2x7oPFJ5KmjecSaW/1sLy//htiz35W0Kj8/3yoNgZPdO5m6CvwqXuzBS6CjOKaQPfGTErHBEptBRklPoNjjTzo4YWx4EH+/eaYlM9X9hoTVSyN7M4IlIYcfwzIjM+ZAtPB0pbArPtJ8Mzyw3WtgQFjIXWHSEV1CUZS+JiIw42dOI7sJ5R+zOPjkAAMBHShieM1m2OAjqP5VTjkbZjkR+/3iHIX11GNBXh6K+OgyMdIh27OnxoDa/ED7e+dMFdfV/XH7jiI3lM2fvKvrKoekTP7dife03N86dcmL0xeVdsfz/RGH5PzwUg9Kbnq7/D8Lr/zPfa5i9/r82LFRECh1hIRm9Y0AyfI502H04fI6KZGbEsZHZAgAAAHyohZ8LFPXzOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgXe3ceJlV1Nwj4dNML3TTdbfQR1ExCMGw+0jQQcYmJKAYSNNrEPUYFoVGkRRRIhKCDS9zNaOKMxswYGBO3IOIybqMRRdEIiUQHRxSXRP1wN7jlc3nke7qrTlF1q8suZJH2e98/uk7V76y3lq5z761zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/nM45KXR86bMOGvVFa+teDMMvfvKUZeW/GqH4UuX9rnh19fe+JtXHnph6fje43YY0Wf+8yXHzHxu13NDaGorV5IqXnJQ9cgeA68c/fPbVs/c//aaS56oSNebjodurX9K03fOjq2+1D2EO0pCKEsGBtakAuXp+zWxvq/WhLBVWBfIlGiuTpVINhweqgphblgXyFR1V1UINVmBgx9/4L6LWxOXVYXQJ4RQmWzj2cpUG1XJQN+KVKA6GTipLBX419qUTODO0lQANlh8M2Re9AubcjPUt1+uwOuvfKN17IuVHF6XmKgvnO/NvTdxp7JUJB9o2qCnLa86Nom8t8ci77ZO8G7L286XeNqyv0ilv6GsXReqDKUTmieOm9EyPT5SGhoauhSqaRM9zyvXzB6/PulO8zqMHajfKK/D8r7DDunTc/TRV69YvuiRusUb/M/gqaxNmp1O2tj/dSpD+jXXaZ7HaPjm/zyp/jyFNq0t/WnLe7328qUrhHD41itH7TnykFcGHVH/v/tctOuNDb+59celr01ZtduheyxY/oujq/Lm//WfPf/PfCylb0tzcsdWP65Nzc3jIzUx8XZtam4OAAAAnUZn2Gv6rw+3XvDekvubbzxv6Ac3zblp4OIH6pZUjxlw+6HD9r9rTd+mFXnz/17FHf+Ph/xrske7KIThbYmz6kLo2fZ4KnB97M6xdSF8oy3VlBvYOxFYFMJ2bYkBmaoSJbrGEr0SgdW16cDwRGBJDDQlAn+IgUsSgbNjYGEiMD4GFiUC+8RAmJQ7jp1q0+MoOlAVA2NTG3Fh3Cv4bm1sLbGtnslUBQAAsJGkZ4fluXezznXY0AxxermwqqMM8QzsghkqEzUkZ7CZaVXBGso6qqG0oxoy457z2cPPq7mko5rzTsMoyc0w4vqH5/31iXP6zK///epv/lvPf9/5ysNOmH720K1nzHn9vcNXru6RN/9v/Oz5f2U7HSnJO/4fwpi2vzF3aTrSkomPbcrJAAAAAGyA2Ttd9uhrJ9Y+2m/Kojcv+L8//e8Vf7x91lG7v7H4V08/95PSmlWH5s3/hxd3/n/cJ9IlK3NYFndDTK4LoTE3kKr22/mB1FHvbukAAAAAdAaZ4/GZY+GT0repU7ST8+n8/E3rmT8e+B/ebv6DWxZ95Yjp/cc+vv1l/3pwxz/eO29Zw4HX7XjVbiuvG7Fkm++O+jRv/t9U3Pn/1bm3qU4sib34dV0IXbMCD8detgba9IqBF/bKDaTHvyRugAtjVekTEzJVXRhLjI2BxkRgbqESyzMleuYG0k9WpvGzMuOYlC6RFQAAAIDNLu4OiMfl4/n/1/yj/6279rh0233rl2/3/uSXfnbTiw/0X1O69PJ3Pzju/K9efPMv8+b/Y9fv/P+2eXDe6f0t3UIYVBZCl+QPA5ZVpxYGjIGaknTi3upUXV2SVZ1RHcKerQNLVvX39Pr/Zck1Bh+vSlUVAz17X7emb2vi6qoQBmUHnjxy3i6tiemJQKbxQ6pC+HrraJON/5+uqcbLk41f3jWEr2UFMlUd2zWE1sYqklU9UJm+jkGyqpsqQ9g6K5CpalhlCDMDAJ1U/Fc6IfvBaTNnTR7X0tJ8yiZMxH34VWHipJbmhvEntUyoLNCnCYk+5yxjdEb+mIq98s0z6SWKPvle7/pi0pnfCTZmt5Xej5934mD6fvwuVN42ziHlOXeHJofcf8f8JkLWN6lCQy7dxEPOWQt83ZOYV3/MXxG6ha4zpjWf0nDquOnTTxmc+lts9iGpv/EwU2pbDU5uq+r2+lbEy6PgalkJn3db9cuuZND0E6cOmjZz1sBJJ447rvm45imDhzQ27r7b0KFDGge1jir9t4Oh9muv6sRQ184rclwbcajbl2VVsjk+NSQkJDpb4hsnHf/Y1KvfueqAut3OuW3YD2+6+YS3Dv1Z47Zrz605cr/JbyyelTf/n/rZ8//4qRM/+dPrMxQ6/l8fD/OnHl93mH9sDMwt9vh/faGj+ZkTA3olAnNiYI7D/AAAAHw5xN2RcW9m3Cu99WHfvXPVXn9/7rU9dv8vf7r38NqPr+lyxKj/Nm3np7d6rPzPR76yX978f05xv//fSOv/Z5auH11omf8BsURjofX/k8v8Z9b/n1No/f/kMv+Z9f/nfgHr/8/IBBKb5F3r/wMAAF8Gm2/9/w6X909eICAvQ4fL+ycvEJCXocNl/Iu9QMB6r//fsOrYkRf3/O3XX/32Yfv/aMrLUxb0P/o7e1334wvuD9fd+60V/ebkzf8vKW7+b+F+AAAA2HJMePoPqwefuPtHjz1yZ+k+P1/+8tfeeuq4pnsfWnvp63e9d9WI7Sbmzf/nFjf/3/zr/4VC5//3KhRoKrQwoPX/AAAA6KQKrf/38l++8/DIyp81nv747/90zS5XHrnX6Y9ec/8+E6+t3e+WnUb/5oLd8+b/C4ub/8fTLkpzcsfefFybWtMuJNe0e7s285MBAAAA6BxKQ0NDeZF5c1ZG3fvzt7kyvRToZ6Wzzbjy/VUTLtt34Lh/vD7g4P938+y3f3jyU3ed+ezsZ2ctveLtfd9bljf/X1Tc/D/ndxnlfYcd0qfn6KM/vnrF8kWP1C2uWHf8HwAAANh0it0vAQAAAAAAAAAAAAAAfPHuXvPBb4/Z9oFhv7z79pv3HvV6nx0+3f/ld148b48fPDr7r9c+8dHSvN//hzFt5Qr9/j9e9y/+vmCbnNyx1Y7X/0vfP3i/BTPblixcVhvCjtmByWdO3iqkr83fLztw31EDerQmzkyWuOe5fV5uTRyTDHx/4Fc+aE3smQiMjYskbpcMxKsqftA9EYjLKz6RDMTtsTAZqEgHzu+eGkdJclu9WpPaViXJbfV0TQh1WYHMtrqjJtVGSXKAlyUCmQGenAzEAR6QDpQme7WgW6pXMVATi/6uW6pXAABsseK3wPIwcVJLc2P8Ch9vty/LvY1yliw7I7/akiKbfya9NNkn3+tdX0y6S/K76LprjZeHytYhDM77upqdpaRtlBunlg423TYFhtzRam+lBcolre+mqyg8oqrUiBrGn9QyobzDgQ/tOMuQsg6zDM6b7GRnKW3bpEXUUkRfihhRkdumiC7H+6WhoaFLItceMVgfcnT0iij29/rZ6/wVehVk56nfd9Re25buMuTQXc89ecyQJd/aavFr7+5y2rJTX1rxP+74wdjTe+bN/+uLm/9XZo/rg/TFAObEK+t9uy6EsUWOCAAAAL78bvyv8285/KQlr05cVPb///a3yaUHHl6+dvZts2f94ul7L/z++Ttfu6Hxix45rWXkxLKKm2/9/T7XLz/vzP2bDm8etvru0heX/eXy5v5v5a//36u4+X/cg5U+FJza27EoXv//rLoQ2i6tX58KXB+He2xdCN9oSzXFEqkL6o+OJRpTgevjDpMBscTYptyqusbAwkRgdW06sCgRWBID6b0U14X0rpxLa0PYpS01JrfE1FiiPhE4MAZ6JQINMdCYCHSPgeGJwBvd04GmRGBpDIRJudvq1u7pbQUAALA+0vOs8ty7ITnPW1jWUYaSjjJUd5ShtKMMlR1lKDSKeP+WmKE8cfJKSVam8mStVYla8jLEi+Gvd7/yMoTluTmTBfOajucfZM43KMnNcFq3i8558rth2II39nh05jujG3b45wEPPvPg9MuXn7/y4/MPWf5S3vy/sbj5f3Xubar1JXH+v+76f6nAw7F7v46njveKgRf2yg2kdwwsiZPdCzNVNaVLpCftF8YSw2OgVyIwNQaGJwJjx6QDc3vkBtIz7UzjZ2Uan5QukRUAAACAzS7uIIi7aeL8//gDej9+5a03tCw+b8Cd719//QW9Rjx/85x7nr/oiGdC05srJ7ydN/8fXtz8P7bXLbuxs2NvXuoewh0l63qTCQysSQXifoya+PP4r9aEsFXWDo5MiebqVImKRMPhoarUL9QrklXdVZVaYyDeP/jxB+67uDVxWVUIfbL2vmTaeLYy1UZVMtC3IhWoTgZOKksF4p6fTODO0lQANlhmr2B8QaVPdcmob79cgdffl+WaoMnh5e0DbSdfe7+52lQqkw+k96lmrN/Tllcdm0Te22ORd1tnfLfVe7dlf5FKf0NZuy5UGUonNE8cN6Nlenwk+5eseTbR85z9K9Vi0hvhdTjn8/e2Y5XJDjQmPj4a2y/X/uuwJLPQVt9hh/TpOfroq1csX/RI3eKKortRQPyh8Fl1l9Y/lbV5N7XKkH7NdbrPkyafJ53x30AvT1sIoetTJzQt3PfTZ8/tuu1D2936ySO7Hr7imne/c9+xez691agRVy38cd78v6m4+X9Z4rbNh3FjTqsLoX/Wxl0WN/+IutTnYFYg9Sm5dX4gdcj9xdqCn5wAAACwsWV2d2T2F0xK36ZOCE/Ok/PzN61n/ri/Yni7+Yvt96ufrvrJiwvnfXR63Yxz3j597v4fjn3yhnH/bNjtgbpTX/tf8w46Pm/+P/az5/9dE910/N/xfzYRx//btaXviu6afGDOBu2KzquOTcLx/3Zt6e82x//b5fi/4//tcfy/A47/t2tLf9ryviVN9aUrhDD/Jzvds/yK8be90tRy7bmzRn7z/R82LT7tnuFTfvvQ60tm/vXufnnz/6nFzf+t/9f+on2Z9f/GFlr/b2qh9f/mWP8PAADYpAosNJec5+Wt3peXIbl6X16GDhcI7HCJQev/rff6f8euevzAvW7b83dPlc67+YYDP6q846gh29y04/yJR3742jNr5t//x7z5/5zi5v/x5dAtu/XOsv5frzEFqrokBqZaGBAAAIAtUaEdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyxGvv/9InZC15a8vFPj97n3QsXX3L5QTv3nD/mwXfe6nHwe+8cNnLpC0vH9x63w4g+858vOWbmc7ueG8KktnIlqeIlB1WP7DHwytE/v231zP1vr7nkicp0veXp2x1ycsdWP64NYW7WIzUx8XZt6511gYP3WzCzrDWxrDaEHbMDk8+cvFVr4g+1IfTLDtx31IAerYkzkyXueW6fl1sTxyQD3x/4lQ9aE3umAyXJ7v7P7qnuliS7e3H3EOqyApnuntA9t6pMG6PSgdJkG9fWpNqIgZpY9IqaVBsx0BJLTOoawqCyELokq/pzZaqqLsmq7q5MVdUlWdXplSHsGUIoS1b1XEWqqrLkyB+rSFUVAz17X7emb2tibkUIg7IDTx45b5fWxMmJQKbxH1WE8PXWl0yy8VvKU42XJxu/rDyEr4UQKpIl3itLlahIlvh7WQhbZwUyjR9fFsLMwJdC/PCZkP3gtJmzJo9raWk+ZRMmKtJtVYWJk1qaG8af1DKhMtGnQkqy0mvP+Pxjf2bN7PGtt598r3d9MemydLnyti4PKc+5O3RL733sV3V2Jeuej7z6Y/6K0C10nTGt+ZSGU8dNn37K4NTfYrMPSf3tko6mttXgzrKt+mVXMmj6iVMHTZs5a+CkE8cd13xc85TBQxobd99t6NAhjYNaR5X+uzGGOm/zD3X7sqxKNscHgISERGdLlOZ8ujVu6R/keV/013W0PFS2fUDnTSuys5S0jXJjDHrvzzniz/M9pcMRDc6bOORlGdJxlqF5k4l1WapSWdq+1+VNDrNrKm3bpPF+aWho6FJoO9Tn3s3evG9uwOZdmd50xaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91GD0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//3NHGLw==") 5.75856886s ago: executing program 2 (id=3): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r4}) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f0000000000200000000000000001"]) 5.453949926s ago: executing program 3 (id=4): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x0, 0x80}) 5.000575066s ago: executing program 0 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)={@val={0xa, 0x88a8}, @void, @eth={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "8b6c9a", 0x0, 0x2f, 0xff, @private2, @dev={0xfe, 0x80, '\x00', 0x1e}}}}}}, 0x3e) 4.669077047s ago: executing program 3 (id=7): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 3.461795615s ago: executing program 0 (id=8): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x3, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.645797702s ago: executing program 2 (id=9): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x9}, &(0x7f00000003c0)=0x8) 2.58323816s ago: executing program 0 (id=10): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x54000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r1, 0x0, 0x80000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x100000001, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000003fffffc, 0x8d], 0xeeee8000, 0x2010d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.560805608s ago: executing program 4 (id=5): r0 = io_uring_setup(0x3322, &(0x7f0000000040)={0x0, 0x9813, 0x0, 0x1, 0x2f7}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x7ffffffe) 2.075441522s ago: executing program 2 (id=11): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x20, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000840), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.0505717s ago: executing program 4 (id=12): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f00000000c0)="00ffffffffff", 0x6, 0xc6}]) 1.736002676s ago: executing program 1 (id=13): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.509622869s ago: executing program 4 (id=14): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000380003"], 0x4c}}, 0x0) 1.419559768s ago: executing program 2 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.084786461s ago: executing program 0 (id=16): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$eJzs3U9sHFcdB/DvrNd2bKTEtEkbUKVajVQQEYkdywVzgIAQyqFCVThwthKnsbJxK9tFboXA/Bc3DuVeDr5xAnGPVM5w69XiVITEpSeLQxfNeHa9jtf/asd20s8nmn3vzZt5895vZ97ujBVtgM+tW1fTfJSfd8vra1Ot9bWp4brYSlLmG0mzXlUsJMWHyc1sLvlSubJTudtx3p+fuf3RJ+sfb5aa9VJt39hrv4NZrZeMJxmo050GP1N7d3Zt78CKzgjLgF05+njheLR3WN1W/8fy5eVdd3cewzOg2Pzc3GEsGa0ngOo7QT07NE60c0/A6ml3AAAAAE7AhY1sZCXnT7sfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BRaTVLUv+9fpsV4itEk55IM1etS559qj4rT7gEAAAAAAAAAHEhzr8qXN7KRlZzvlNtF9Tf/V8psu90uV30h72Qpc1nMtaxkNstZzmImk4z1NDS0Mru8vDhZ7ZlczK57ftruu+eN4x42AAAAAAAAADzjvr2t9Mvc2vr7PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAVFMrCZVMvFTn4sjWaSc0mGyu1Wk3928mdEY8/a9oW+qx89oc4AAADAWXJhIxtZyfmqMJK0i+qe/4Xqvv9c3slCljOf5bQyl7vVs4DNu/7G+tpUa31t6mG57Gz3u/89VDeG6vv3garU78iXqy1Gci/z1ZpruZO30srdNLp3/pc7/enfr1+UfSq+Uztgz+7WaTnyP9TpDrc/PdRoj8dYFZHBbkQmOg9vSntH4pDvzuNHmkyj++TnYv8jtWv7xXyw3/FG67SM9W97Yr4t9r2Pnv51qOEcweORuNFz9r2wPRI7d/7K3/784/uthQf37y1d7XsaPU0ej8RUTyRe7EahSFb7zA/PVCQmqkhc6pZv5Qf5Ua5mPG9kMfP5SWaznLmM5/tVbrY+j4vdr56Om9tKb+zziLO6JMa6s+jh+vRKte/5zOeHeSt3M5fXqn83MplvZDrTmel5hy8dYKZtHG6mvfLVOjOS5Hd1ejaUcf1iT1x759yxqq53zVaUnts/Sq83Dxel5pfrTHmMX+371PskPR6JyZ5IPL93JP7ULl+XWgsPFu/Pvn3A471ap+V19JvdPpn31Dz0HgdTni/PddvffnaUdc/3rZus6i526xo76i516/a7Uofq73A7W7pR1b3Yt26qqrvcU9fv+9ZJRBCAIxn92ujQyH9G/jHywcivR+6PvH7ue8PfHH5pKIN/H/xWc2Lg1cZLxV/yQX5W3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHsvTuew9mWwNZ3My05g6YGc4hNj5Apqh/yOfYGjzTmTSOONLOz+ed+nCGkyOeCX/9/eZQTv1NOY5Ms3xPytF8xnbSOAujqDJDpzgrASfh+vLDt68vvfve1+cfzr459+bcwuD09MzEzPRrU9fvzbfmJjZfT7uXwJOw9aHft/rfJ94hAAAAAAAAAAAAYF8n8d8JTnuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNPt1tU0H6XI5MS1ibK8vjbVKpdOfmvLZpJGkuKnSfFhcjObS8Z6mit2O8778zO3P/pk/eOttpqd7ctG/9c+0ihW6yXjSQbq9Ljau3Pk9opuZMqAXekEDk7b/wMAAP//YkoNYg==") statx(0xffffffffffffff9c, &(0x7f0000008380)='./file1\x00', 0x800, 0x10, &(0x7f0000000000)) 948.209908ms ago: executing program 4 (id=17): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x400) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x4, &(0x7f0000000040)={0x15, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 867.23011ms ago: executing program 1 (id=18): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x18080c0, &(0x7f0000000140)={[{@file_umask={'file_umask', 0x3d, 0x53}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "0691aaf6"}}, {@umask={'umask', 0x3d, 0xeb}}, {@dir_umask={'dir_umask', 0x3d, 0x4550}}, {@codepage={'codepage', 0x3d, 'macinuit'}}, {@uid}]}, 0x7, 0x32c, &(0x7f0000001080)="$eJzs3b1PFE0cB/Dv7L1w90B49gGekFgiJFYEsNDYQAyx8R+wMESEIyGsmCgmSmI4rY2xMzGxtLOxMfovaGP8B7SiMFbaEAvHzNu+3O3uvQC3Er6fhLt9m5nfzOzezhyBBRGdWpeXv7w6v69+RAVACcAlwANQA8oA/sdk7d72zuZO0FjPy6ikU6gfAZNStB2ztt1IS6rS6RSWr9bKGIlvo+MhpZRfOx71YyCxUHGEufbbeMCQvTr1/trAIzseTVOv0yXWw+IAB7iP0SLDISKi4tn7v2fvEiN2/O55wIwdh5/0+39ifHNQXByFqtv38P7vmXUpVPv8q3dF8z09hVO977lZYlqeqeeEjJq7CnNmJTpAdJpV6li8+sZm0JhtSmNv0YgdNqFf1+EqomVFWzVvUylz0xx5dc83rOtQUXVY8PAYi+3xj/dc4vtveJ5e3MrHLmISH8QnsSJ8vMB6OP4rS6EaR7ePb3vKNaiJf65DLX1zVKKW0fz9P13IGdcD715HtayHtXyTzLaGkooljcpFtI7ffRfns2p2Kowh+bWCqd18du10qvHUVAvh+i9Me+2pJlpT1TcqQWN27XaQ+1XKkUmd0Ymn4pqYwne8xXJs/O+po2eQfWUmrnKhj7RnRm59yvrIjH5M0A14q6crk7QrqR2d7wlu4iJG7z7Y3VoNgsad4hfcpVJUGB4SW8yJaE9HtUW9x1KhphYqAI4sjN9SytRdZQyiESq6qhdeRlXe3VoVTbN6uCLQDDN0u5bUQj0tZ1XcEgC7xX0i9FP6XphqKMqwq+Q/VW/rLeknpItqAGemKyqxq4ShvCtFStvg9T4KvfpwazXo65OITpio0zF5vehgqAhq3CXM/C82X5nTnzrqxc+ZjchOmcdynM+YAY3p13+6m8GF2WaOE4fdQoc519lzwHRLiR5ciY9as/VtnPgbfyvZ+68yxDI+4wa//yciIiIiIiIiIiIiIiIiIiIiIiIiOml6/WuEfv6cIFni/in8xxtERERERERERERERERERERERERERERERIcTe/4vUNJPjKkW/vzfUhfP/3XPpSCivv0JAAD//4S+Zfs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 817.716067ms ago: executing program 2 (id=19): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x2fe, &(0x7f00000004c0)="$eJzs3U1rE0EcBvBndtNma0tdbUXwIFIN2ItovYiXSMmH8CRqk0JxqagtvuChiicRe/fu0aufQbwogud68iSe60FG5iXZl+xuEsnuJvr8oGGzszP7n8zOzkygWRDRf2u9dfD28nf1JwAXLvDyKuAA8IAagBM46e1u72ztBJ12XkEuTtdNLgGTU/Qds7HdScvqweawfPWuhoXoPiqGlPLat6qDoMrp3i/d+M4z+k5Qt71TJ3oVxZfl2ehZfs4B2CsimImS31LiEId4hMXSwiEiookkzPju2HF+wc7fHQdo2MFEz8Ynbfz/W4dVB1A4mZsaGf91u0qh2v2oTgrXe3oJp9Kd7ioxrax3ifczifezMFdWbHYpBq0qdSzO3OZW0LmwcTdoO3iOphU5bFm/ts2l25UXLYCVlLVpjl5pc5mHiPQZ5byuw4yqw5qJ/yGAWPxLuWcsgPgoPosbwscbtHvzv5oUqpl0S/mJljLxX8wuUdfSV0fB3jaazaYTO+SYPskpewZrQC09uFlnnLVlxr4g8AfFqXMdT+Qytbs0INdSaq41vb0KJyPXciyXqs3mVvAh+1SlEK/FdbGCH3iPVmT+76j4GsjtmWGvEQ0zFOhPXPXOeMtG1Bo2RY8cu18Pnpr9/d2l9ynWs0L/lX9PoxG8wm1cweKDx0/uuEHQua82bgXqctUbvT33FuxG0Jl5AUSTJmUDe+GeOqTWd3B3UCozsNWxFqjuHylJqmOFe1QvK7xe6j4wAe1e3Ubr03gupO60IZb0W0pZYnX2bcdIJlV3a6LyhI0+3PEpUx2abqpJhVn/heuVmpnsqRc/dZ4+5BcBtkSp5ti9FVyYV5oZOYAjI63g5rNXcP1rrr41o15znT0PnBv+jL6N8x8hWviCm/z+n4iIiIiIiIiIiIiIiIiIiIiIiIho2pTx/xJV15GIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaNqtezC/e43u838x3PN/k49icc1Pgo/l+b/72+Dzf4mK9ycAAP//m053Mg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1d0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80000, 0x0) 663.416951ms ago: executing program 3 (id=20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1) 290.925335ms ago: executing program 0 (id=21): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000280)=[{r1, 0xd142}], 0x1, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 68.389063ms ago: executing program 1 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 68.156282ms ago: executing program 2 (id=23): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x40180, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000540)={{}, 0x9e}) 0s ago: executing program 3 (id=24): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f00000000c0)="00ffffffffff", 0x6, 0xc6}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 158.236588][ T5779] cgroup: Unknown subsys name 'net' [ 158.383778][ T5779] cgroup: Unknown subsys name 'cpuset' [ 158.401145][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 163.142619][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.149526][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.890247][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 168.224791][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.234546][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.248755][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.257853][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.277405][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.288309][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.298803][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.307003][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.314817][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.325779][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.327677][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.337138][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.350154][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.359464][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.368560][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.377345][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.390690][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.391529][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.409961][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.410194][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.425938][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.445813][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.460715][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.473604][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.484520][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.585445][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 169.792977][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 170.123654][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 170.405005][ T5806] Bluetooth: hci0: command tx timeout [ 170.499999][ T5806] Bluetooth: hci3: command tx timeout [ 170.505929][ T5802] Bluetooth: hci2: command tx timeout [ 170.511627][ T5811] Bluetooth: hci1: command tx timeout [ 170.610526][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 170.630288][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.638004][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.649060][ T5798] bridge_slave_0: entered allmulticast mode [ 170.658524][ T5798] bridge_slave_0: entered promiscuous mode [ 170.671848][ T5811] Bluetooth: hci4: command tx timeout [ 170.690782][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.699417][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.707047][ T5798] bridge_slave_1: entered allmulticast mode [ 170.716918][ T5798] bridge_slave_1: entered promiscuous mode [ 170.837272][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 170.905721][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.939645][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.098952][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.106495][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.114348][ T5807] bridge_slave_0: entered allmulticast mode [ 171.123463][ T5807] bridge_slave_0: entered promiscuous mode [ 171.239860][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.248416][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.256133][ T5807] bridge_slave_1: entered allmulticast mode [ 171.265505][ T5807] bridge_slave_1: entered promiscuous mode [ 171.339297][ T5798] team0: Port device team_slave_0 added [ 171.520897][ T5798] team0: Port device team_slave_1 added [ 171.542353][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.554924][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.562362][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.570202][ T5799] bridge_slave_0: entered allmulticast mode [ 171.579411][ T5799] bridge_slave_0: entered promiscuous mode [ 171.637806][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.681397][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.689331][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.697059][ T5799] bridge_slave_1: entered allmulticast mode [ 171.706039][ T5799] bridge_slave_1: entered promiscuous mode [ 171.864562][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.873173][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.900120][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.944200][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.952564][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.960508][ T5804] bridge_slave_0: entered allmulticast mode [ 171.969957][ T5804] bridge_slave_0: entered promiscuous mode [ 172.101068][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.110119][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.136675][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.155929][ T5807] team0: Port device team_slave_0 added [ 172.163008][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.173590][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.182109][ T5804] bridge_slave_1: entered allmulticast mode [ 172.190360][ T5804] bridge_slave_1: entered promiscuous mode [ 172.208228][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.254064][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.262513][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.270168][ T5808] bridge_slave_0: entered allmulticast mode [ 172.279017][ T5808] bridge_slave_0: entered promiscuous mode [ 172.305334][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.312808][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.321114][ T5808] bridge_slave_1: entered allmulticast mode [ 172.329300][ T5808] bridge_slave_1: entered promiscuous mode [ 172.347698][ T5807] team0: Port device team_slave_1 added [ 172.396306][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.447629][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.488462][ T5811] Bluetooth: hci0: command tx timeout [ 172.565040][ T5811] Bluetooth: hci1: command tx timeout [ 172.570772][ T5802] Bluetooth: hci2: command tx timeout [ 172.576021][ T5806] Bluetooth: hci3: command tx timeout [ 172.589879][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.636327][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.643510][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.670592][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.690566][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.724924][ T5811] Bluetooth: hci4: command tx timeout [ 172.793096][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.800595][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.827250][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.846415][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.861606][ T5799] team0: Port device team_slave_0 added [ 172.900739][ T5804] team0: Port device team_slave_0 added [ 172.918276][ T5798] hsr_slave_0: entered promiscuous mode [ 172.928119][ T5798] hsr_slave_1: entered promiscuous mode [ 172.987841][ T5799] team0: Port device team_slave_1 added [ 173.000387][ T5804] team0: Port device team_slave_1 added [ 173.171417][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.178831][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.206099][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.225812][ T5808] team0: Port device team_slave_0 added [ 173.285143][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.292240][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.319833][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.336276][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.343728][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.370432][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.390032][ T5808] team0: Port device team_slave_1 added [ 173.443590][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.451021][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.477664][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.589444][ T5807] hsr_slave_0: entered promiscuous mode [ 173.599586][ T5807] hsr_slave_1: entered promiscuous mode [ 173.607251][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 173.613097][ T5807] Cannot create hsr debugfs directory [ 173.672785][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.680896][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.707135][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.725768][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.732854][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.760145][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.071017][ T5799] hsr_slave_0: entered promiscuous mode [ 174.079550][ T5799] hsr_slave_1: entered promiscuous mode [ 174.087208][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 174.093356][ T5799] Cannot create hsr debugfs directory [ 174.109944][ T5804] hsr_slave_0: entered promiscuous mode [ 174.119584][ T5804] hsr_slave_1: entered promiscuous mode [ 174.127659][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 174.133670][ T5804] Cannot create hsr debugfs directory [ 174.242964][ T5808] hsr_slave_0: entered promiscuous mode [ 174.252473][ T5808] hsr_slave_1: entered promiscuous mode [ 174.260911][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 174.267497][ T5808] Cannot create hsr debugfs directory [ 174.564968][ T5811] Bluetooth: hci0: command tx timeout [ 174.644948][ T5811] Bluetooth: hci1: command tx timeout [ 174.647491][ T5806] Bluetooth: hci3: command tx timeout [ 174.650625][ T5802] Bluetooth: hci2: command tx timeout [ 174.811068][ T5802] Bluetooth: hci4: command tx timeout [ 175.240041][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.299242][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.328270][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.385593][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.479472][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.544520][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.570924][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.590792][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.737842][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.818501][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.843476][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.878907][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.906953][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.936665][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.997625][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.071565][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.220841][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.286934][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.320954][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.362427][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.645396][ T5802] Bluetooth: hci0: command tx timeout [ 176.726933][ T5802] Bluetooth: hci2: command tx timeout [ 176.732887][ T5811] Bluetooth: hci3: command tx timeout [ 176.739089][ T5802] Bluetooth: hci1: command tx timeout [ 176.895395][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.903623][ T5806] Bluetooth: hci4: command tx timeout [ 176.912669][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.089596][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.130590][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.149266][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.190314][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.197863][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.302797][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.310503][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.325907][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.333240][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.348177][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.355724][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.412392][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.464164][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.624228][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.631985][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.668977][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.676513][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.722303][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.738010][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.877103][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.884810][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.905028][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.912356][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.965190][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.086093][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.212606][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.220466][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.399153][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.406789][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.668901][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.751245][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.100721][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.154030][ T5798] veth0_vlan: entered promiscuous mode [ 180.242536][ T5798] veth1_vlan: entered promiscuous mode [ 180.268858][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.361908][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.642984][ T5798] veth0_macvtap: entered promiscuous mode [ 180.688489][ T5804] veth0_vlan: entered promiscuous mode [ 180.765648][ T5798] veth1_macvtap: entered promiscuous mode [ 180.838468][ T5804] veth1_vlan: entered promiscuous mode [ 180.883987][ T5807] veth0_vlan: entered promiscuous mode [ 180.926586][ T5808] veth0_vlan: entered promiscuous mode [ 180.972800][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.030362][ T5808] veth1_vlan: entered promiscuous mode [ 181.067270][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.091822][ T5807] veth1_vlan: entered promiscuous mode [ 181.211524][ T3635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.279623][ T5804] veth0_macvtap: entered promiscuous mode [ 181.307006][ T3635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.389452][ T3635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.427762][ T5804] veth1_macvtap: entered promiscuous mode [ 181.441128][ T3635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.464085][ T5807] veth0_macvtap: entered promiscuous mode [ 181.479345][ T5808] veth0_macvtap: entered promiscuous mode [ 181.518235][ T5807] veth1_macvtap: entered promiscuous mode [ 181.540392][ T5808] veth1_macvtap: entered promiscuous mode [ 181.620254][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.680046][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.711988][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.743833][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.794132][ T3635] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.828786][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.855645][ T3635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.864848][ T3635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.921671][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.936221][ T3635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.981311][ T3635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.039860][ T3635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.096748][ T3635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.167908][ T4097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.216411][ T4097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.268383][ T4097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.321032][ T5799] veth0_vlan: entered promiscuous mode [ 182.345224][ T4097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.382980][ T4097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.441290][ T5799] veth1_vlan: entered promiscuous mode [ 182.734604][ T5799] veth0_macvtap: entered promiscuous mode [ 182.840931][ T5799] veth1_macvtap: entered promiscuous mode [ 182.977499][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.078360][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.202257][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.275448][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.284584][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.339198][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.611953][ T3716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.622318][ T3716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.837645][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.848090][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.132546][ T3716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.142975][ T3716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.196642][ T4878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.205589][ T4878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.282716][ T5798] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.385767][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.393801][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.421575][ T3975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.430371][ T3975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.581466][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.589955][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.702080][ T4878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.715935][ T4878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.109363][ T3635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.120412][ T3635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.584205][ T3635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.592495][ T3635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.623941][ T6012] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 191.961324][ T795] IPVS: starting estimator thread 0... [ 191.988516][ T6017] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 191.996471][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 192.085429][ T6019] IPVS: using max 240 ests per chain, 12000 per kthread [ 192.496169][ T6024] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14'. [ 193.019605][ T6028] loop0: detected capacity change from 0 to 1024 [ 193.063948][ T6028] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 193.165268][ T6033] loop1: detected capacity change from 0 to 64 [ 193.176977][ T6033] ======================================================= [ 193.176977][ T6033] WARNING: The mand mount option has been deprecated and [ 193.176977][ T6033] and is ignored by this kernel. Remove the mand [ 193.176977][ T6033] option from the mount to silence this warning. [ 193.176977][ T6033] ======================================================= [ 193.254476][ T6034] loop2: detected capacity change from 0 to 64 [ 193.299574][ T6034] hfs: unable to locate alternate MDB [ 193.305371][ T6034] hfs: continuing without an alternate MDB [ 193.384985][ T795] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 193.395417][ T6033] hfs: bad catalog entry type 65535 [ 193.441971][ T6036] input: syz0 as /devices/virtual/input/input5 [ 193.574891][ T795] usb 5-1: Using ep0 maxpacket: 32 [ 193.609742][ T795] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 193.619620][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.682390][ T795] usb 5-1: config 0 descriptor?? [ 193.943705][ T795] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 193.976281][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.987285][ T6045] QAT: Device 158 not found [ 194.003986][ T795] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 194.012022][ T795] usb 5-1: media controller created [ 194.098513][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.140748][ T6030] ===================================================== [ 194.148562][ T6030] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 194.162108][ T6030] _copy_to_user+0xcc/0x120 [ 194.168901][ T6030] i2cdev_ioctl_smbus+0x586/0x660 [ 194.174131][ T6030] i2cdev_ioctl+0xa14/0xf40 [ 194.178977][ T6030] __se_sys_ioctl+0x23c/0x400 [ 194.183874][ T6030] __x64_sys_ioctl+0x97/0xe0 [ 194.188726][ T6030] x64_sys_call+0x18a7/0x3e70 [ 194.193720][ T6030] do_syscall_64+0xd9/0xf80 [ 194.198572][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.204801][ T6030] [ 194.207201][ T6030] Uninit was stored to memory at: [ 194.212605][ T6030] __i2c_smbus_xfer+0x2545/0x2f40 [ 194.218164][ T6030] i2c_smbus_xfer+0x31d/0x4d0 [ 194.223081][ T6030] i2cdev_ioctl_smbus+0x4a1/0x660 [ 194.228492][ T6030] i2cdev_ioctl+0xa14/0xf40 [ 194.233195][ T6030] __se_sys_ioctl+0x23c/0x400 [ 194.238239][ T6030] __x64_sys_ioctl+0x97/0xe0 [ 194.243351][ T6030] x64_sys_call+0x18a7/0x3e70 [ 194.248589][ T6030] do_syscall_64+0xd9/0xf80 [ 194.253551][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.265904][ T6030] [ 194.268540][ T6030] Local variable msgbuf1.i created at: [ 194.274101][ T6030] __i2c_smbus_xfer+0x891/0x2f40 [ 194.281600][ T6030] i2c_smbus_xfer+0x31d/0x4d0 [ 194.286538][ T6030] [ 194.288940][ T6030] Bytes 0-1 of 2 are uninitialized [ 194.294140][ T6030] Memory access of size 2 starts at ffff88804d853cf6 [ 194.301098][ T6030] Data copied to user address 0000200000000040 [ 194.307545][ T6030] [ 194.310290][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.4.17 Not tainted syzkaller #0 PREEMPT(none) [ 194.319697][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.330255][ T6030] ===================================================== [ 194.337606][ T6030] Disabling lock debugging due to kernel taint [ 194.343950][ T6030] Kernel panic - not syncing: kmsan.panic set ... [ 194.350589][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.4.17 Tainted: G B syzkaller #0 PREEMPT(none) [ 194.361896][ T6030] Tainted: [B]=BAD_PAGE [ 194.366227][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.376412][ T6030] Call Trace: [ 194.379973][ T6030] [ 194.383033][ T6030] __dump_stack+0x26/0x30 [ 194.387700][ T6030] dump_stack_lvl+0x53/0x270 [ 194.392470][ T6030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 194.398558][ T6030] dump_stack+0x1e/0x25 [ 194.402877][ T6030] vpanic+0x435/0xd30 [ 194.407136][ T6030] panic+0x15d/0x160 [ 194.411240][ T6030] kmsan_report+0x31c/0x320 [ 194.415912][ T6030] ? kmsan_internal_check_memory+0x1e1/0x230 [ 194.422578][ T6030] ? kmsan_copy_to_user+0xf1/0x190 [ 194.427934][ T6030] ? _copy_to_user+0xcc/0x120 [ 194.432755][ T6030] ? i2cdev_ioctl_smbus+0x586/0x660 [ 194.438195][ T6030] ? i2cdev_ioctl+0xa14/0xf40 [ 194.443025][ T6030] ? __se_sys_ioctl+0x23c/0x400 [ 194.448111][ T6030] ? __x64_sys_ioctl+0x97/0xe0 [ 194.453013][ T6030] ? x64_sys_call+0x18a7/0x3e70 [ 194.458012][ T6030] ? do_syscall_64+0xd9/0xf80 [ 194.462870][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.469169][ T6030] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 194.474619][ T6030] ? __i2c_transfer+0x11d0/0x3110 [ 194.479807][ T6030] ? kmsan_get_metadata+0xfb/0x160 [ 194.485112][ T6030] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 194.491695][ T6030] ? kmsan_get_metadata+0xfb/0x160 [ 194.497354][ T6030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 194.503371][ T6030] ? __i2c_smbus_xfer+0x1ed7/0x2f40 [ 194.508805][ T6030] ? kmsan_get_metadata+0xfb/0x160 [ 194.514197][ T6030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 194.520271][ T6030] kmsan_internal_check_memory+0x1e1/0x230 [ 194.526267][ T6030] kmsan_copy_to_user+0xf1/0x190 [ 194.531380][ T6030] _copy_to_user+0xcc/0x120 [ 194.536116][ T6030] i2cdev_ioctl_smbus+0x586/0x660 [ 194.541624][ T6030] i2cdev_ioctl+0xa14/0xf40 [ 194.546305][ T6030] ? kmsan_get_shadow_origin_ptr+0x18/0xb0 [ 194.552307][ T6030] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 194.557511][ T6030] __se_sys_ioctl+0x23c/0x400 [ 194.562347][ T6030] __x64_sys_ioctl+0x97/0xe0 [ 194.567095][ T6030] x64_sys_call+0x18a7/0x3e70 [ 194.571961][ T6030] do_syscall_64+0xd9/0xf80 [ 194.576620][ T6030] ? clear_bhb_loop+0x40/0x90 [ 194.581429][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.587477][ T6030] RIP: 0033:0x7f5cb9b8f749 [ 194.592102][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.611953][ T6030] RSP: 002b:00007f5cbaa9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.620539][ T6030] RAX: ffffffffffffffda RBX: 00007f5cb9de5fa0 RCX: 00007f5cb9b8f749 [ 194.628619][ T6030] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004 [ 194.636710][ T6030] RBP: 00007f5cb9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 194.644788][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.652904][ T6030] R13: 00007f5cb9de6038 R14: 00007f5cb9de5fa0 R15: 00007ffdee82d9f8 [ 194.661117][ T6030] [ 194.664620][ T6030] Kernel Offset: disabled [ 194.669000][ T6030] Rebooting in 86400 seconds..