last executing test programs: 46m12.405410948s ago: executing program 32 (id=34): unshare(0x60600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 45m41.89912914s ago: executing program 33 (id=189): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) 45m37.136251727s ago: executing program 34 (id=207): close(0x3) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 43m14.471327124s ago: executing program 35 (id=1254): socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 42m32.106822949s ago: executing program 36 (id=1435): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_int(r2, &(0x7f0000000000)=0x5, 0x12) 42m5.575274883s ago: executing program 37 (id=1534): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x100, @empty}, 0x1c) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x10d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 41m41.546786101s ago: executing program 38 (id=1556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="9b2268", 0x3}], 0x1, &(0x7f0000000740)}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004050) 40m1.660274222s ago: executing program 9 (id=2282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 40m0.659499724s ago: executing program 9 (id=2293): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x414, &(0x7f0000000080)=ANY=[], 0x1, 0x2cb, &(0x7f0000001280)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x708d2, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4"], 0xc, 0x0, &(0x7f0000000000)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0xe, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "05000000000000005f9527ad503ff4ad351e4bd845a00000000000000053dd32", [0x1ca, 0xffffffffffffffff]}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 39m59.765096816s ago: executing program 9 (id=2309): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x800, 0x3, 0x2b2}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) 39m58.74089904s ago: executing program 9 (id=2311): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x97ef, &(0x7f0000012f40)="$eJzs3QWcrWWhsP3ZsIFNhyBYgJSYpIQo0qGIkqKEdEgKiIDSoYQKioAKCijd3d1Id3d3d3y/DRvQ7QXH837nPfByXdfPPWtWzJp73f/nfpw1z7DWUvMtNtfAwDgDb/X26budt/udyy0+5kLrH7/r4Bv23mnhR4ZdPPJbJ+POMex0zmGncw0MDAwadj+D3rps8OzHHT/CwOCBof97tzFGHW2EMQYGRht2dtj9DMz81snoB7x9uzeGiwc66dBvt+Nb/95szKF3MvSTZZZ/bZ2BgYEh//T1Q8c17b89UGlLzTn/fO9aveM2wrCrB7173Zung9/6N/p+AwOj7zPw3tvH0NuO9E9f+7/Z0O85zuQDS9z5AXzv/+daas75FxzOf+haHHHYZTMPXePDr0Fjw2/nOy225kPDpnDQsIkb/E/r5YPY7v+PWmrO+RYaeO91PLDwvJs9+Mab+83B8wwMDJ53YGDwfAMDg+f/oD3qf6YPdOOrqqqqD6Q555ph6HP2EYb7eWDI2z/X0s+FF7063b0DA4MXfut54uDl334uWFVVVVVVVVUfzuaca4a54fn/OO/3/H/SU7cd9/2f/4/yATySqqqqqqqqqnqvFpxzrhmGPtcf7vn/RO/3/P/Jhw/f/62//Z9j5re+6vUP9kFUVVVVVVVV1fs234L4/H/S93v+f8lxk17e8/+qqqqqqqqq/3da9I033tjin15nb9jFU799/ZvP/wcG/8vz/9MfuH3ZD2zAVVVVVVVVVfXf7vXHTjnj3dd8n3hguNd7f7NhvxcYdNRZV175gQ30w9Ggf/97iC0/6DH9/22o85BDJh0YWGeJD3oo9QH0/8xr1df/lfJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Hvcfz/ndf/P/2Yld5+L/jPTTnDjae8+5Vvvvf/4IUXfGyrD2joH0Qf1eP/A2sMGhgY5jvOGgMDAwvPuejiUw8MDJxy4wxTTjHwznWzDL1utvFGfPMN4t/+z0TmHfef7m3Edz/dcrK3ToduKAPjv3MfR715/wu+se+Ig4YbxD817gn777/6Ui/MOPzpVO/9OEZ457Mxj3/47f+WZYThbjTkPb747ft/+7EM7zxs7FMPHfs0G6693jQbbLLpl9dYe4XVVlltlXVmnX6m6WacddaZZppm1TXWWmXatz6+15xN+ubHucflcfzLnI0x/Jw9Nuc/z9nwj+295mzS95+zN+9xt4uHfPPtORv835yzud9/ziZdY9g3GneOkQaWf3NuBg0MjDvPSAMbDz0z3SgDA+POO+y2Ew297dfHG2FgYJd3H+igYe8o8tZtBm059DZLzbfYXG/tpgYG3j19t/d4P/uRh418jmGncw47neutbzPOwLub4uDZjzt+hKFz8S/TMcaoo40wxsDAaMPODrufgVnfOhnt1Ldv9x7vsz7cQN98mZUd3/r3ZmMODAyMPvSTiVc4fbuhU/+/8D7t/0f///9vXrMMemd7HDTs37DbvOU15/wLvvu93pyGOYbtLYZeNvNQk//ht7b/l/5tvJMOGZj0fcb7Pq+L82a0fa11ygRb/0+9Lg6Nd6L3Ge/7vI7ve453yXv3fOitu/ofG+9w+7qF3vw4x3+yrxt4/33diHQHq1z2meH3dd9+7yH+y+7y7Tka/p2K3mtfN9Fek2w59P7neP993UJDxz7Sv+zrRhgYGHfut/d1Q3d88400sMvQM9MPPTP/SAMHDT0zw5tnRh04a+iZr6y07lorD71ggX/fDqYe9C9/oAnrbL7h1tmgf3rsg4b7+87Bb52Ovt/b7+H0HvvNQcMe1n+5r6Dtdpz3Ge/7vP8UzvPQy1Y+esgE/1PvP03jHfL+432v98t+z/Hu/Pzpd/4Pj/eddTbSP03XAv/JOpv0X9fZ0Ic44j+tjP/057CV4fZvfT7RO/e20eYPv/MzxUjD3e9/9TPFAu+/zsZZY7iv22GfgUHvNzfz/ydz8+l/2wdt9c9z85/+vDX15G9dP+L7zM0osy431dtzM/J/c27m/+/OzRwDI/7r3AwemHdgYGCKYfuH+f6TuZno/efmP91uRoPbv/X5Ku9cNM9Oh1zw9twMPxf/1dzM99+dm0nf2W6mePO6yUYYGHnkgY1X2HDD9ad76+PbZ6d/6+P7r8F5/pO5HOd/Zi4/Ofi95vLdTXWMey/f779Yg/+2T3/7/uf5787lwDtzObDG8IulPqz1+z93+bvL313+7vJ3l7+7/MW9x/H/d17/f49xZtt12C83Rrp8kgm3/6DH+wH3kT7+P8z3X47/bz/hJJePMPDOde97fPat23woj8/O/NbJ6Ae8fbvhjw/yQN/7+Ow+s8687f/S8dn/o95eq//B7+Ha/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvcfx/2nf/juAB6Zb5OlhB0JHemSbpRf5oMf7AfeRPv4/zPdfjv8vsvQ2j4ww8M5173v8/63bOI7/3/3KfDt/mI//v71WO/5f/0X5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+49zj+P8fbfwdw+OF7bvr23wNcO+6Op3zQ4/2A+6ge/+/9/721/3eXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLG3b8f2C4t7f8XtsFBsf//9/uPfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/7+ePWfyXyh+z+P8gf8zi/8P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/KH/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+P88cs/mvmj1n818ofs/ivPTAw4gc0og91Fv91Wv+YxX/d/DGL/3r5Yxb/n+SPWfzXzx+z+G+QP2bx3zB/zOL/0/wxi/9G+WMW/5/lj1n8N84fs/hvkj9m8d80f8zi//P8MYv/L/LHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/Mn/M4v+r/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P4/zp/zOL/m/wxi/9v88cs/rvkj1n8d80fs/j/Ln/M4v/7/DGL/275Yxb/P+SPWfx3zx+z+O+RP2bx3zN/zOL/x/wxi/+f8scs/n/OH7P475U/ZvHfO3/M4v+X/DGL/1/zxyz+++SPWfz3zR+z+O+XP2bx/1v+mMX/7/ljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf8f+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jf8R/6r/h/aVgf1iz+d7b+MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/0ED+mMV/UP6YxX+E/DGL/4j5Yxb/wfljFv+R8scs/iPnj1n8R8kfs/gPyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4v+x/DGL//j5Yxb/CfLHLP4fzx+z+E+YP2bxnyh/zOL/ifwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi//E+WMW/0nyxyz+k+aPWfw/mz9m8Z/sbf8hH9C4PqRZ/Cdv/WMW/ynyxyz+U+aPWfynyh+z+H8uf8ziP3X+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+v5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/2v5Yxb/2fLHLP5fzx+z+H8jf8ziP3v+mMX/m/ljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfy/lT9m8f92/pjFf6H8MYv/d/LHLP4L549Z/L+bP2bx/17+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/37+mMV/qfwxi/8P8scs/j/MH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/j/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/j/OH/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/j/JH/M4r9+/pjFf4P8MYv/hvljFv+f5o9Z/DfKH7P4/yx/zOK/cf6YxX+T/DGL/6b5Yxb/n+ePWfx/kT9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf+X+WMW/1/lj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/1/ljFv/f5I9Z/H+bP2bx3yV/zOK/a/6Yxf93+WMW/9/nj1n8d8sfs/j/IX/M4r97/pjFf4/8MYv/nvljFv8/5o9Z/P+UP2bx/3P+mMV/r/wxi//e+WMW/7/kj1n8/5o/ZvHfJ3/M4r9v/pjFf7/8MYv/3/LHLP5/zx+z+O+fP2bxPyB/zOJ/4L/63/+/Pq4PaRb/g1r/mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5YxL/N8v/35P4D7o0f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lPzJdaPF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj0n83/w0/3/P4j8of8ziP0L+mMV/xPwxi//g/DGL/0j5Yxb/kfPHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hl/oPf43KL/zhy//fK4j9u/pjFf7z8MYv/x/LHLP7j549Z/CfIH7P4fzx/zOI/Yf6YxX+i/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+E+ePWfwnyR+z+E+aP2bx/2z+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+H8uf8ziP3X+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/KfJH7P4T5s/Nui83UcaGBj4yPtPlz9mWf/T549Z/GfIH7P4z5g/ZvH/av6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+WP2bxny1/zOL/9fwxi/838scs/rPnj1n8v5k/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/W/ljFv9v549Z/BfKH7P4fyd/zOK/cP6Yxf+7+WMW/+/lj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/+/nj1n8l8ofs/j/IH/M4v/D/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4/yh/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/j/PHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/T/LHLP7r549Z/DfIH7P4b5g/ZvH/af6YxX+j/DGL/8/yxyz+G+ePWfw3yR+z+G+aP2bx/3n+mMX/F/ljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx/mT9m8f9V/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8f50/ZvH/Tf6Yxf+3+WMW/13yxyz+u+aPWfx/lz9m8f99/pjFf7f8MYv/H/LHLP67549Z/PfIH7P475k/ZvH/Y/6Yxf9P+WMW/z/nj1n898ofs/jvnT9m8f9L/pjF/6/5Yxb/ffLHLP775o9Z/PfLH7P4/y1/zOL/9/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4v+P/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t6D/kf29cH9Is/re1/jGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838sck/iMO5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8sfs/iPnz9m8Z8gf8zi//H8MYv/hPljFv+J8scs/p/IH7P4fzJ/zOL/qfwxi/+n88cs/p/JH7P4T5w/ZvGfJH/M4j9p/pjF/7P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v+5/DGL/9T5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/mj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/lj1n8Z8sfs/h/PX/M4v+N/DGL/+z5Yxb/b+aPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/Vv6Yxf/b+WMW/4Xyxyz+38kfs/gvnD9m8f9u/pjF/3v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF//v5Yxb/pfLHLP4/yB+z+P8wf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P8ofs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOL/4/wxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOL/k/wxi//6+WMW/w3yxyz+G+aPWfx/mj9m8d8of8zi/7P8MYv/xvljFv9N8scs/pvmj1n8f54/ZvH/Rf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv9f5o9Z/H+VP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/X+ePWfx/kz9m8f9t/pjFf5f8MYv/rvljFv/f5Y9Z/H+fP2bx3y1/zOL/h/wxi//u+WMW/z3yxyz+e+aPWfz/mD9m8f9T/pjF/8/5Yxb/vfLHLP57549Z/P+SP2bx/2v+mMV/n/wxi/+++WMW//3yxyz+f8sfs/j/PX/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+P8jf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyT+gwfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5Y9Z/MfPH7P4T5A/ZvH/eP6YxX/C/DGL/0T5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfwnzh+z+E+SP2bxnzR/zOL/2fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/1z+mMV/6vwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/NH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/1/LHLP6z5Y9Z/L+eP2bx/0b+mMV/9vwxi/8388cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H8rf8zi/+38MYv/QvljFv/v5I9Z/BfOH7P4fzd/zOL/vfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL//fwxi/9S+WMW/x/kj1n8f5g/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv8f5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8f9x/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8f9J/pjFf/38MYv/BvljFv8N88cs/j/NH7P4b5Q/ZvH/Wf6YxX/j/DGL/yb5Yxb/TfPHLP4/zx+z+P8if8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/y/zxyz+v8ofs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+v88cs/r/JH7P4/zZ/zOK/S/6YxX/X/DGL/+/yxyz+v88fs/jvlj9m8f9D/pjFf/f8MYv/HvljFv8988cs/n/MH7P4/yl/zOL/5/wxi/9e+WMW/73zxyz+f8kfs/j/NX/M4r9P/pjFf9/8MYv/fvljFv+/5Y9Z/P+eP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8/5E/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljEv+RBvLHLP6D8scs/iPkj1n8R8wfs/gPzh+z+I+UP2bxHzl/zOI/Sv6YxX9I/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW/4/lj1n8x88fs/hPkD9m8f94/pjFf8L8MYv/RPljFv9P5I9Z/D+ZP2bx/1T+mMX/0/ljFv/P5I9Z/CfOH7P4T5I/ZvGfNH/M4v/Z/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvH/XP6YxX/q/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+X80fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi//X8scs/rPlj1n8v54/ZvH/Rv6YxX/2/DGL/zfzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5DwwM+feLLP7z549Z/BfIH7P4L5g/ZvH/Vv6Yxf/b+WMW/4Xyxyz+38kfs/gvnD9m8f9u/pjF/3v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF//v5Yxb/pfLHLP4/yB+z+P8wf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P8ofs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOL/4/wxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOL/k/wxi//6+WMW/w3yxyz+G+aPWfx/mj9m8d8of8zi/7P8MYv/xvljFv9N8scs/pvmj1n8f54/ZvH/Rf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv9f5o9Z/H+VP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/X+ePWfx/kz9m8f9t/pjFf5f8MYv/rvljFv/f5Y9Z/H+fP2bx3y1/zOL/h/wxi//u+WMW/z3yxyz+e+aPWfz/mD9m8f9T/pjF/8/5Yxb/vfLHLP57549Z/P+SP2bx/2v+mMV/n/wxi/+++WMW//3yxyz+f8sfs/j/PX/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+P8jf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyT+Iw/kj1n8B+WPWfxHyB+z+I+YP2bxH5w/ZvEfKX/M4j9y/pjFf5T8MYv/kPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fyx+z+I+fP2bxnyB/zOL/8fwxi/+E+WMW/4nyxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/hPnD9m8Z8kf8ziP2n+mMX/s/ljFv/J8scs/pPnj1n8p8gfs/hPmT9m8Z8qf8zi/7n8MYv/1PljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/L+aP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/r+WPWfxnyx+z+H89f8zi/438MYv/7PljFv9v5o9Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f9W/pjF/9v5Yxb/pUbKn7L4f6f1j1n8F84fs/h/N3/M4v+9/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v/9/DGL/1L5Yxb/H+SPWfx/mD9m8V86f+wj6j9oOOuRl8kf+4j6v9k/r/9l88cs/svlj1n8f5Q/ZvFfPn/M4r9C/pjFf8X8MYv/Svljg84bNGxmPtr+K+ePWdb/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8f9x/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8f9J/pjFf/38MYv/BvljFv8N88cs/j/NH7P4b5Q/ZvH/Wf6YxX/j/DGL/yb5Yxb/TfPHLP4/zx+z+P8if8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/y/zxyz+v8ofs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+v88cs/r/JH7P4/zZ/zOK/S/6YxX/X/DGL/+/yxyz+v88fs/jvlj9m8f9D/pjFf/f8MYv/HvljFv8988cs/n/MH7P4/yl/zOL/5/wxi/9e+WMW/73zxyz+f8kfs/j/NX/M4r9P/pjFf9/8MYv/fvljFv+/5Y9Z/P+eP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8/5E/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/Ayr/hwe/1zUjD3fe4v+gyv8/z+L/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n8x8YFS6z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf5SB/DGL/6D8MYv/CPljFv8R88cs/oPzxyz+I+WPWfxHzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83/2EN+ZdzFv/x8scs/h/LH7P4j58/ZvGfIH/M4v/x/DGL/4T5Yxb/ifLHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+E+cP2bxnyR/zOI/af6Yxf+z+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/ufwxi//U+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8v5o/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv+v5Y9Z/GfLH7P4fz1/zOL/jfwxi//s+WMW/2/mj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/1b+mMX/2/ljFv+F8scs/t/JH7P4L5w/ZvH/bv6Yxf97+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6Yxf/7+WMW/6Xyxyz+P8gfs/j/MH/M4r90/pjFf5n8MYv/svljFv/l8scs/j/KH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/+P8MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8zi/5P8MYv/+vljFv8N8scs/hvmj1n8f5o/ZvHfKH/M4v+z/DGL/8b5Yxb/TfLHLP6b5o9Z/H+eP2bx/0X+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX879G+LsPhvnzZm8f9l/pjF/1f5Yxb/HfLHLP475o9Z/Hd6y/+1Nz6ocX1Is/jv3PrHLP6/zh+z+P8mf8zi/9v8MYv/LvljFv9d88cs/r/LH7P4/z5/zOK/W/6Yxf8P+WMW/93zxyz+e+SPWfz3zB+z+P8xf8zi/6f8MYv/n/PHLP575Y9Z/PfOH7P4/yV/zOL/1/wxi/8++WMW/33zxyz+++WPWfz/lj9m8f97/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T/X6v/GFu97tcX/PKv/f5HF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8f9H/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj0n8hwzkj1n8B+WPWfxHyB+z+I+YP2bxH5w/ZvEfKX/M4j9y/pjFf5T8MYv/kPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fyx+z+I+fP2bxnyB/zOL/8fwxi/+E+WMW/4nyxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/hPnD9m8Z8kf8ziP2n+mMX/s/ljFv/J8scs/pPnj1n8p8gfs/hPmT9m8Z8qf8zi/7n8MYv/1PljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/L+aP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/r+WPWfxnyx+z+H89f8zi/438MYv/7PljFv9v5o9Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f9W/pjF/9v5Yxb/hfLHLP7fyR+z+C+cP2bx/27+mMX/e/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/+/ljFv+l8scs/j/IH7P4/zB/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP4/yh+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4v/j/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4v+T/DGL//r5Yxb/DfLHLP4b5o9Z/H+aP2bx3yh/zOL/s/wxi//G+WMW/03yxyz+m+aPWfx/nj9m8f9F/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/1/mj1n8f5U/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9f549Z/H+TP2bx/23+mMV/l/wxi/+u+WMW/9/lj1n8f58/ZvHfLX/M4v+H/DGL/+75Yxb/PfLHLP575o9Z/P+YP2bx/1P+mMX/z/ljFv+98scs/nvnj1n8/5I/ZvH/a/6YxX+f/DGL/775Yxb//fLHLP5/yx+z+P89f8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4/yN/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYP/oMEDQx7PHzP4D13/T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj0n8Rx3IH7P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/lj9m8R8/f8ziP0H+mMX/4/ljFv8J88cs/hPlj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvGfOH/M4j9J/pjFf9L8MYv/Z73+Q97vSov/ZF7/983iP3n+mMV/ivwxi/+U+WMW/6nyxyz+n8sfs/hPnT9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/afLHLP7TDgxs8UEN6cPcR9r/vlffvnTU6Vr/2Efa/91LR50+f8ziP0P+mMV/xvwxi/9X88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/7X8MYv/bPljFv+v549Z/L+RP2bxnz1/zOL/zfwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP7fyh+z+H87f8ziv1D+mMX/O/ljFv+F88cs/t/NH7P4fy9/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4fz9/zOK/VP6Yxf8H+WMW/x/mj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/R/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfx/nD9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfx/kj9m8V8/f8ziv0H+mMV/w/wxi/9P88cs/hvlj1n8f5Y/ZvHfOH/M4r9J/pjFf9P8MYv/z/PHLP6/yB+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v/L/DGL/6/yxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOL/6/wxi/9v8scs/r/NH7P475I/9lH2H/HdS0fdNX/so+z/z+v/d/ljFv/f549Z/HfLH7P4/yF/zOK/e/6YxX+P/DGL/575Yxb/P+aPWfz/lD9m8f9z/pjFf6/8MYv/3vljFv+/5I9Z/P+aP2bx3yd/zOK/b/6YxX+//DGL/9/yxyz+f88fs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP7/yB+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGJ/2gD+WMW/0H5Yxb/EfLHLP4j5o9Z/Afnj1n8R8ofs/iPnD9m8R8lf8ziPyR/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/x/LHLP7j549Z/CfIH7P4fzx/zOI/Yf6YxX+i/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+E+ePWfwnyR+z+E+aP2bx/2z+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+H8uf8ziP3X+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+v5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/2v5Yxb/2fLHLP5fzx+z+H8jf8ziP3v+mMX/m/ljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfy/lT9m8f92/pjFf6H8MYv/d/LHLP4L549Z/L+bP2bx/17+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/37+mMV/qfwxi/8P8scs/j/MH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/j/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/j/OH/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/j/JH/M4r9+/pjFf4P8MYv/hvljFv+f5o9Z/DfKH7P4/yx/zOK/cf6YxX+T/DGL/6b5Yxb/n+ePWfx/kT9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf+X+WMW/1/lj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/1/ljFv/f5I9Z/H+bP2bx3yV/zOK/a/6Yxf93+WMW/9/nj1n8d8sfs/j/IX/M4r97/pjFf4/8MYv/nvljFv8/5o9Z/P+UP2bx/3P+mMV/r/wxi//e+WMW/7/kj1n8/5o/ZvHfJ3/M4r9v/pjFf7/8MYv/3/LHLP5/zx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/v/IH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/6AP5Yxb/QfljFv8R8scs/iPmj1n8B+ePWfxHyh+z+I+cP2bxHyV/zOI/JH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//H8scs/uPnj1n8J8gfs/h/PH/M4j9h/pjFf6L8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP4T549Z/CfJH7P4T5o/ZvH/bP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fy5/zOI/df6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/mj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/a/ljFv/Z8scs/l/PH7P4fyN/zOI/e/6Yxf+b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+VP2bx/3b+mMV/ofwxi/938scs/gvnj1n8v5s/ZvH/Xv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/fv6YxX+p/DGL/w/yxyz+P8wfs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+P84f8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+P8kf8ziv37+mMV/g/wxi/+G+WMW/5/mj1n8N8ofs/j/LH/M4r9x/pjFf5P8MYv/pvljFv+fD7z4Rv7/nsX/F61/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/L/PHLP6/yh+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/6/zxyz+v8kfs/j/Nn/M4r9L/pjFf9f8MYv/7/LHLP6/zx+z+O+WP2bx/0P+mMV/9/wxi/8e+WMW/z3zxyz+f8wfs/j/KX/M4v/n/DGL/175Yxb/vfPHLP5/yR+z+P81f8ziv0/+mMV/3/wxi/9++WMW/7/lj1n8/54/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH3vbf2DIwMBH2f+0/DHL+j89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/P+RP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/pvAf5YMbzoc9hf/AwOjXtf4xi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofc/gn/145/AdGf6StALP4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGJ/xgD+WMW/0H5Yxb/EfLHLP4j5o9Z/Afnj1n8R8ofs/iPnD9m8R8lf8ziPyR/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/x/LHLP7j549Z/CfIH7P4fzx/zOI/Yf6YxX+i/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+E+ePWfwnyR+z+E+aP2bx/2z+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+H8uf8ziP3X+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+v5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/2v5Yxb/2fLHLP5fzx+z+H8jf8ziP3v+mMX/m/ljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfy/lT9m8f92/pjFf6H8MYv/d/LHLP4L549Z/L+bP2bx/17+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/37+mMV/qfwxi/8P8scs/j/MH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/j/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r+y0f8/eMAW/1WM/v9BFv9V88cs/qvlj1n8V88fs/ivkT9m8f9x/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8f9J/pjFf/38MYv/BvljFv8N88cs/j/NH7P4b5Q/ZvH/Wf6YxX/j/DGL/yb5Yxb/TfPHLP4/zx+z+P8if8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/y/zxyz+v8ofs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+v88cs/r/JH7P4/zZ/zOK/S/6YxX/X/DGL/+/yxyz+v88fs/jvlj9m8f9D/pjFf/f8MYv/HvljFv8988cs/n/MH7P4/yl/zOL/5/wxi/9e+WMW/73zxyz+f8kfs/j/NX/M4r9P/pjFf9/8MYv/fvljFv+/5Y9Z/P+eP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8/5E/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5D9fqb360+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4jzmQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/LH/M4j9+/pjFf4L8MYv/x/PHLP4T5o9Z/CfKH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOI/cf6YxX+S/DGL/6T5Yxb/z+aPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fyxyz+U+ePWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9q/pjFf6b8MYv/zPljFv9Z8sf+xX/YZeN8wGP6/9V7+M+aP2ZZ/1/LH7P4z5Y/ZvH/ev6Yxf8b+WMW/9nzxyz+38wfs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/rfwxi/+388cs/gvlj1n8v5M/ZvFfOH/M4v/d/DGL//fyxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL//fzxyz+S+WPWfx/kD9m8f9h/pjFf+n8MYv/MvljFv9l88cs/svlj1n8f5Q/ZvFfPn/M4r/Cf+F/8xtv9X97eB+2LP4rtv4xi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6Yxf/H+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6Yxf8n+WMW//Xzxyz+G+SPWfw3zB+z+P80f8ziv1H+mMX/Z/ljFv+N88cs/pvkj1n8N80fs/j/PH/M4v+L/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/MH7P4/yp/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6/zh+z+P8mf8zi/9v8MYv/LvljFv9d88c+qv5DhvP/Xf7YR9V/YDj/3+ePWfx3yx+z+P8hf8ziv3v+mMV/j/wxi/+e+WMW/z/mj1n8/5Q/ZvH/c/6YxX+v/DGL/975Yxb/v+SPWfz/mj9m8d8nf8ziv2/+mMV/v/wxi//f8scs/n/PH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+/8gfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/geH9t/xfHteHNIv/g61/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH2sgf8ziPyh/zOI/Qv6YxX/E/DGL/+D8MYv/SPljFv+R88cs/qPkj1n8h+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvH/WP6YxX/8/DGL/wT5Yxb/j+ePWfwnzB+z+E+UP2bx/0T+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMV/4vwxi/8k+WMW/0nzxyz+n80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/8/lj1n8p84fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v/V/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fy1/zOI/W/6Yxf/r+WMW/2/kj1n8Z88fs/h/M3/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+38scs/t/OH7P4L5Q/ZvH/Tv6YxX/h/DGL/3fzxyz+38sfs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+388fs/gvlT9m8f9B/pjF/4f5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/Uf6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8f549Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv+f5I9Z/NfPH7P4b5A/ZvHfMH/M4v/T/DGL/0b5Yxb/n+WPWfw3zh+z+G+SP2bx3zR/zOL/8/wxi/8v8scs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8yf8zi/6v8MYv/DvljFv8d88cs/jvlj1n8d84fs/j/On/M4v+b/DGL/2/zxyz+u+SPWfx3zR+z+P8uf8zi//v8MYv/bvljFv8/5I9Z/HfPH7P475E/ZvHfM3/M4v/H/DGL/5/yxyz+f84fs/jvlT9m8d87f8zi/5f8MYv/X/PHLP775I9Z/PfNH7P475c/ZvH/W/6Yxf/v+WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/x/5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfeyB/zOI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9Y/pjFf/z8MYv//8fO/YdrXdd3HL/5TZazT7umLm04NObajERGoxaionj8ccpEM3+jHoEEkR+SYCpstFLHpkvdLNjEwjFnq5Y43Fy/VjQsa7ZGbK1yimthjDlYZE7PrgPnEJy9PZfny75ft96Pxx9w7vvwvlOe18v75uK6+hn9Q1n6H6h/KEv/g/QPZel/sP6hLP1/Vv9Qlv6v1j+Upf8h+oey9D9U/1CW/q/RP5Sl/8/pH8rSf4T+oSz9D9M/lKX/z+sfytJ/pP6hLP0P1z+Upf8R+oey9H+t/qEs/UfpH8rS/xf0D2Xpf6T+oSz9f1H/UJb+r9M/lKX/L+kfytL/l/UPZel/lP6hLP1fr38oS//R+oey9H+D/qEs/Y/WP5Sl/xj9Q1n6H6N/KEv/sfqHsvT/Ff1DWfqP0z+Upf8b9Q9l6f+r+oey9B+vfyhL/zfpH8rS/836h7L0/zX9Q1n6v0X/UJb+E/QPZel/rP6hLP0n6h/K0v84/UNZ+h+vfyhL/xP0D2XpP0n/UJb+J+ofytL/JP1DWfpP1j+Upf/J+oey9G/TP5Sl/yn6h7L0P1X/UJb+p+kfytL/dP1DWfq36x/K0v+t+oey9H+b/qEs/c/QP5Sl/9v1D2Xpf6b+oSz9p+gfytL/LP1DWfqfrX8oS/936B/K0v8c/UNZ+r9T/1CW/ufqH8rS/zz9Q1n6n69/KEv/C/QPZel/of6hLP0v0j+Upf/F+oey9J+qfyhL/0v0D2Xpf6n+oSz9L9M/lKV/h/6hLP0v1z+Upf80/UNZ+k/XP5Sl/wz9Q1n6v0v/UJb+V+gfytJ/pv6hLP1n6R/K0v9K/UNZ+s/WP5Sl/1X6h7L0n6N/KEv/ufqHsvSfp38oS//5+oey9L9a/1CW/gv0D2Xp/279Q1n6X6N/KEv/hfqHsvRfpH8oS/9r9Q9l6f8e/UNZ+l+nfyhL/+v1D2Xpf4P+oSz9F+sfytJ/if6hLP1/Xf9Qlv6/oX8oS/+l+oey9H+v/qEs/X9T/1CW/u/TP5Sl//v1D2Xpf6P+oSz9b9I/lKX/zfqHsvT/Lf1DWfov0z+Upf9vp+r/fGdn54v7lVn6/06q/i9elv636B/K0v9W/UNZ+v+u/qEs/T+gfyhL/9v0D2Xpf7v+oSz979A/lKX/7+kfytL/9/UPZel/p/6hLP0/qH8oS/8P6R/K0n+5/qEs/VfoH8rS/w/0D2Xp/4f6h7L0v0v/UJb+K/UPZel/t/6hLP0/rH8oS/+P6B/K0n+V/qEs/e/RP5Sl/x/pH8rSf7X+oSz9/1j/UJb+9+ofytL/T/QPZel/n/6hLP0/qn8oS/8/1T+Upf/H9A9l6f9x/UNZ+n9C/1CW/n+mfyhL/0/qH8rS/379Q1n6r9E/lKX/A/qHsvT/c/1DWfqv1T+Upf+D+oey9P8L/UNZ+v+l/qEs/R/SP5Sl/1/pH8rS/1P6h7L0/7T+oSz9P6N/KEv/z+ofytL/c/qHsvT/a/1DWfp/Xv9Qlv5f0D+Upf86/UNZ+n9R/1CW/n+jfyhL//X6h7L0f1j/UJb+X9I/lKX/l/UPZen/iP6hLP2/on8oS/+v6h/K0v9v9Q9l6f+o/qEs/b+mfyhL/7/TP5Sl/9f1D2Xp//f6h7L036B/KEv/b+gfytJ/o/6hLP3/Qf9Qlv7/qH8oS/9v6h/K0v+f9A9l6f8t/UNZ+n9b/1CW/t/RP5Sl/2P6h7L0/2f9Q1n6P65/KEv/J/QPZem/Sf9Qlv5P6h/K0v9f9A9l6f9d/UNZ+v+r/qEs/b+nfyhL/836h7L0f0r/UJb+39c/lKX/Fv1DWfr/m/6hLP236h/K0v/f9Q9l6f+0/qEs/f9D/1CW/tv0D2Xpv13/UJb+/6l/KEv/H+gfytJ/h/6hLP1/qH8oS/9n9A9l6f8j/UNZ+j+rfyhL///SP5Sl/3P6h7L0f17/UJb+nfqHkvR/ZUv/UJb+A/QPZek/UP9Qlv6D9A9l6T9Y/1CW/kP0D2XpP1T/UJb+w/QPZek/XP9Qlv4v0z+Upf9++oey9H+5/qEs/V+hfyhL//31D2Xp/1P6h7L0P0D/0E9cfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9r5i1cdMXUmTM75vrCF77wxe4vXur/MgEAAP/bfvyh/6X+JwEAAAAAAAAAAAAAAAAAAIC8mvi/E3up/x0BAAAAAAAAAAAAAOD/u7b247YMGrDXU4P2fPCaRzp2/jx2xznTV616oPT83P3tU4OXHLjng87Ozs4VT0+Y1P1wWKvV6vpfe2X34+G9j7tef/GI5QfvelQmfv6Oxy6csv9pc9fcOvgbK25uf2rIzmeHtC6+fMbMjjcMbLXKCUNa13Q9OHpAq1VOGtK6pevBmK4Hk4e0Vnc9OGbng5e1PtP14PWXzp55WdcTJ1f+PYOfFG3ti1uD9lpsa6//Guy5/8UjHp/e83MfL9nzaoNb3fsfueZLB/X6Xo8X2H/P65fjeu+/3/+CwAvq3/6f2djzcx8v+T/e/z+8fsei6HsvvP+e1y/H2z/UJ/j8v9dGe3/u7/X5/7DgJXffHzt8/W1d+287695Du58a/GI+///49csJvfc/cK/P/12f4yf1fP4f1mqVE/fxtwNSaWtfsqWv9/++9z/41b1uBuy5/7u/sukVXfu/59nW0u6nhvRz/5P6ev+/sdc/K9A/be0rO3u9//dj/61RwUvu3v/mNfvv/Py/6b5LD9zje/3Z/4m99z96/qyrRs9buOioGbOmTuuY1nHl+DHjjh47fvy4caN3fiLY9eM+/qZAEvv2/t/ar9fNgFarY/f9untvntS1/60PLv1I91PD+7n/k/p8/z/M+z+ERg5sDR3aumbq/Plzj971Y8/DMbt+3PXLgv3348//hx/Z/ct6/s5wQKt18O77UReOH9a1/2vnlLXdTw3t5/4n97n/iXv/XSXQP/v4/n9Zr5u99n/s5usXdO3/iB+8alP3U/398//Jfe7/Lu//sC/a2lu1vol27f+YYUtOqXZd2vz9H9Snif2P2HbL9mrX5RT7h/o0sf8py958SbXrcqr9Q32a2P8Dsy5aVu26nGb/UJ8m9v/cT28/pNp1Od3+oT5N7P/R7z65qtp1abd/qE8T+//gne3HVLsub7V/qE8T+z/q6h9OqHZd3mb/UJ8m9n/5y89cXe26nGH/UJ8m9n9K5/EHVrsub7d/qE8T+x+w5HuLq12XM+0f6tPE/p+Yumx2tesyxf6hPk3sf/WIUc9Uuy5n2T/Up4n9L33qjZOrXZez7R/q08T+v3r78kerXZd32D/Up4n9f+L8Vy2vdl3OsX+oTxP7/9HIB/erdl3eaf9Qnyb2v2HD6vurXZdz7R/q08T+V6weNLLadTnP/qE+Tez/hpOnPVLtupxv/1CfJvY/dtyXz6t2XS6wf6hPE/s/+HPferLadbnQ/qE+Tez/zIcWzKt2XS6yf6hPE/tfcMjHn692XS62f6hPE/t/S8ch06tdl6n2D/VpYv/l1v02VLsul9g/1KeJ/Z+7deXEatflUvuH+jSx/7UHfOFj1a7LZfYP9Wli/9vmXDm+2nXpsH+oTxP7/857b3hftetyuf1DfZrY/23Pfr1Uuy7T7B/q08T+N4859/xq12W6/UN9mtj/ytOefrjadZlh/1CfJva/bO1j86tdl3fZP9Snif2vW3fq49WuyxX2D/VpYv9HjBq9f7XrMtP+oT5N7H/2OUs/VO26zLJ/qE8T+z/hvttfW+26XGn/UJ8m9j/8axM+We26zLZ/qE8T+//0hPd/qtp1ucr+oT5N7H/7xMOPrHZd5tg/1KeJ/W+8f8wd1a7LXPuH+jSx/w88fGfF6zLP/qE+Tex/zuue21rtusy3f6hPE/t/05SzF1a7LlfbP9Snif0feNfkL1a7LgvsH+rTxP4v+Pb3z6h2Xd5t/1CfJvZ/+EGXHFrtulxj/1CfJvY/fcb6m6pdl4X2D/VpYv+TVmwcW+26LLJ/qE8T+z/giXl3V7su19o/1KeJ/W8ZdNDp1a7Le+wf6tPE/u+57qFvVrsu19k/1KeJ/d9040c7ql2X6+0f6tPE/j+7Y+i2atflBvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+G924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUTvBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA//+eOfq5") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 39m57.317272606s ago: executing program 9 (id=2325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="5e23c70f21ed66b809000f00d0b94a090000b8faffffffbaff7f00000f30c4e109f99f2b0000000f01cbf3ac66ba430066ed67800e416704660f38817e30", 0x3e}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 39m56.446280685s ago: executing program 9 (id=2327): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 39m56.113345729s ago: executing program 39 (id=2327): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 38m14.532374423s ago: executing program 0 (id=3020): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002180)="5afe6fa70f7924524e8a98af71520f9001425c121fb250b69c7fe5be9085a09cf33854abf79480ef2b30480f749b6582b1667d9305fe881292f382cf0dbc4ccdfb014724bff69ecdf63e7e744c84396e67b363be0a83cc589cf60fcb90a659736447f28f1162ff96b23e2f94d8d3af7de462b6f1465514a275d3ce6784fd6d0c6eacd1f69c5b3616ee76cccca3b5584e1e8be62c616cc32c3052b15c40565a4cdd61e4c421dc00421aa8227adf010c6e8330ffa215239360eb445fbc5e4d80ee0d0f52452fd6c534f0fcdc3dd0c710cce70cbedb25fd5726563a0b4b994509c9581efe5e69001eb4122d5e511debcf0be55521a1ad2cdaa1e747f4bfd2091136e15e4807ba2fd7104db313ec76c8a7d3ff6b639de783aa16b5b1b1e39ca4e9cff91713a893ead525719d55e48098da640ec579f5971994c09b6c1e02a03ab69936ef501961a088be185e1a1debfa620dfb22f442a6b8f50638bf221091a69251a261baa2531758048db279aa72b2dd0e12b2d049334758940a23194393be27653c0419687e6508a1c068f378ad7cc9841d7a87978dbd37710c70ee9113b4de277e7e16b6937fdae5c7af71b0d03b5eb33eb1f89498f1c728dc366f85ed4f587c405f911c4162b133f93a72160330ce7dfec4634b8efb09e2829ec30f7a935980200c8e59d8951d176f05a38f5dc3e046affbd2207da8f33314c244a7d4fe10961746d3220fd9157869b102e3b20730a4681e18c3370d442c7a22209a0c2f6d2fd5dc26668d90104f6715426c8f88880df78c9366207334d39d87922054d9f00b08f743f59d516d50255073b174526f4edf923ccf1a8d920ce80bf6edd95abdbd0b6bca03bcca0b4391d06e9463a0369393fe74d955a4cef48472700930134fd147675dc7ddb43783c552328ddef940d8ccba981f6707779a9443380035f94ac585649e478e2b8b2eaf8be53a164c2345dbe13c213a60d876dcd77a025629afc2fa30400af698877a660bca47599dcd3cdff650d87156052706c7a1f614703d3c29cfbaffa7c512f7594f6b66c4d3e2780c0638f0c69cc14d692061e4e5b810bda894c0f3fd7dea0edb363d24a9e06d93c717e9e846a33a01bcc96d613133f63db4ba63489afd4234285760f0621cfb543b93b84b64e5b7668a7260dbb19952e02cf5ebfd663f284600fcd9b00c24e4d5612998f12178f255981a0f45ba868951ad279af7fff19edfc0fcf76db6812dbc286f08b28666e1c0f443b40b384d6f30aaa6a708c32aca3f91d957f0a20a775d96c15df5e17275d2f0e454d2c8959376c71cd3fac0efc690f9af6024fb970746e779a745008332c3edd19c76e1a89dc6a795839038926465285582edb43438c275ca7a74514e2c919d804e5e0680030a41f85fcf3d79f8c590fa404e72def45bb7b16747bcdf361f6847e17e1ba3fb61f622bdcc6fa08189fddad03220446b4e6fa02858e5c4a5c6444abc2a73015dadf359332a4bf7d6333b2edf7091ffb0f5011706f243a3e0c4d3ec66da84bc9d1b61caed90e081fc266b2e02be9f91df01dcff1668a55a723c0944a4aeaf1cbafc1c344ca8cb37f05c079afdc24dea2af16fc6ebd104441e1902e097039c23b103994ed6964397b649d537b04394c15b66bc3e0dc87cf7fd67c724faabca93167f54dab6fa464fc39a226395c92538e4720903eced8852fcae9bef9d3a7eb85413b1b27d63100bc6c4945c66ff16183c30c41b6ed8350687e9d8995fb20003058029d392582989d2f2e4d00e2d584658cfc4da18c6d7b4148d08c8fa7548bda37abf56f8f573470de5aa4d81f7cb3fe9d7423343f82d47165d6077dc275bcf07667fb0ab1ef06d3f0cd20f9215c8403e3ca34331a481501fddfbdd24f4e1cf3cd9c5bb16aeb7569a39143f532bae6734a9229abab42ca1ce6546cd12e876af4f88969cf213e690694d7346684d8e1caf8213051d924b0538ac2575fc2ef54328deacd30e85cf4678477063d1f9209778ed97519a3a7cfafe41bb361261dce6a2885ca83c7407a43efd63a1d406cfae6978a9edcbd87239a45bb532a8504faf89929aa4fbecdf2632bcaa935c53bbac747d83ba6404caf2ccba0848679f4c8648e7d76c233203ff4619c22f8a01bd77609c4187c873cb9e5bc2d638a3d7c3ebbd1fec98d4d8b69d450e3c69ecf50d50038bf4679cf878a50bfab746c363a06905906dc6c47c8a92ad3fb3e265915b93917c30f924fc6d1dffdd8d206e9895cc4a803503136e1e7916afd73c2c97d2d62af38a2c03d38ded750281f5bd6ecfaac82bcce0672a54ae2bcb401700332ce1fdbf29bef4d8d88c57ad972f71dc4eeccaa2db4730688a223974db04e68e2ea63829f5b3c55228b00b4c34d73d55b5bdb2dab784e27bbb7820696fbef4b2f3bce87e877210e1ce79e14742074f84228aab85acf696960f6395acf6b2f5f63a7aa0f9588675ff30fe3f359d4297f8776daf0dcc5951a79b813ba1f2b88bfb60a7ed0525e534a02a01660d3dbcdb5495d4f7b576f8810fc38e397e256c02c810a75ec723d9865c2ab34be1fddaa36bad6263b53d71cbac043f6a9f561d46da7bdc9acaacdb9ff982117b85d8129466956114bb4fc3524d853f0fe3ad9c4ec7deed9c0f5a4dcaea2332061f78d2b174557550ea4a8222761b9ad2205003ec89adb8810b5f10d894716b0c8b431d3e5b0333477d6fd4dde545179929bd2944391d8d296ee60cecb2b9a9ff345100f9c75d6a7ffee50c627ca9c3ea1f8b8702ecbdea67d47472390e1d89de673782a76a6142447e1b7a86f77237c7548eab54dea0d20cbe8bca88e29b480fba21f2e1eb3962594dcc670b4546a845b0986e3bb88ff05a475f6693cda199c3f6d7041a68e1022f49ad61593c4468fecaaf12c3ab03fe4ca1a342d1f44867e9eeb1cebc52779a3af96b1ec566835d6ff6745a2d5f1822dfe670a176969ed0fa73e7bdbc9261c3c47236cf0ea2f9c92b3eb5631452def6fd554217371dece101e61c507311b39c0d88a82e2681876841438864c7bfc558004451e67b9b1c2694896714668df2b348eed1238c63271eabbf6da8af9aef94af787794d14a0244f4264a2bc2da05670d5e71fa7b0a2bcf59d7707e97cb9d875e092be8dff0691ec66b1449f6d197851634b5db9c8ebd48551f7f37b6d34b5f026e3c0f525e83cae55e84ff87a3ca6a75e806bb331204d4bcebbf07800f91728c4e0191ba34f552f57a87d6c4f17542ca11cb41e14e46c20333b5ccb70d25c980b7bcbe4327b525b041d2fe96e536ae83f9973ad8e057de14dfa1a6c4f7cc1893937fe11ef564c2920d380c53a5cdc830ac3fc1491217d972ec2b73b91c3a4ec9e9576b7039a45fd668fb91b7a926d5ac744ec427faab256027531e1984b9116331612e8b5034d34a3e1d2cd07521280e3db61d9280db87c5eba7adefe16a8d7df4ca711d0f75a2a484d1020f45fb0350ff3cc9e2578a1127a2c298f2a0c8a17768ac3be49e3d32eed1a922f2ec41ed72a88c4e5ffb8a3c3f176f01d2a48a189075448d6f0df9c9d3983cbd93b90793dc71421af497751cf4a288c938a431f3d85bf4f26decbc04090eebb8cede7a1070725b630d63f8e072800189c281dcdd173e840550fed7242a3bb55c36185069489b3143b5b65f7c7a3eec26dd37b8436c0ec3201c7429679935d18292fe5a25665ffa8b27659eaa722a7c74c4e396270f8f13d38eebacdbd04af146dc9a1f6a97774ab0a7b4a1a32a867bbe3dbaa7727750b61fb97062941311f50f71911ef30bcf5026940eaea4cabf994b8ce998010f7edf2db33150d5faada9634050a52effb3c4d91416d8a0e059e7e655ed3bf959931774e6ce388cf843f236aaa53dd52a1f97d2bc6c077e76773671e1b7454232c38e08e97c211fc5a62bd58fc557d3076299d1f0962ca5884141ec58824eb70c54061365f7db6a423fce4aa33e0c3e524a5670fc99bc16db7a8c83846b66d81a9c5b3b537781bf4b87caf75b5907f211cc1a20930d462c44a9726c30827852d885ab83a1398045dbff3d73caa8a22d2b72caf7332149e652593c52922371e67468f1b4c01cb79324fa0140663a256039dbd1f421d5adaf0e8616a8540164a02254368ed85cda52e4fc8512a473682b6b0f8a8f00114f7674b4b7ba063ea9b1868ab06e1cf8d140b103cbecf159b1c8ad4f40283fcb0bc3c1262162807a9e6f17571e3512b876af09dbea9f8f7bc3e86ea7583e6e92f398b34b620cba64b7a0078c4d2223f03f52bd94a307e603e0547fe9e02188c503e70b6d531ab7f953d4c8d2d3b6e06539d0295a44503153869fb6481de86aef08030c05d7c1eb6ce083a7ff863a0e3accaae7859c7f70c559d880a7eaba36deb3c1d6ba899c9be572986856598a2e8cd71ac581670625371655c41a9fa01b175575e864c87618fb9c7b89206537e4f02552f53e120b300c34e158d0ccff18b8fd2a142584c4c242183c9fbde022f3f9f9d8ebc4e24dc1a46bad3c5397ec4438d95590d123624a5cb6d53a2f30a7032979e8ac463749b8616410118115d7d4baa3436b2d7790cf8780c058c022cf13eba6dc0eb36cfdfd9fe536e66208c5e9b45ba035849a275937ed3a3825c712aed12707aaa95ad49dd957c26f57b2e231d1940a1156df30f07e04f0d35f179453d99afd95b4d1946b5d2853888cace7cdb9051a291040993d6c4cdf32cdbc04b7a37c0047ff3c826728410ba33ed242a616b942211ef67d37b5078c9b0fb0d33658fe796701901862f3b97afa012749215b325f5c066dbf8874ef22a9ca2e0597f78198b4b7af6cb5243aeec6df9062d1a00601cc82c1977797e54f7eb30b20769a7748b1de1ddf1ec9352a09b9de732f3a263d825e3013d039f74332e8d73925c57db554ce45ed0aed89e248042663c84d0fcc42e899ca6d2947d9780336d5f48c4ec73e6c6ddecaf4e7ba9c2ab543a4c19bb462255bc0fe6240078b1cf1e122c4063f9cba973e9bc262594ac3b4c723fd489bbc61636112478ade4d20c6cfdb0212460ddd43d189a147b23f1387565f5e9d5c23b616510f09cc3faaa7c2bea043680ef614afd0150055ba878b0c2b96ab3c2f4caa0bf7e61ec94897f160f633e66876d6c525dd81180a87767c313998393f09e6bb1c4811b6c7814dceb808af5a2b5bbaa0579e130e13a56ac7b398f4a0fa8e9e8c789ad896a8e1ee4c199f9c9d4aee866901315cd06f65f6686e42fe2a5b4e033a7bb9c590629d8062430c000755ebbeea64564ae68fbb5dd188f3507b3a66191d455de9a6691202ad3c0a54ed9f040a54f3cad6a10ba0a944024e8ef1b662edc2303021e23187777c4ca93d9e99867845721d656a0f7c5b22083519fc199710bf1de19a51979c887a6ab8f19ce6f4e2f4ab1bc277589c5f63f89a897e467e73856d12580a62a07361e39a42053bab0f8fb414f1f440b2a2b26cab73fbe49e93903b0907033b8ddf4e9dbbfdbeb2e6d8a67ea9d03ee139a04ad391c8c8f07acdb6f5155c8508dde78e1084133336d4bdb74f87a53909500ef9b685c1b474556cfa3a940b60ee457327cb6a3c70a1428dda0ee0c31aa14b1fc08fc0b656e06c0c7de739e7645d0a75a73ca59afda3c24f9452deac7e0b5c9fa8ac64673266b1f22ca9ecca390838868bd720ead213ee1dc88afb8223952ff2920f0daa5bee6c86ccec6a61bcf08954b46479e8063a67410ba24ffa560d3b4055f07ce363dc1be4a95842565cad4164335c2e", 0xff2}], 0x1, 0x0, 0x0, 0x20000084}}], 0x1, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 38m14.080502779s ago: executing program 0 (id=3024): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) chdir(&(0x7f0000000000)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 38m13.986736678s ago: executing program 0 (id=3025): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) 38m13.77447558s ago: executing program 0 (id=3027): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = fanotify_init(0x1, 0x2) fanotify_mark(r1, 0x41, 0x8000038, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x4) 38m13.646971283s ago: executing program 0 (id=3028): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1) sendfile(r1, r1, 0x0, 0x80000000) open(&(0x7f0000000180)='./file1\x00', 0x14977e, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 38m13.258518873s ago: executing program 0 (id=3030): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000180)}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) 38m12.69471396s ago: executing program 40 (id=3030): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000180)}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) 36m44.843269479s ago: executing program 4 (id=3570): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5ac, 0x0, 0x0, 0x0) 36m44.34918773s ago: executing program 4 (id=3577): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000900)=[{&(0x7f0000000240)="8a8fa9a4fd", 0x5}], 0x1, 0xff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 36m42.796754509s ago: executing program 4 (id=3585): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x5, 0x7b3, 0x8a0f, 0x7fff, 0x1fb]}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36m41.640660627s ago: executing program 4 (id=3596): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xfffffff8}, 0x50) 36m40.971950875s ago: executing program 4 (id=3602): socket$nl_rdma(0x10, 0x3, 0x14) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 36m40.504809493s ago: executing program 4 (id=3606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 36m40.192943355s ago: executing program 41 (id=3606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 36m8.220445016s ago: executing program 5 (id=3840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 36m7.900581819s ago: executing program 5 (id=3842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 36m7.545459946s ago: executing program 5 (id=3845): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 36m7.268311244s ago: executing program 5 (id=3847): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f00000003c0)=ANY=[@ANYBLOB="0096397bb229f118b1f6c334ff95e9d57079d2a61ef7526c03c3a0d9cd515719956a0e5922340c97beade3e691744c236c61868da817036b0bab4516cc735ee856ef073c7b0b540347b358404ebe8e0c22e3a8a3caad47889d996a07d6988b211450783f4fdfbb8ae60572ea3bb70fb29560525b"], 0x83, 0x22e, &(0x7f0000000940)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x87040, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaa00", "036c47c6780820d1cb0e34970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e000000000000000300", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 36m6.548972937s ago: executing program 5 (id=3849): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) rmdir(&(0x7f0000000b80)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) 36m5.64146498s ago: executing program 5 (id=3853): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) close_range(r0, 0xffffffffffffffff, 0x0) 36m5.034167313s ago: executing program 42 (id=3853): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) close_range(r0, 0xffffffffffffffff, 0x0) 8m10.616237432s ago: executing program 2 (id=10563): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/169) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 8m8.88500681s ago: executing program 2 (id=10572): io_uring_setup(0x6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") 8m7.178142565s ago: executing program 2 (id=10568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) 8m5.738349593s ago: executing program 2 (id=10573): openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x8000) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 8m3.451498728s ago: executing program 2 (id=10577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000002c0), 0xcdd, r0}, 0x38) 8m1.145795474s ago: executing program 2 (id=10579): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x56e02a3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7fff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xfce1) 7m43.081256638s ago: executing program 43 (id=10579): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x56e02a3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7fff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xfce1) 2m46.914326936s ago: executing program 6 (id=11048): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, &(0x7f0000000240), 0xfdef) 2m44.324851442s ago: executing program 6 (id=11050): r0 = socket$kcm(0x23, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) uname(0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) 2m38.329471077s ago: executing program 6 (id=11058): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f0000000380)='./file1\x00'}) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 2m36.722262922s ago: executing program 6 (id=11061): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x7, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x14}, 0x94) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 2m29.962076656s ago: executing program 6 (id=11068): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c81, 0x0) 2m27.87896199s ago: executing program 6 (id=11069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) 2m12.448336554s ago: executing program 44 (id=11069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) 1m41.978013641s ago: executing program 3 (id=11135): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x4, 0x0, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000300)=ANY=[], 0xfd, 0x644, &(0x7f0000000cc0)="$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") link(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00') ioctl$TIOCGPTPEER(r3, 0x40480923, 0x200000000005) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x3) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x27, 0x1, 0x0, 0x4, 0x67}, 0x8) 1m41.433632147s ago: executing program 3 (id=11138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m39.527329743s ago: executing program 3 (id=11142): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10003) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x16, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/83, 0xfedb}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x60000253) 1m34.465266192s ago: executing program 3 (id=11159): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0dd803165a8a5098755c0c79b08a09a908a20be46331c148be2ba405e6533b3365d84c6aa4272d6cbb74e01def03067026342247dd6b01313ad7df307aaac5a4a54a6f14fffa604b072e2a37c580266eebd2f6975e65fd04f527aa9242eed660dfabfc4338b284ff4e0558b6780fd51b954ebd0b0e18e5247bc61a02fddc1cb6630853aa3ea1d472caeb8a3ead5bf595f277c3bca561234faa23c0805220295794318b2cb8ca88ac0b9fdfaa2ed85abe9b850e420b0c91d5b0f0780a60921d6949627f95e9e7379a85db3031d90bc001caf266af62bc23c42d74000000000000"], 0x48) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) 1m31.774329768s ago: executing program 3 (id=11160): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x40) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfd, &(0x7f0000001480)) 1m29.857496195s ago: executing program 3 (id=11162): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m13.981533973s ago: executing program 45 (id=11162): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 31.309800884s ago: executing program 1 (id=11232): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r5}, 0xc) 27.204200022s ago: executing program 1 (id=11235): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x30) 26.505916733s ago: executing program 1 (id=11237): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) eventfd2(0x9, 0x800) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 26.211231953s ago: executing program 1 (id=11239): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004001}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 25.982449077s ago: executing program 1 (id=11240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000001c0)={r10}) r11 = dup2(r1, r0) close_range(r11, 0xffffffffffffffff, 0x0) 25.354191271s ago: executing program 1 (id=11241): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000006480)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 12.120298547s ago: executing program 7 (id=11249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000000780)=""/4110, 0x100e) 12.105719479s ago: executing program 8 (id=11250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10.918126149s ago: executing program 8 (id=11251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) 10.748114257s ago: executing program 7 (id=11252): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) 9.543980859s ago: executing program 46 (id=11241): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000006480)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 9.498317943s ago: executing program 8 (id=11254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$netlink(0x10, 0x3, 0xf) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 4.571308675s ago: executing program 8 (id=11255): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.400813963s ago: executing program 7 (id=11256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x1, 0x1000, 0xfd, 0x3, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000002c0)="bada30fbc99b5400040000ea0756a85d86dd775a2c78c540624409ab09f4ac40ab420e89", 0x24, 0x48041, &(0x7f00000001c0)={0x11, 0x10, r6, 0x1, 0xd8, 0x6, @local}, 0x14) 3.319609723s ago: executing program 7 (id=11257): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500160008000b40000000002c0004802800018008000100667764001c000280080002400000000d0800014000980016080003400000000a0900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.233952113s ago: executing program 8 (id=11258): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 2.16586812s ago: executing program 7 (id=11259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 961.072812ms ago: executing program 8 (id=11260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1e12, 0x4, 0x2, 0xd06, 0xfd05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 0s ago: executing program 7 (id=11261): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(0x0, 0x1) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x3000000000000) close(r3) kernel console output (not intermixed with test programs): .8329': attribute type 10 has an invalid length. [ 1482.282005][T30072] tipc: Resetting bearer [ 1482.599438][T30080] siw: device registration error -23 [ 1482.922607][T30076] netlink: 'syz.2.8329': attribute type 10 has an invalid length. [ 1482.982551][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1484.272167][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8335'. [ 1484.348912][T30110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8335'. [ 1484.898668][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.912266][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.666700][T30132] netlink: 'syz.6.8341': attribute type 10 has an invalid length. [ 1485.678376][T30132] netlink: 'syz.6.8341': attribute type 10 has an invalid length. [ 1488.588342][T30183] tipc: Resetting bearer [ 1489.341706][T30192] netlink: 'syz.2.8361': attribute type 3 has an invalid length. [ 1489.377095][T30192] netlink: 'syz.2.8361': attribute type 3 has an invalid length. [ 1489.739198][T30204] overlayfs: failed to clone upperpath [ 1490.422687][T30211] netlink: 'syz.6.8366': attribute type 10 has an invalid length. [ 1490.469719][T30211] netlink: 'syz.6.8366': attribute type 10 has an invalid length. [ 1490.878312][T30216] wireguard0: entered promiscuous mode [ 1490.892421][T30216] wireguard0: entered allmulticast mode [ 1491.767422][T30228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8374'. [ 1491.864620][T30228] veth1: entered promiscuous mode [ 1491.894877][T30228] bridge14: entered promiscuous mode [ 1491.910331][T30228] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 1491.931160][T30228] hsr1: entered promiscuous mode [ 1493.790576][T30248] xt_TCPMSS: Only works on TCP SYN packets [ 1494.855378][T30266] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1494.864244][T30266] team0: Port device batadv1 added [ 1501.523351][T30345] wireguard0: entered promiscuous mode [ 1501.528907][T30345] wireguard0: entered allmulticast mode [ 1503.203875][T30380] xt_socket: unknown flags 0x4c [ 1504.029358][T24409] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1504.074993][T30384] team0: Port device batadv1 removed [ 1504.107307][T30385] team0: Mode changed to "loadbalance" [ 1504.146380][T30384] tipc: Enabled bearer , priority 0 [ 1504.277488][T30395] netlink: 'syz.2.8428': attribute type 12 has an invalid length. [ 1504.643149][T24409] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1509.547230][T30458] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1509.573659][T30458] CIFS mount error: No usable UNC path provided in device string! [ 1509.573659][T30458] [ 1509.584201][T30458] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1510.423817][T30465] overlayfs: failed to resolve './file0': -2 [ 1510.660295][T30469] SET target dimension over the limit! [ 1512.133725][T30491] CIFS mount error: No usable UNC path provided in device string! [ 1512.133725][T30491] [ 1512.143990][T30491] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1513.449868][T30508] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.679048][T30508] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1514.440640][T30508] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1514.556286][T30508] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1514.801457][T30508] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.866724][T30508] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.907249][T30508] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.956229][T30508] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1515.034864][T30542] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1515.043727][T30542] team0: Port device batadv1 added [ 1515.237607][T30552] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 1515.446790][T30564] netlink: 'syz.3.8481': attribute type 10 has an invalid length. [ 1515.469709][T30564] team0: Port device wlan1 added [ 1516.838603][T30582] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 1516.859779][T30582] ref_ctr increment failed for inode: 0x2fe6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805b789c80 [ 1516.878310][T30582] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 1516.892504][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1516.917451][T30582] ref_ctr decrement failed for inode: 0x2fe6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805b789c80 [ 1517.819206][T30598] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8500'. [ 1518.527842][ T5818] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1518.942225][T30618] lo speed is unknown, defaulting to 1000 [ 1518.948312][T30618] lo speed is unknown, defaulting to 1000 [ 1518.954925][T30618] lo speed is unknown, defaulting to 1000 [ 1518.994726][T30618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1519.088247][T30618] lo speed is unknown, defaulting to 1000 [ 1519.131354][T30618] lo speed is unknown, defaulting to 1000 [ 1519.155814][T30618] lo speed is unknown, defaulting to 1000 [ 1519.174214][T30618] lo speed is unknown, defaulting to 1000 [ 1519.188060][T30618] lo speed is unknown, defaulting to 1000 [ 1519.216758][T30624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8496'. [ 1519.347772][ T5818] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1523.008839][T30661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8508'. [ 1526.088685][T30708] overlayfs: failed to clone upperpath [ 1526.887652][T30716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8528'. [ 1530.177668][T30763] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.289331][T30763] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.389907][T30763] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.516026][T30763] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.672080][T30763] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1530.711648][T30763] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1530.741330][T30763] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1530.776734][T30763] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1531.683604][T30797] lo speed is unknown, defaulting to 1000 [ 1533.151223][ T28] audit: type=1326 audit(1768184721.345:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.1.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32d8f749 code=0x7fc00000 [ 1533.244960][ T28] audit: type=1326 audit(1768184721.375:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.1.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b32d8f749 code=0x7fc00000 [ 1533.291067][ T28] audit: type=1326 audit(1768184721.385:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.1.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32d8f749 code=0x7fc00000 [ 1533.314455][ T28] audit: type=1326 audit(1768184721.405:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30825 comm="syz.6.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1533.342382][ T28] audit: type=1326 audit(1768184721.405:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30825 comm="syz.6.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1533.389821][ T28] audit: type=1326 audit(1768184721.405:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30825 comm="syz.6.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1533.430323][ T28] audit: type=1326 audit(1768184721.415:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30825 comm="syz.6.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1533.488346][ T28] audit: type=1326 audit(1768184721.415:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30825 comm="syz.6.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1533.521360][ T28] audit: type=1326 audit(1768184721.415:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30825 comm="syz.6.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1533.592986][ T28] audit: type=1326 audit(1768184721.415:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30825 comm="syz.6.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1535.395080][T30873] wireguard0: entered promiscuous mode [ 1535.400642][T30873] wireguard0: entered allmulticast mode [ 1541.834142][T30965] overlayfs: failed to clone upperpath [ 1543.418393][T30986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8606'. [ 1543.548356][T30986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1543.658799][T30992] macvlan0: entered promiscuous mode [ 1543.682532][T30992] macvlan0: entered allmulticast mode [ 1543.807439][T30986] bond4: (slave gtp1): refused to change device type [ 1545.493902][T31031] overlayfs: failed to clone upperpath [ 1546.466968][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.473648][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.485531][T31079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8636'. [ 1548.730945][T31090] bond0: (slave team0): Releasing backup interface [ 1548.740903][T31090] tipc: Resetting bearer [ 1548.764116][T31090] tipc: Resetting bearer [ 1548.807031][T31090] team0: Port device wlan1 removed [ 1548.853290][T31090] team0: Port device batadv1 removed [ 1548.860523][T31096] vlan0: entered promiscuous mode [ 1548.867447][T31096] gretap0: entered promiscuous mode [ 1548.907162][T31094] team0: Mode changed to "loadbalance" [ 1548.922593][T31097] netlink: 'syz.2.8642': attribute type 1 has an invalid length. [ 1548.965696][T31097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1548.993878][T31099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1549.009944][T31099] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 1549.023051][T31099] bond5: (slave vti0): Error -95 calling set_mac_address [ 1549.045608][T31090] tipc: Enabling of bearer rejected, already enabled [ 1549.094364][T31097] bond5: (slave gretap3): making interface the new active one [ 1549.105230][T31097] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 1549.276812][T31105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8645'. [ 1549.758896][T31118] netlink: 'syz.1.8650': attribute type 4 has an invalid length. [ 1550.500703][ T28] audit: type=1326 audit(1768184738.695:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1550.523874][ T28] audit: type=1326 audit(1768184738.695:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1550.592471][ T28] audit: type=1326 audit(1768184738.745:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1550.655929][ T28] audit: type=1326 audit(1768184738.745:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1550.702444][ T28] audit: type=1326 audit(1768184738.755:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1550.729761][ T28] audit: type=1326 audit(1768184738.755:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1550.932404][ T28] audit: type=1326 audit(1768184738.755:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1551.175575][ T28] audit: type=1326 audit(1768184738.755:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1551.382788][ T28] audit: type=1326 audit(1768184738.755:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1551.673354][ T28] audit: type=1326 audit(1768184738.755:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.8652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1560.306155][T31290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8708'. [ 1560.625862][T31308] overlayfs: failed to resolve './cgroup': -2 [ 1561.983542][T31328] tipc: Enabling of bearer rejected, failed to enable media [ 1564.164381][T31353] sch_fq: defrate 0 ignored. [ 1572.277245][T31438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1572.320274][T31438] veth37: entered promiscuous mode [ 1572.325978][T31438] veth37: entered allmulticast mode [ 1572.333303][T31438] bridge0: port 1(veth37) entered blocking state [ 1572.340081][T31438] bridge0: port 1(veth37) entered disabled state [ 1572.350597][T31438] bridge0: port 1(veth37) entered blocking state [ 1572.357161][T31438] bridge0: port 1(veth37) entered forwarding state [ 1572.371609][T25386] bridge0: port 1(veth37) entered disabled state [ 1572.380116][T31440] netlink: 'syz.6.8751': attribute type 1 has an invalid length. [ 1572.430974][T31440] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1572.467742][T31441] veth39: entered promiscuous mode [ 1572.473266][T31441] veth39: entered allmulticast mode [ 1572.479757][T31441] bridge0: port 2(veth39) entered blocking state [ 1572.496971][T31441] bridge0: port 2(veth39) entered disabled state [ 1572.513588][T31441] bridge0: port 2(veth39) entered blocking state [ 1572.520142][T31441] bridge0: port 2(veth39) entered forwarding state [ 1572.565032][T25390] bridge0: port 2(veth39) entered disabled state [ 1572.677324][T31443] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1572.723201][T31443] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 1572.754012][T31443] bond8: (slave vti0): Error -95 calling set_mac_address [ 1572.835962][T31444] bond8: (slave gretap2): making interface the new active one [ 1572.850426][T31444] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1578.162562][T31494] lo speed is unknown, defaulting to 1000 [ 1579.591343][T31516] xt_nat: multiple ranges no longer supported [ 1583.519073][T31557] xt_nat: multiple ranges no longer supported [ 1584.606798][T31576] lo speed is unknown, defaulting to 1000 [ 1585.006745][T31590] tipc: Enabling of bearer rejected, failed to enable media [ 1585.862772][T31605] xt_nat: multiple ranges no longer supported [ 1586.017075][T31607] vlan3: entered promiscuous mode [ 1586.022566][T31607] bond0: entered promiscuous mode [ 1586.027919][T31607] vlan3: entered allmulticast mode [ 1587.292547][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1588.271834][T31637] vlan2: entered promiscuous mode [ 1588.291738][T31637] bond0: entered promiscuous mode [ 1598.123628][T31726] xt_l2tp: invalid flags combination: 0 [ 1600.609917][T31737] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 1600.617587][T31737] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 1600.625290][T31737] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1600.643132][T31737] Error parsing options; rc = [-22] [ 1601.353534][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1601.353551][ T28] audit: type=1326 audit(1768184789.555:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.401441][ T28] audit: type=1326 audit(1768184789.555:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.462483][ T28] audit: type=1326 audit(1768184789.585:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.532608][ T28] audit: type=1326 audit(1768184789.595:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.586498][ T28] audit: type=1326 audit(1768184789.595:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.633980][ T28] audit: type=1326 audit(1768184789.595:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.697233][ T28] audit: type=1326 audit(1768184789.595:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.742424][ T28] audit: type=1326 audit(1768184789.595:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.808209][ T28] audit: type=1326 audit(1768184789.595:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1601.850037][ T28] audit: type=1326 audit(1768184789.595:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.3.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1602.305431][T31759] lo speed is unknown, defaulting to 1000 [ 1603.881992][T31775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8849'. [ 1608.283213][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.296258][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.918406][T31821] lo speed is unknown, defaulting to 1000 [ 1618.544118][T31914] lo speed is unknown, defaulting to 1000 [ 1619.431019][T31916] lo speed is unknown, defaulting to 1000 [ 1621.303042][T31950] xt_l2tp: invalid flags combination: 0 [ 1621.597186][T31951] SET target dimension over the limit! [ 1626.024113][T31956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1626.074608][T31962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1629.653843][T31991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8911'. [ 1645.121471][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 1645.121490][ T28] audit: type=1326 audit(1768184833.315:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.212610][ T28] audit: type=1326 audit(1768184833.315:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.244611][ T28] audit: type=1326 audit(1768184833.315:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.270473][ T28] audit: type=1326 audit(1768184833.315:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.305674][ T28] audit: type=1326 audit(1768184833.335:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.330336][ T28] audit: type=1326 audit(1768184833.335:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.361915][ T28] audit: type=1326 audit(1768184833.335:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.405300][ T28] audit: type=1326 audit(1768184833.335:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.477814][ T28] audit: type=1326 audit(1768184833.335:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1645.509053][ T28] audit: type=1326 audit(1768184833.355:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.6.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1647.309083][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8939'. [ 1647.544258][T32101] gre2: entered promiscuous mode [ 1647.570593][T32105] rdma_op ffff888030dea1f0 conn xmit_rdma 0000000000000000 [ 1647.578878][T32101] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 1647.601633][T32101] bond9: (slave gre2): Error -95 calling set_mac_address [ 1647.709096][T32096] macvlan2: entered promiscuous mode [ 1647.755460][T32096] macvlan2: entered allmulticast mode [ 1647.761398][T32096] bond9: (slave macvlan2): Error -99 calling set_mac_address [ 1650.678616][T32137] tipc: New replicast peer: 255.255.255.255 [ 1650.699739][T32137] tipc: Enabled bearer , priority 10 [ 1650.725704][T32137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8951'. [ 1650.753462][T32137] tipc: Disabling bearer [ 1650.784708][T32140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8953'. [ 1650.895632][T32143] gre6: entered promiscuous mode [ 1650.901385][T32143] bond6: (slave gre6): The slave device specified does not support setting the MAC address [ 1650.913535][T32143] bond6: (slave gre6): Error -95 calling set_mac_address [ 1651.849580][T32140] macvlan1: entered promiscuous mode [ 1651.867086][T32140] macvlan1: entered allmulticast mode [ 1651.878855][T32140] bond6: (slave macvlan1): Error -99 calling set_mac_address [ 1651.900925][T32149] netlink: 'syz.3.8955': attribute type 10 has an invalid length. [ 1651.920304][T32149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1651.952192][T32149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.980425][T32149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.989238][T32149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.998940][T32149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.043341][T32149] team0: Failed to send options change via netlink (err -105) [ 1652.050894][T32149] team0: Port device geneve0 added [ 1652.143351][T32156] lo speed is unknown, defaulting to 1000 [ 1653.465502][T32164] overlayfs: failed to clone upperpath [ 1653.870566][T32176] autofs4:pid:32176:autofs_fill_super: called with bogus options [ 1653.919959][T32175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8964'. [ 1656.613195][T32191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8967'. [ 1657.975730][T32197] gre8: entered promiscuous mode [ 1657.981323][T32197] bond9: (slave gre8): The slave device specified does not support setting the MAC address [ 1658.033590][T32197] bond9: (slave gre8): Error -95 calling set_mac_address [ 1658.156159][T32191] macvlan3: entered promiscuous mode [ 1658.161525][T32191] macvlan3: entered allmulticast mode [ 1658.233363][T32191] bond9: (slave macvlan3): Error -99 calling set_mac_address [ 1659.814173][T32218] bridge20: entered promiscuous mode [ 1659.819664][T32218] bridge20: entered allmulticast mode [ 1659.838087][T32218] team0: Port device bridge20 added [ 1659.890682][T32218] bridge0: port 1(team0) entered blocking state [ 1659.907208][T32218] bridge0: port 1(team0) entered disabled state [ 1659.918324][T32218] team0: entered allmulticast mode [ 1659.928521][T32218] geneve0: entered allmulticast mode [ 1663.716779][T32262] x_tables: unsorted underflow at hook 3 [ 1665.425164][T32294] netlink: 'syz.3.9002': attribute type 5 has an invalid length. [ 1665.629381][T32299] bridge12: entered promiscuous mode [ 1665.664746][T32299] bridge12: entered allmulticast mode [ 1669.217782][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.227125][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.955368][T32387] overlayfs: failed to resolve './file0': -2 [ 1678.330972][T32461] netlink: 'syz.2.9048': attribute type 1 has an invalid length. [ 1678.387546][T32461] bond7: entered promiscuous mode [ 1678.393281][T32461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1678.428104][T32469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9049'. [ 1679.350420][T32468] bond7: (slave bridge15): making interface the new active one [ 1679.376767][T32468] bridge15: entered promiscuous mode [ 1679.386803][T32468] bond7: (slave bridge15): Enslaving as an active interface with an up link [ 1679.410275][T32475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9049'. [ 1686.157481][T32548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9071'. [ 1698.659917][T32655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1699.559577][T32656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9102'. [ 1702.118486][T32696] overlayfs: failed to resolve './file0': -2 [ 1708.196021][T32742] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9125'. [ 1708.292354][ T28] kauditd_printk_skb: 268 callbacks suppressed [ 1708.292373][ T28] audit: type=1326 audit(1768184896.465:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1708.416184][ T28] audit: type=1326 audit(1768184896.465:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1708.489225][ T28] audit: type=1326 audit(1768184896.475:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1708.512914][ T28] audit: type=1326 audit(1768184896.475:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1708.536372][ T28] audit: type=1326 audit(1768184896.475:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1708.559027][ T28] audit: type=1326 audit(1768184896.475:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1708.624457][ T28] audit: type=1326 audit(1768184896.485:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1708.930260][ T28] audit: type=1326 audit(1768184896.485:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1709.219787][T32750] lo speed is unknown, defaulting to 1000 [ 1709.226130][ T28] audit: type=1326 audit(1768184896.485:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1709.338625][ T28] audit: type=1326 audit(1768184896.485:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd838f749 code=0x7ffc0000 [ 1716.433068][ T337] lo speed is unknown, defaulting to 1000 [ 1716.561595][ T344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9142'. [ 1720.422430][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1724.304837][ T443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9173'. [ 1725.375900][ T454] netlink: 63 bytes leftover after parsing attributes in process `syz.6.9173'. [ 1727.326925][ T504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9188'. [ 1727.353981][ T504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9188'. [ 1730.659841][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.698528][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.058517][ T524] lo speed is unknown, defaulting to 1000 [ 1733.713416][ T558] fuse: Bad value for 'fd' [ 1733.792995][ T560] xt_TCPMSS: Only works on TCP SYN packets [ 1736.224385][ T580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9208'. [ 1738.391772][ T610] tipc: Enabling of bearer rejected, failed to enable media [ 1744.855393][ T649] overlayfs: failed to clone upperpath [ 1746.569573][ T668] netlink: 'syz.1.9233': attribute type 11 has an invalid length. [ 1746.592375][ T668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9233'. [ 1748.700909][ T683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9238'. [ 1748.792571][ T683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9238'. [ 1750.801105][ T701] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9242'. [ 1753.214292][ T729] bond14: (slave gretap2): Releasing active interface [ 1753.232722][ T729] gretap2: left allmulticast mode [ 1758.055764][ T795] netlink: get zone limit has 8 unknown bytes [ 1758.898764][ T801] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9273'. [ 1763.255420][ T840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9277'. [ 1763.374858][ T840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9277'. [ 1764.813062][ T847] lo speed is unknown, defaulting to 1000 [ 1766.814351][ T788] Process accounting resumed [ 1768.571539][ T885] pim6reg: entered allmulticast mode [ 1768.626300][ T885] team0: entered allmulticast mode [ 1770.154838][ T899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.170973][ T899] bond0: entered allmulticast mode [ 1770.189190][ T899] team0: Failed to send options change via netlink (err -105) [ 1770.202946][ T899] team0: Port device bond0 added [ 1775.303779][ T967] team0: Device bond0 failed to register rx_handler [ 1776.337853][ T971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9311'. [ 1776.362470][ T971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9311'. [ 1783.385664][ T1054] netlink: 'syz.6.9330': attribute type 1 has an invalid length. [ 1783.522036][ T1054] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1784.903197][ T1080] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.913826][ T1080] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.930831][ T1080] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.939813][ T1080] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.060169][ T1082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9336'. [ 1787.994297][ T1102] bond7: (slave gretap1): Releasing active interface [ 1788.009807][ T1104] siw: device registration error -23 [ 1788.054029][ T1102] bond8: (slave gretap2): Releasing active interface [ 1788.111670][ T1100] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1790.269117][ T1122] Cannot find add_set index 4 as target [ 1791.113917][ T1128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9349'. [ 1792.195643][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.202055][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.456783][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1795.484527][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1795.662708][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1795.671965][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1796.182772][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1796.392709][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1796.440753][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1796.844906][ T1202] netlink: 'syz.1.9370': attribute type 1 has an invalid length. [ 1797.149322][ T1207] overlayfs: failed to clone upperpath [ 1802.267862][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9393'. [ 1803.263066][ T1266] bond12: (slave bridge15): Enslaving as an active interface with an up link [ 1803.312845][ T1267] bond12: entered promiscuous mode [ 1803.318056][ T1267] bridge15: entered promiscuous mode [ 1803.342877][ T1267] bond12: entered allmulticast mode [ 1803.348208][ T1267] bridge15: entered allmulticast mode [ 1813.958326][ T1381] netlink: 'syz.3.9423': attribute type 10 has an invalid length. [ 1814.004612][ T1383] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9424'. [ 1820.495894][ T1452] tipc: Enabling of bearer rejected, failed to enable media [ 1822.492928][ T1472] netlink: 'syz.1.9446': attribute type 1 has an invalid length. [ 1823.120888][ T1481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1827.305038][ T1512] bridge16: entered allmulticast mode [ 1834.791053][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1834.791070][ T28] audit: type=1326 audit(1768185022.985:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1834.846986][ T1564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9475'. [ 1834.901719][ T28] audit: type=1326 audit(1768185022.985:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1834.940528][ T1568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9475'. [ 1834.958269][ T1568] netlink: 'syz.1.9475': attribute type 10 has an invalid length. [ 1834.992403][ T1568] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 1835.010447][ T28] audit: type=1326 audit(1768185022.995:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1835.045170][ T28] audit: type=1326 audit(1768185022.995:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1835.101502][ T28] audit: type=1326 audit(1768185023.005:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1835.212109][ T28] audit: type=1326 audit(1768185023.005:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1835.248900][ T1570] team0: Device bond0 failed to register rx_handler [ 1835.311208][ T28] audit: type=1326 audit(1768185023.005:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1835.392280][ T28] audit: type=1326 audit(1768185023.005:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1835.447318][ T1574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1835.457884][ T28] audit: type=1326 audit(1768185023.005:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1835.469164][ T1574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1835.532796][ T28] audit: type=1326 audit(1768185023.005:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1565 comm="syz.3.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x7ffc0000 [ 1836.873251][ T1580] bond_slave_1: entered promiscuous mode [ 1836.890548][ T1580] bond_slave_1: left promiscuous mode [ 1838.545599][ T1588] overlayfs: failed to clone upperpath [ 1852.962612][ T1713] lo speed is unknown, defaulting to 1000 [ 1853.537359][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.544027][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.728555][ T1725] netlink: 'syz.1.9525': attribute type 9 has an invalid length. [ 1857.728143][ T1737] lo speed is unknown, defaulting to 1000 [ 1864.803957][ T1791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9542'. [ 1865.137384][ T1795] lo speed is unknown, defaulting to 1000 [ 1865.938947][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1865.938965][ T28] audit: type=1326 audit(1768185310.131:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1807 comm="syz.2.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1866.042416][ T28] audit: type=1326 audit(1768185310.171:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1807 comm="syz.2.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1866.068443][ T28] audit: type=1326 audit(1768185310.171:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1807 comm="syz.2.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1866.108396][ T28] audit: type=1326 audit(1768185310.171:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1807 comm="syz.2.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 1866.440920][ T1813] debugfs: Directory 'netdev:nicvf0' with parent 'phy25' already present! [ 1866.468670][ T1813] debugfs: Directory 'netdev:nicvf0' with parent 'phy25' already present! [ 1868.148883][ T1839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9560'. [ 1869.213656][ T1844] netlink: 'syz.2.9560': attribute type 5 has an invalid length. [ 1869.221488][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9560'. [ 1869.235053][ T1839] netlink: 'syz.2.9560': attribute type 5 has an invalid length. [ 1869.243498][ T1839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9560'. [ 1869.753077][ T1860] netlink: 'syz.1.9566': attribute type 1 has an invalid length. [ 1871.035020][ T1860] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1871.170612][ T1864] bond15: entered allmulticast mode [ 1871.285944][ T1856] lo speed is unknown, defaulting to 1000 [ 1871.728886][ T1875] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1871.780237][ T1877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1873.224003][ T1885] overlayfs: failed to clone upperpath [ 1874.855441][ T1895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9576'. [ 1875.119536][ T1895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1877.219766][ T1913] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9579'. [ 1879.105559][ T1924] lo speed is unknown, defaulting to 1000 [ 1880.481988][ T1927] netlink: 'syz.2.9582': attribute type 1 has an invalid length. [ 1881.168978][ T1927] bond8: entered promiscuous mode [ 1881.195719][ T1927] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1882.526245][ T1933] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1883.044582][ T1933] bond8: (slave bond9): making interface the new active one [ 1883.072331][ T1933] bond9: entered promiscuous mode [ 1883.088570][ T1933] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1887.192571][ T1987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9596'. [ 1888.502558][ T1998] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9598'. [ 1889.221031][ T2003] netlink: 'syz.3.9601': attribute type 1 has an invalid length. [ 1890.144569][ T2003] bond10: entered promiscuous mode [ 1890.150098][ T2003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1890.335254][ T2006] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1890.354173][ T2008] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1890.428806][ T2008] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1890.458003][ T2008] bond10: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1893.018908][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9592'. [ 1893.983035][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9610'. [ 1894.116385][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9610'. [ 1894.173609][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9610'. [ 1894.229526][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9610'. [ 1894.275729][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9610'. [ 1894.481459][ T2071] atomic_op ffff88805e3e7998 conn xmit_atomic 0000000000000000 [ 1898.084976][ T2092] xt_connbytes: Forcing CT accounting to be enabled [ 1898.092616][ T2092] set match dimension is over the limit! [ 1900.838025][ T2110] tipc: Can't bind to reserved service type 0 [ 1902.527961][ T2135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9631'. [ 1906.216530][ T2173] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9635'. [ 1915.299454][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.305863][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.758367][ T2291] tipc: Enabling of bearer rejected, failed to enable media [ 1923.674574][ T2300] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1934.788492][ T2357] batman_adv: batadv0: Adding interface: dummy0 [ 1934.816992][ T2357] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.896724][ T2357] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1935.137556][ T2365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1936.337492][ T2383] netlink: 'syz.1.9694': attribute type 1 has an invalid length. [ 1937.267707][ T2386] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1937.304593][ T2386] bond16: (slave bond17): making interface the new active one [ 1937.773138][ T2386] bond16: (slave bond17): Enslaving as an active interface with an up link [ 1937.857339][ T2387] bond16: (slave gretap3): Enslaving as a backup interface with an up link [ 1941.853424][ T2388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9694'. [ 1941.905102][ T2388] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1948.239754][ T2453] pimreg3: entered allmulticast mode [ 1950.495308][ T2447] Set syz1 is full, maxelem 65536 reached [ 1952.271968][ T2475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9714'. [ 1953.273463][ T28] audit: type=1326 audit(1768185397.471:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2492 comm="syz.2.9717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x0 [ 1959.806848][ T2571] tipc: Enabling of bearer rejected, failed to enable media [ 1961.508575][ T2592] tipc: Enabling of bearer rejected, failed to enable media [ 1961.573732][ T2592] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9735'. [ 1961.639529][ T2592] tipc: Enabling of bearer rejected, failed to enable media [ 1962.128253][ T2604] lo speed is unknown, defaulting to 1000 [ 1966.403445][ T2643] lo speed is unknown, defaulting to 1000 [ 1968.270659][ T2674] tipc: Enabling of bearer rejected, failed to enable media [ 1968.331798][ T2682] netlink: 'syz.3.9751': attribute type 1 has an invalid length. [ 1968.390399][ T2682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1968.464303][ T2682] macvlan3: entered promiscuous mode [ 1968.469687][ T2682] macvlan3: entered allmulticast mode [ 1968.529039][ T2687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9753'. [ 1968.538479][ T2682] bond11: entered promiscuous mode [ 1968.544764][ T2682] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1968.577438][ T2682] bond11: left promiscuous mode [ 1974.505398][ T2738] lo speed is unknown, defaulting to 1000 [ 1974.648753][ T2752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9766'. [ 1974.674488][ T2752] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9766'. [ 1976.426249][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.432684][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1997.607603][ T2933] lo speed is unknown, defaulting to 1000 [ 1999.031059][ T2937] lo speed is unknown, defaulting to 1000 [ 2005.942575][ T2990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9821'. [ 2008.686622][ T3006] lo speed is unknown, defaulting to 1000 [ 2009.683212][ T3017] tipc: Enabling of bearer rejected, failed to enable media [ 2011.808008][ T3026] bond13: entered promiscuous mode [ 2011.931383][ T3026] bond13: entered allmulticast mode [ 2012.369122][ T3026] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2013.353472][ T3048] netlink: 'syz.1.9835': attribute type 10 has an invalid length. [ 2013.367493][ T3048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9835'. [ 2013.427044][ T3048] geneve0: left allmulticast mode [ 2013.443126][ T3048] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2013.676434][ T28] audit: type=1326 audit(1768185457.871:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2013.743754][ T28] audit: type=1326 audit(1768185457.871:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2014.108915][ T28] audit: type=1326 audit(1768185457.871:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2014.672497][ T28] audit: type=1326 audit(1768185457.871:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2014.695530][ T28] audit: type=1326 audit(1768185457.871:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2014.746002][ T28] audit: type=1326 audit(1768185457.871:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2015.065102][ T28] audit: type=1326 audit(1768185457.871:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2015.349418][ T28] audit: type=1326 audit(1768185457.871:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2015.393016][ T28] audit: type=1326 audit(1768185458.161:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2015.422247][ T3068] netlink: 'syz.1.9841': attribute type 10 has an invalid length. [ 2015.443257][ T28] audit: type=1326 audit(1768185458.161:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3054 comm="syz.2.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2018.252493][T25380] wlan1: Trigger new scan to find an IBSS to join [ 2023.212477][T13520] wlan1: Trigger new scan to find an IBSS to join [ 2025.953135][T13520] wlan1: Creating new IBSS network, BSSID d2:fc:e0:f5:44:d5 [ 2027.477012][ T3146] tipc: Enabling of bearer rejected, failed to enable media [ 2029.165537][ T3170] xt_cluster: you have exceeded the maximum number of cluster nodes (1536 > 32) [ 2030.096494][ T3177] netlink: 'syz.1.9867': attribute type 39 has an invalid length. [ 2033.997901][ T3196] netlink: 'syz.1.9873': attribute type 1 has an invalid length. [ 2034.804810][ T3196] 8021q: adding VLAN 0 to HW filter on device bond18 [ 2035.167199][ T3202] veth27: entered promiscuous mode [ 2035.221497][ T3202] bond18: (slave veth27): Enslaving as an active interface with a down link [ 2036.386529][ T3196] bond18: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2037.867436][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.880739][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.268855][ T3232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2044.353445][ T3267] netlink: 'syz.3.9894': attribute type 1 has an invalid length. [ 2048.790886][ T3311] xt_cluster: node mask cannot exceed total number of nodes [ 2050.020676][ T3318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9909'. [ 2051.217654][ T3333] UBIFS error (pid: 3333): cannot open "./file0", error -22 [ 2054.135690][ T3347] xt_l2tp: v2 doesn't support IP mode [ 2056.752353][ T3361] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore [ 2056.762236][ T3361] overlayfs: missing 'lowerdir' [ 2058.395793][ T1946] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2062.913907][ T3414] tipc: Enabled bearer , priority 0 [ 2080.857772][ T3533] ip6gre4: entered promiscuous mode [ 2080.876824][ T3533] ip6gre4: entered allmulticast mode [ 2081.063608][ T3537] tipc: Enabling of bearer rejected, already enabled [ 2081.899166][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 2081.899223][ T28] audit: type=1326 audit(1768185526.093:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2082.448928][ T28] audit: type=1326 audit(1768185526.093:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2082.558888][ T28] audit: type=1326 audit(1768185526.093:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2082.634072][ T28] audit: type=1326 audit(1768185526.093:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2082.657082][ T28] audit: type=1326 audit(1768185526.093:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2082.680298][ T28] audit: type=1326 audit(1768185526.093:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2082.704216][ T28] audit: type=1326 audit(1768185526.093:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2082.737145][ T28] audit: type=1326 audit(1768185526.093:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3541 comm="syz.2.9964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2086.421135][ T3569] tipc: Enabling of bearer rejected, already enabled [ 2092.251069][ T1946] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2095.889924][ T28] audit: type=1326 audit(1768185540.053:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2096.010377][ T28] audit: type=1326 audit(1768185540.053:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2096.034012][ T28] audit: type=1326 audit(1768185540.063:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2096.057695][ T28] audit: type=1326 audit(1768185540.063:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2096.086997][ T28] audit: type=1326 audit(1768185540.063:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2096.273322][ T28] audit: type=1326 audit(1768185540.073:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2097.012314][ T28] audit: type=1326 audit(1768185540.073:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2097.078649][ T28] audit: type=1326 audit(1768185540.073:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2097.130864][ T28] audit: type=1326 audit(1768185540.073:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2097.929204][ T28] audit: type=1326 audit(1768185540.153:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3640 comm="syz.2.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2099.302694][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.319343][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2108.286094][ T3741] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.10026'. [ 2108.295603][ T3741] openvswitch: netlink: ct_state flags 00030000 unsupported [ 2115.384377][ T3785] bridge22: entered promiscuous mode [ 2115.389999][ T3785] bridge22: entered allmulticast mode [ 2117.912577][T27543] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 2117.927834][T27543] CPU: 1 PID: 27543 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2117.935550][T27543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2117.945647][T27543] Workqueue: hci3 hci_rx_work [ 2117.950417][T27543] Call Trace: [ 2117.953908][T27543] [ 2117.956879][T27543] dump_stack_lvl+0x16c/0x230 [ 2117.961626][T27543] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2117.967840][T27543] ? show_regs_print_info+0x20/0x20 [ 2117.973075][T27543] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2117.979302][T27543] sysfs_create_dir_ns+0x256/0x280 [ 2117.984480][T27543] ? sysfs_warn_dup+0xa0/0xa0 [ 2117.989213][T27543] ? do_raw_spin_unlock+0x121/0x230 [ 2117.994470][T27543] kobject_add_internal+0x6b8/0xc70 [ 2117.999726][T27543] kobject_add+0x156/0x220 [ 2118.004206][T27543] ? kobject_init+0x1e0/0x1e0 [ 2118.008940][T27543] ? _raw_spin_unlock+0x3a/0x40 [ 2118.013846][T27543] ? get_device_parent+0x366/0x390 [ 2118.019019][T27543] device_add+0x408/0xc20 [ 2118.023409][T27543] hci_conn_add_sysfs+0xd5/0x1e0 [ 2118.028505][T27543] le_conn_complete_evt+0xf36/0x1500 [ 2118.033869][T27543] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 2118.040167][T27543] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2118.045851][T27543] ? lockdep_hardirqs_on+0x98/0x150 [ 2118.051111][T27543] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2118.056813][T27543] hci_le_conn_complete_evt+0x187/0x440 [ 2118.062416][T27543] ? hci_remote_host_features_evt+0x160/0x160 [ 2118.068536][T27543] hci_event_packet+0x795/0x1210 [ 2118.073531][T27543] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2118.079218][T27543] ? bis_list+0x290/0x290 [ 2118.083605][T27543] ? hci_send_to_monitor+0xd7/0x4f0 [ 2118.088853][T27543] hci_rx_work+0x43a/0xd80 [ 2118.093333][T27543] ? process_scheduled_works+0x957/0x15b0 [ 2118.099107][T27543] process_scheduled_works+0xa45/0x15b0 [ 2118.104739][T27543] ? assign_work+0x400/0x400 [ 2118.109405][T27543] ? assign_work+0x39e/0x400 [ 2118.114048][T27543] worker_thread+0xa55/0xfc0 [ 2118.118690][T27543] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2118.124640][T27543] ? _raw_spin_unlock+0x40/0x40 [ 2118.129549][T27543] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 2118.135519][T27543] kthread+0x2fa/0x390 [ 2118.139626][T27543] ? pr_cont_work+0x560/0x560 [ 2118.144351][T27543] ? kthread_blkcg+0xd0/0xd0 [ 2118.148987][T27543] ret_from_fork+0x48/0x80 [ 2118.153468][T27543] ? kthread_blkcg+0xd0/0xd0 [ 2118.158096][T27543] ret_from_fork_asm+0x11/0x20 [ 2118.162928][T27543] [ 2118.489356][T27543] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2118.503823][T27543] Bluetooth: hci3: failed to register connection device [ 2125.369863][ T3854] netlink: 'syz.6.10058': attribute type 3 has an invalid length. [ 2126.922119][T25899] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2129.209163][ T3870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10064'. [ 2131.643389][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10068'. [ 2131.767837][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10067'. [ 2132.462620][ T3889] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2132.471045][ T3889] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2132.479424][ T3889] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2132.487654][ T3889] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2132.555367][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10068'. [ 2132.598802][ T3891] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2132.608400][ T3891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2132.618322][ T3891] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2132.737976][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 2132.737996][ T28] audit: type=1800 audit(1768185576.795:1353): pid=3891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10067" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 2132.879105][ T3895] vlan3: entered promiscuous mode [ 2132.884418][ T3895] vlan3: entered allmulticast mode [ 2134.752219][ T3906] lo speed is unknown, defaulting to 1000 [ 2139.897137][ T3956] bridge0: entered allmulticast mode [ 2139.960508][ T3954] team0: left allmulticast mode [ 2139.965543][ T3954] geneve0: left allmulticast mode [ 2140.913277][ T3954] bridge0: port 1(team0) entered disabled state [ 2142.218331][ T3971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10088'. [ 2143.724796][ T3985] atomic_op ffff888069805198 conn xmit_atomic 0000000000000000 [ 2149.839209][ T4062] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10107'. [ 2151.798922][ T4072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10111'. [ 2152.000274][ T4078] atomic_op ffff88807c117198 conn xmit_atomic 0000000000000000 [ 2157.438601][ T4129] atomic_op ffff88807bcaf998 conn xmit_atomic 0000000000000000 [ 2159.116541][ T4138] tipc: Enabling of bearer rejected, already enabled [ 2161.363611][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.376233][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.397811][T30953] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2162.538991][ T28] audit: type=1326 audit(1768185606.747:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4166 comm="syz.3.10138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11fd38f749 code=0x0 [ 2169.282167][ T4225] tipc: Enabling of bearer rejected, failed to enable media [ 2177.604033][ T4285] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10166'. [ 2179.583673][ T4331] 9pnet_fd: p9_fd_create_tcp (4331): problem connecting socket to 127.0.0.1 [ 2181.546038][ T4342] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.10181'. [ 2182.355570][ T4347] netlink: 'syz.2.10183': attribute type 1 has an invalid length. [ 2182.429671][ T4347] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2182.548810][ T4350] vlan0: entered allmulticast mode [ 2182.570402][ T4350] bond11: entered allmulticast mode [ 2190.291855][ T4401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2193.374676][T25373] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2195.494236][ T4469] xt_l2tp: v2 doesn't support IP mode [ 2195.892599][ T4476] fuse: Bad value for 'fd' [ 2196.443686][ T4488] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2199.066978][T12441] Bluetooth: hci3: command 0x0406 tx timeout [ 2199.663152][ T4509] netlink: 'syz.6.10227': attribute type 10 has an invalid length. [ 2202.571310][ T4531] ip6gre2: entered promiscuous mode [ 2202.621599][ T4531] ip6gre2: entered allmulticast mode [ 2210.694650][ T4583] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore [ 2210.704482][ T4583] overlayfs: missing 'lowerdir' [ 2212.145704][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10244'. [ 2213.837343][ T4602] netlink: 'syz.6.10250': attribute type 21 has an invalid length. [ 2213.863849][ T4602] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10250'. [ 2222.234012][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2223.773220][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2226.647300][T25380] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2227.930512][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10273'. [ 2231.799403][ T4746] bridge14: entered promiscuous mode [ 2231.804877][ T4746] bridge14: entered allmulticast mode [ 2232.952345][ T4737] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10278'. [ 2234.282174][ T4751] netlink: 'syz.3.10289': attribute type 3 has an invalid length. [ 2235.122217][ T4763] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2237.584296][ T4778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10288'. [ 2240.976584][ T4804] netlink: 'syz.3.10297': attribute type 4 has an invalid length. [ 2241.183532][ T4810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10308'. [ 2241.198280][ T4810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10308'. [ 2242.666386][ T4827] netlink: 'syz.3.10312': attribute type 1 has an invalid length. [ 2242.748096][ T4827] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2243.113260][ T4827] veth21: entered promiscuous mode [ 2243.455083][ T4827] bond12: (slave veth21): Enslaving as an active interface with a down link [ 2243.602538][ T4831] bond12: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2249.503499][ T4899] CIFS: Unable to determine destination address [ 2249.510721][ T4899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10322'. [ 2251.581504][ T4912] ptrace attach of "./syz-executor exec"[5775] was attempted by " [ 2258.682747][T25367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2263.239532][ T5004] netlink: 'syz.2.10348': attribute type 10 has an invalid length. [ 2263.247737][ T5004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10348'. [ 2266.904293][ T5031] tipc: Enabling of bearer rejected, failed to enable media [ 2268.220989][ T5045] netlink: 'syz.2.10359': attribute type 4 has an invalid length. [ 2269.417520][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10363'. [ 2273.330146][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10368'. [ 2278.850425][ T5151] debugfs: Directory 'netdev:nicvf0' with parent 'phy25' already present! [ 2279.329670][ T28] audit: type=1326 audit(1768185723.534:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.2.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2279.393290][ T28] audit: type=1326 audit(1768185723.534:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.2.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2280.093752][ T28] audit: type=1326 audit(1768185723.574:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.2.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2280.333017][ T5161] netem: change failed [ 2280.439558][ T28] audit: type=1326 audit(1768185723.574:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.2.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2280.528522][ T28] audit: type=1326 audit(1768185723.594:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.2.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2280.657492][ T28] audit: type=1326 audit(1768185723.594:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.2.10383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5ecb98f749 code=0x7ffc0000 [ 2280.765045][ T28] audit: type=1326 audit(1768185723.594:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.2.10383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ecb98f749 code=0x0 [ 2283.603679][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.610213][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2291.240272][T25386] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2292.938160][ T5271] netlink: 'syz.3.10412': attribute type 30 has an invalid length. [ 2294.081592][ T5276] tipc: Enabling of bearer rejected, already enabled [ 2298.538089][ T5306] tipc: Enabling of bearer rejected, failed to enable media [ 2308.521908][ T5376] tipc: Enabling of bearer rejected, failed to enable media [ 2311.780943][ T5398] overlayfs: failed to clone upperpath [ 2313.184130][ T5406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2314.571924][ T5410] syz.1.10446 (5410) used greatest stack depth: 17576 bytes left [ 2321.886692][ T5478] xt_NFQUEUE: number of total queues is 0 [ 2322.319023][ T5487] overlayfs: failed to clone upperpath [ 2324.589380][T13520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2332.014054][ T5539] netlink: 'syz.3.10481': attribute type 1 has an invalid length. [ 2332.022085][ T5539] netlink: 'syz.3.10481': attribute type 4 has an invalid length. [ 2332.530415][ T5539] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.10481'. [ 2334.387561][ T5562] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10478'. [ 2344.106149][ T5611] Set syz1 is full, maxelem 65536 reached [ 2345.072079][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.080474][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2354.525869][ T5689] overlay: ./bus is not a directory [ 2355.472288][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10520'. [ 2357.683545][ T5722] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2358.568474][ T5734] overlayfs: failed to clone upperpath [ 2365.068106][ T5782] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10542'. [ 2368.248538][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10544'. [ 2406.482781][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.489169][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2409.205215][T12441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2409.246270][T12441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2409.262887][T12441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2409.289656][T12441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2409.315664][T12441] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2409.335578][T12441] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2409.451609][ T6023] lo speed is unknown, defaulting to 1000 [ 2410.603881][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10592'. [ 2410.937061][T13520] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2410.993781][ T6038] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 2411.014725][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10605'. [ 2411.644618][ T3802] Bluetooth: hci4: command tx timeout [ 2411.753652][T13520] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2411.792823][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 2412.107843][T13520] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2414.687603][ T3802] Bluetooth: hci4: command tx timeout [ 2415.232072][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.243074][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.266764][ T6023] bridge_slave_0: entered allmulticast mode [ 2415.274780][ T6023] bridge_slave_0: entered promiscuous mode [ 2415.569833][T13520] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2415.600830][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.615297][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.868658][ T6068] nfs: Unknown parameter 'ntext' [ 2415.911257][ T6023] bridge_slave_1: entered allmulticast mode [ 2416.568028][ T6023] bridge_slave_1: entered promiscuous mode [ 2416.700913][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2416.712125][ T3802] Bluetooth: hci4: command tx timeout [ 2416.721227][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2417.311949][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10614'. [ 2419.092871][ T3802] Bluetooth: hci4: command tx timeout [ 2419.278047][ T6023] team0: Port device team_slave_0 added [ 2419.335382][ T6023] team0: Port device team_slave_1 added [ 2419.751281][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2419.782268][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2419.901288][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2420.361693][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2420.368717][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2420.511835][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2420.703400][T13520] tipc: Disabling bearer [ 2420.709131][T13520] tipc: Disabling bearer [ 2420.799760][T13520] tipc: Left network mode [ 2420.889844][ T6023] hsr_slave_0: entered promiscuous mode [ 2421.002426][ T6023] hsr_slave_1: entered promiscuous mode [ 2421.013697][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2421.021314][ T6023] Cannot create hsr debugfs directory [ 2424.676109][T13520] bond5: (slave gretap3): Releasing active interface [ 2425.242538][ T28] audit: type=1326 audit(1768185869.462:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.10628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b32d8f749 code=0x0 [ 2426.416835][ T6023] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2426.458151][ T6023] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2427.690838][ T6023] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2427.719629][T13520] bridge0: port 2(veth39) entered disabled state [ 2427.773323][T13520] bridge0: port 1(veth37) entered disabled state [ 2427.831151][T13520] veth1: left promiscuous mode [ 2427.860271][T13520] bridge14: left promiscuous mode [ 2427.965106][T13520] hsr_slave_0: left promiscuous mode [ 2428.116142][ T6146] nfs: Unknown parameter 'ntext' [ 2429.181650][T13520] bond11 (unregistering): Released all slaves [ 2429.201333][T13520] bond10 (unregistering): Released all slaves [ 2429.936917][T13520] bond8 (unregistering): (slave bond9): Releasing backup interface [ 2429.989785][T13520] bond9 (unregistering): left promiscuous mode [ 2430.184841][T13520] bond9 (unregistering): Released all slaves [ 2430.562680][T13520] bond8 (unregistering): Released all slaves [ 2430.653022][T13520] pim6reg (unregistering): left allmulticast mode [ 2430.683788][T13520] bond7 (unregistering): (slave bridge15): Releasing backup interface [ 2430.695765][T13520] bridge15 (unregistering): left promiscuous mode [ 2431.017691][T13520] bond7 (unregistering): Released all slaves [ 2431.035364][T13520] bond6 (unregistering): Released all slaves [ 2431.485142][T13520] bond5 (unregistering): Released all slaves [ 2431.779156][T13520] bond4 (unregistering): Released all slaves [ 2432.249972][T13520] team0 (unregistering): Port device bond0 removed [ 2432.258875][T13520] bond0 (unregistering): Released all slaves [ 2432.467805][T13520] bond3 (unregistering): Released all slaves [ 2432.745022][T13520] bond2 (unregistering): Released all slaves [ 2433.316895][T13520] bond1 (unregistering): Released all slaves [ 2434.804068][T13520] team0 (unregistering): left allmulticast mode [ 2434.869923][ T6023] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2435.118198][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2435.186647][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 2435.217088][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 2435.224438][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2435.239836][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.247051][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2435.633323][T13520] IPVS: stop unused estimator thread 0... [ 2435.683934][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2435.959708][ T6023] veth0_vlan: entered promiscuous mode [ 2435.974178][ T6023] veth1_vlan: entered promiscuous mode [ 2436.010403][ T6023] veth0_macvtap: entered promiscuous mode [ 2436.022412][ T6023] veth1_macvtap: entered promiscuous mode [ 2436.045139][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2436.056547][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.068929][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2436.086426][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2436.097457][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.109567][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2436.126635][ T6023] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.135679][ T6023] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.145234][ T6023] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.154809][ T6023] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.258919][ T5459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2436.277159][ T5459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2436.309149][ T5455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2436.318302][ T5455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2440.225151][ T6186] loop8: detected capacity change from 0 to 256 [ 2441.627189][ T6186] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 256) [ 2455.314106][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10657'. [ 2468.195155][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.202389][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2474.783628][ T6369] loop8: detected capacity change from 0 to 1024 [ 2474.821278][ T6369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2474.892047][ T6369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2475.680728][ T6367] netlink: 71 bytes leftover after parsing attributes in process `syz.6.10684'. [ 2475.970569][ T6023] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2477.404908][ T6390] lo speed is unknown, defaulting to 1000 [ 2477.990814][ T6401] xt_connbytes: Forcing CT accounting to be enabled [ 2477.997580][ T6401] set match dimension is over the limit! [ 2479.508594][T31952] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2479.733282][T31952] usb 9-1: config 0 has no interfaces? [ 2479.780172][T31952] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2479.812718][T31952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.832722][T31952] usb 9-1: Product: syz [ 2479.847402][T31952] usb 9-1: Manufacturer: syz [ 2479.877423][T31952] usb 9-1: SerialNumber: syz [ 2479.890074][T31952] usb 9-1: config 0 descriptor?? [ 2480.200067][T31952] usb 9-1: USB disconnect, device number 2 [ 2482.937271][ T6450] lo speed is unknown, defaulting to 1000 [ 2490.995466][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10721'. [ 2491.005256][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10721'. [ 2491.387603][ T4761] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 2491.595378][ T4761] usb 9-1: config 6 has an invalid interface number: 2 but max is 0 [ 2492.818908][ T4761] usb 9-1: config 6 has no interface number 0 [ 2492.849863][ T4761] usb 9-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2492.884904][ T4761] usb 9-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2493.156160][ T4761] usb 9-1: string descriptor 0 read error: -71 [ 2493.196542][ T4761] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 2493.237566][ T4761] usb 9-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 2493.278578][ T4761] usb 9-1: can't set config #6, error -71 [ 2493.329218][ T4761] usb 9-1: USB disconnect, device number 3 [ 2498.718922][ T6544] loop8: detected capacity change from 0 to 1024 [ 2498.788479][ T6544] EXT4-fs: Ignoring removed bh option [ 2498.794036][ T6544] EXT4-fs: Ignoring removed nobh option [ 2498.880099][ T6544] EXT4-fs: Ignoring removed bh option [ 2498.907301][ T6544] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2500.209320][ T6544] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2501.565840][ T6562] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4047: comm syz.8.10731: Allocating blocks 497-513 which overlap fs metadata [ 2502.138876][ T6562] EXT4-fs (loop8): pa ffff888059def488: logic 256, phys. 385, len 8 [ 2502.147993][ T6562] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 2503.952147][ T6023] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2523.704591][ T6644] loop8: detected capacity change from 0 to 4096 [ 2524.334601][ T6644] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 2524.536417][ T6644] ntfs3: loop8: Failed to load $Extend (-22). [ 2524.542665][ T6644] ntfs3: loop8: Failed to initialize $Extend. [ 2527.724966][ T6677] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 2529.256095][ T6685] loop8: detected capacity change from 0 to 4096 [ 2529.350457][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.365619][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.374809][ T6695] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10769'. [ 2529.407517][ T6685] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 2529.415127][ T6685] ntfs3: loop8: Failed to initialize $Extend/$Reparse. [ 2529.839246][ T6702] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10767'. [ 2533.162324][ T6728] tipc: Enabled bearer , priority 15 [ 2536.562661][ T6733] Bluetooth: hci4: command 0x0406 tx timeout [ 2550.015235][ T6849] tipc: Enabling of bearer rejected, already enabled [ 2552.799404][ T6862] netlink: 184 bytes leftover after parsing attributes in process `syz.6.10811'. [ 2553.954427][ T6867] loop8: detected capacity change from 0 to 256 [ 2553.961856][ T6867] exfat: Deprecated parameter 'utf8' [ 2554.140382][ T6867] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 2555.307073][ T6877] netlink: 'syz.3.10816': attribute type 10 has an invalid length. [ 2556.377082][ T6877] team0: Port device geneve0 removed [ 2562.597256][ T6898] IPVS: starting estimator thread 0... [ 2563.743577][ T6916] IPVS: using max 25 ests per chain, 60000 per kthread [ 2564.161900][ T6935] tipc: Started in network mode [ 2564.185778][ T6935] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2564.193189][ T6935] tipc: Enabled bearer , priority 0 [ 2564.289136][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10827'. [ 2565.303425][T31952] tipc: Node number set to 11578026 [ 2569.172540][ T6981] smc: net device bond0 applied user defined pnetid SYZ2 [ 2569.182926][ T6981] smc: net device bond0 erased user defined pnetid SYZ2 [ 2569.570712][ T6982] tipc: Enabled bearer , priority 15 [ 2571.024370][ T6985] loop8: detected capacity change from 0 to 8192 [ 2577.206660][ T7029] tipc: Enabling of bearer rejected, already enabled [ 2577.647119][ T7036] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2580.072193][ T7053] tipc: Enabled bearer , priority 15 [ 2580.905039][ T7058] set match dimension is over the limit! [ 2584.549410][ T7079] loop8: detected capacity change from 0 to 512 [ 2584.567090][ T7079] EXT4-fs: inline encryption not supported [ 2584.586541][ T7079] EXT4-fs: Ignoring removed i_version option [ 2584.812108][ T7079] EXT4-fs (loop8): 1 orphan inode deleted [ 2584.825354][ T7079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2584.877829][ T7077] lo speed is unknown, defaulting to 1000 [ 2585.191719][ T7089] xt_socket: unknown flags 0x40 [ 2585.727280][ T6023] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2588.372076][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10866'. [ 2590.859342][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.871761][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.171130][ T7126] loop8: detected capacity change from 0 to 64 [ 2595.193635][ T6910] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2595.364470][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10880'. [ 2596.082657][ T7140] set match dimension is over the limit! [ 2606.693310][ T7193] set match dimension is over the limit! [ 2609.126938][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10901'. [ 2612.005205][ T7228] rdma_op ffff888066f469f0 conn xmit_rdma 0000000000000000 [ 2613.357697][ T7233] loop8: detected capacity change from 0 to 4096 [ 2613.505106][ T7233] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 2613.713988][ T7233] ntfs3: loop8: volume is dirty and "force" flag is not set! [ 2620.899669][ T7272] trusted_key: encrypted_key: insufficient parameters specified [ 2622.492533][ T7283] netlink: 'syz.1.10920': attribute type 10 has an invalid length. [ 2622.548975][ T7283] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10920'. [ 2642.232518][ T7393] syz_tun: left allmulticast mode [ 2644.262300][ T7397] netlink: 'syz.8.10952': attribute type 1 has an invalid length. [ 2644.293803][ T7397] bond1: entered promiscuous mode [ 2644.301876][ T7397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2644.382895][ T7401] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2644.429106][ T7401] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2644.469393][ T7401] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 2644.581941][ T7397] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2644.598919][ T7397] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2646.279691][ T7416] netlink: 'syz.3.10946': attribute type 39 has an invalid length. [ 2646.943789][ T7419] Process accounting resumed [ 2649.396703][ T7450] lo: entered allmulticast mode [ 2649.403097][ T7450] tunl0: entered allmulticast mode [ 2649.824084][ T7450] gre0: entered allmulticast mode [ 2650.316100][ T7450] gretap0: entered allmulticast mode [ 2650.322076][ T7450] erspan0: entered allmulticast mode [ 2650.328844][ T7450] ip_vti0: entered allmulticast mode [ 2650.334507][ T7450] ip6_vti0: entered allmulticast mode [ 2650.465223][ T7450] sit0: entered allmulticast mode [ 2650.593843][ T7450] ip6tnl0: entered allmulticast mode [ 2650.735960][ T7450] ip6gre0: entered allmulticast mode [ 2650.921060][ T7450] ip6gretap0: entered allmulticast mode [ 2651.054451][ T7450] bond0: entered allmulticast mode [ 2652.267034][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.274117][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.330454][ T7450] team0: entered allmulticast mode [ 2652.386773][ T7450] dummy0: entered allmulticast mode [ 2652.399022][ T7450] nlmon0: entered allmulticast mode [ 2652.404623][ T7450] caif0: entered allmulticast mode [ 2652.410696][ T7450] batadv0: entered allmulticast mode [ 2652.416460][ T7450] veth0: entered allmulticast mode [ 2652.422421][ T7450] veth1: entered allmulticast mode [ 2652.427930][ T7450] wg1: entered allmulticast mode [ 2652.433813][ T7450] wg2: entered allmulticast mode [ 2652.439532][ T7450] veth0_to_bridge: entered allmulticast mode [ 2652.446025][ T7450] bridge_slave_0: entered allmulticast mode [ 2652.452852][ T7450] veth1_to_bridge: entered allmulticast mode [ 2652.464076][ T7450] bridge_slave_1: entered allmulticast mode [ 2652.472432][ T7450] veth0_to_bond: entered allmulticast mode [ 2652.482761][ T7450] bond_slave_0: entered allmulticast mode [ 2652.489875][ T7450] veth1_to_team: entered allmulticast mode [ 2652.497167][ T7450] team_slave_1: entered allmulticast mode [ 2652.504036][ T7450] veth0_to_batadv: entered allmulticast mode [ 2652.511968][ T7450] batadv_slave_0: entered allmulticast mode [ 2652.519372][ T7450] veth1_to_batadv: entered allmulticast mode [ 2652.526859][ T7450] batadv_slave_1: entered allmulticast mode [ 2652.533985][ T7450] xfrm0: entered allmulticast mode [ 2652.540887][ T7450] veth0_to_hsr: entered allmulticast mode [ 2652.547015][ T7450] hsr_slave_0: entered allmulticast mode [ 2652.557760][ T7450] veth1_to_hsr: entered allmulticast mode [ 2652.566542][ T7450] hsr_slave_1: entered allmulticast mode [ 2652.581024][ T7450] hsr0: entered allmulticast mode [ 2652.586441][ T7450] veth1_virt_wifi: entered allmulticast mode [ 2652.657864][ T7450] veth0_virt_wifi: entered allmulticast mode [ 2652.672137][ T7450] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2652.688805][ T7450] veth1_vlan: entered allmulticast mode [ 2652.694659][ T7450] veth0_vlan: entered allmulticast mode [ 2652.712523][ T7450] ªªªªªª: entered allmulticast mode [ 2652.718037][ T7450] vlan1: entered allmulticast mode [ 2652.732831][ T7450] macvlan0: entered allmulticast mode [ 2652.743711][ T7450] macvlan1: entered allmulticast mode [ 2652.753051][ T7450] ipvlan0: entered allmulticast mode [ 2652.763734][ T7450] ipvlan1: entered allmulticast mode [ 2652.773227][ T7450] veth1_macvtap: entered allmulticast mode [ 2652.784349][ T7450] veth0_macvtap: entered allmulticast mode [ 2652.794240][ T7450] macvtap0: entered allmulticast mode [ 2652.804783][ T7450] macsec0: entered allmulticast mode [ 2652.815810][ T7450] geneve1: entered allmulticast mode [ 2652.828088][ T7450] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 2652.844299][ T7450] bridge1: entered allmulticast mode [ 2652.852578][ T7450] ip6gre1: entered allmulticast mode [ 2652.858048][ T7450] ip6tnl1: entered allmulticast mode [ 2652.872020][ T7450] bridge2: entered allmulticast mode [ 2652.877535][ T7450] gre1: entered allmulticast mode [ 2652.892258][ T7450] veth2: entered allmulticast mode [ 2652.897634][ T7450] veth3: entered allmulticast mode [ 2652.907991][ T7450] bond1: entered allmulticast mode [ 2652.917621][ T7450] veth4: entered allmulticast mode [ 2652.936249][ T7450] veth5: entered allmulticast mode [ 2652.945478][ T7450] sit1: entered allmulticast mode [ 2652.956014][ T7450] bridge3: entered allmulticast mode [ 2652.965565][ T7450] bridge4: entered allmulticast mode [ 2652.976197][ T7450] bridge5: entered allmulticast mode [ 2652.985680][ T7450] bridge6: entered allmulticast mode [ 2652.996129][ T7450] erspan1: entered allmulticast mode [ 2653.005563][ T7450] bridge7: entered allmulticast mode [ 2653.016123][ T7450] team1: entered allmulticast mode [ 2653.025277][ T7450] bridge8: entered allmulticast mode [ 2653.037411][ T7450] gre2: entered allmulticast mode [ 2653.053224][ T7450] gre3: entered allmulticast mode [ 2653.062338][ T7450] bridge9: entered allmulticast mode [ 2653.067872][ T7450] bridge10: entered allmulticast mode [ 2653.082346][ T7450] gre4: entered allmulticast mode [ 2653.087776][ T7450] bond2: entered allmulticast mode [ 2653.098208][ T7450] bridge11: entered allmulticast mode [ 2653.107684][ T7450] mac80211_hwsim hwsim37 wlan2: entered allmulticast mode [ 2653.123803][ T7450] gre5: entered allmulticast mode [ 2653.131775][ T7450] bridge12: entered allmulticast mode [ 2653.137368][ T7450] ~ÿ: entered allmulticast mode [ 2653.154434][ T7450] bond3: entered allmulticast mode [ 2653.163703][ T7450] veth6: entered allmulticast mode [ 2653.174542][ T7450] veth7: entered allmulticast mode [ 2653.184226][ T7450] bond4: entered allmulticast mode [ 2653.195427][ T7450] veth8: entered allmulticast mode [ 2653.204766][ T7450] veth9: entered allmulticast mode [ 2653.215490][ T7450] bridge13: entered allmulticast mode [ 2653.225193][ T7450] bridge14: entered allmulticast mode [ 2653.235775][ T7450] bridge15: entered allmulticast mode [ 2653.245237][ T7450] bond5: entered allmulticast mode [ 2653.263838][ T7450] veth10: entered allmulticast mode [ 2653.274537][ T7450] veth11: entered allmulticast mode [ 2653.283988][ T7450] syztnl0: entered allmulticast mode [ 2653.296210][ T7450] @: entered allmulticast mode [ 2653.305032][ T7450] bridge16: entered allmulticast mode [ 2653.315598][ T7450] bond6: entered allmulticast mode [ 2653.324890][ T7450] gre6: entered allmulticast mode [ 2653.335109][ T7450] bridge17: entered allmulticast mode [ 2653.365998][ T7450] gre7: entered allmulticast mode [ 2653.381726][ T7450] bond7: entered allmulticast mode [ 2653.387928][ T7450] macvlan2: entered allmulticast mode [ 2653.398982][ T7450] veth12: entered allmulticast mode [ 2653.404476][ T7450] veth13: entered allmulticast mode [ 2653.410537][ T7450] veth14: entered allmulticast mode [ 2653.416054][ T7450] veth15: entered allmulticast mode [ 2653.421675][ T7450] bridge18: entered allmulticast mode [ 2653.427413][ T7450] bond8: entered allmulticast mode [ 2653.433508][ T7450] ip6gretap1: entered allmulticast mode [ 2653.439778][ T7450] veth16: entered allmulticast mode [ 2653.445922][ T7450] veth17: entered allmulticast mode [ 2653.455201][ T7450] xfrm1: entered allmulticast mode [ 2653.465423][ T7450] vlan0: left promiscuous mode [ 2653.475574][ T7450] gretap0: left promiscuous mode [ 2653.487051][ T7450] vlan0: entered allmulticast mode [ 2653.496340][ T7450] ipvlan2: entered allmulticast mode [ 2653.507895][ T7450] bridge19: entered allmulticast mode [ 2653.517289][ T7450] batadv1: entered allmulticast mode [ 2653.527894][ T7450] netdevsim netdevsim3 eth0: entered allmulticast mode [ 2653.543212][ T7450] netdevsim netdevsim3 eth1: entered allmulticast mode [ 2653.552807][ T7450] netdevsim netdevsim3 eth2: entered allmulticast mode [ 2653.566367][ T7450] netdevsim netdevsim3 eth3: entered allmulticast mode [ 2653.576017][ T7450] syztnl1: entered allmulticast mode [ 2653.589260][ T7450] sit2: entered allmulticast mode [ 2653.594674][ T7450] bond9: entered allmulticast mode [ 2653.601101][ T7450] bridge20: left promiscuous mode [ 2653.606440][ T7450] syztnl2: entered allmulticast mode [ 2653.612462][ T7450] mac80211_hwsim hwsim24 nicvf0: entered allmulticast mode [ 2653.621469][ T7450] bond10: left promiscuous mode [ 2653.627720][ T7450] bond10: entered allmulticast mode [ 2653.651612][ T7450] bond11: entered allmulticast mode [ 2653.670460][ T7450] bridge21: entered allmulticast mode [ 2653.702526][ T7450] veth18: entered allmulticast mode [ 2653.708016][ T7450] veth19: entered allmulticast mode [ 2653.716061][ T7450] bridge22: left promiscuous mode [ 2653.745122][ T7450] ip6gre2: left promiscuous mode [ 2653.787771][ T7450] bond12: entered allmulticast mode [ 2653.808076][ T7450] veth20: entered allmulticast mode [ 2653.826504][ T7450] veth21: left promiscuous mode [ 2653.834411][ T7450] veth21: entered allmulticast mode [ 2654.025825][ T7462] netlink: 'syz.1.10967': attribute type 39 has an invalid length. [ 2654.221334][ T7470] overlayfs: failed to clone lowerpath [ 2654.603815][ T7469] tipc: Enabled bearer , priority 0 [ 2655.897448][ T7473] tipc: Resetting bearer [ 2656.192901][ T7468] tipc: Disabling bearer [ 2657.103167][ T7484] loop8: detected capacity change from 0 to 16 [ 2657.700068][ T7484] erofs: (device loop8): mounted with root inode @ nid 36. [ 2668.876325][ T7555] netlink: 260 bytes leftover after parsing attributes in process `syz.1.10992'. [ 2671.659503][ T7568] netlink: 'syz.6.10996': attribute type 10 has an invalid length. [ 2671.667652][ T7568] bridge0: left allmulticast mode [ 2671.675592][ T7568] bridge0: entered promiscuous mode [ 2671.681181][ T7568] bridge0: entered allmulticast mode [ 2671.686922][ T7568] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2672.082993][ T7572] loop8: detected capacity change from 0 to 40427 [ 2672.160624][ T7572] F2FS-fs (loop8): invalid crc value [ 2672.400068][ T7572] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2672.967636][ T7572] F2FS-fs (loop8): Start checkpoint disabled! [ 2673.127482][ T7572] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 2673.235697][ T28] audit: type=1800 audit(1768186117.466:1363): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10997" name="bus" dev="loop8" ino=14 res=0 errno=0 [ 2673.269836][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.269836][ T7572] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 2673.286435][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.286435][ T7572] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2673.302281][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.302281][ T7572] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2673.317714][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.317714][ T7572] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2673.332039][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.332039][ T7572] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2673.348937][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.348937][ T7572] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 2673.363143][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.363143][ T7572] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2673.377712][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.377712][ T7572] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 2673.392151][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.392151][ T7572] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 2673.406445][ T7572] syz.8.10997: attempt to access beyond end of device [ 2673.406445][ T7572] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 2674.734848][ T5459] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 2674.744275][ T5459] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 2674.751667][ T5459] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 2680.047847][ T7619] loop8: detected capacity change from 0 to 2048 [ 2680.083073][ T7619] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2680.157100][ T7622] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2680.598992][ T7626] tipc: Enabling of bearer rejected, already enabled [ 2683.389813][ T7648] xt_TCPMSS: Only works on TCP SYN packets [ 2687.219699][ T7683] netlink: 260 bytes leftover after parsing attributes in process `syz.8.11022'. [ 2694.030738][ T7721] tipc: Enabled bearer , priority 0 [ 2694.044264][ T7721] syzkaller0: entered promiscuous mode [ 2694.053893][ T7721] syzkaller0: entered allmulticast mode [ 2695.091364][ T7720] tipc: Resetting bearer [ 2695.287797][ T7720] tipc: Disabling bearer [ 2706.322426][ T7788] netlink: 'syz.8.11052': attribute type 12 has an invalid length. [ 2713.984670][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.991115][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2719.087811][ T7850] loop8: detected capacity change from 0 to 2048 [ 2719.106360][ T7850] UDF-fs: bad mount option "undele00000000000000006" or missing value [ 2721.696973][ T7864] tipc: Enabling of bearer rejected, failed to enable media [ 2726.022856][ T7888] loop8: detected capacity change from 0 to 256 [ 2726.080023][ T7888] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 2726.161449][ T28] audit: type=1800 audit(1768186170.389:1364): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11086" name="file1" dev="loop8" ino=1048767 res=0 errno=0 [ 2734.286556][ T7928] 8021q: adding VLAN 0 to HW filter on device bond19 [ 2734.466193][ T7928] macvlan3: entered promiscuous mode [ 2734.471671][ T7928] macvlan3: entered allmulticast mode [ 2735.434283][ T7936] 9pnet_fd: Insufficient options for proto=fd [ 2737.203527][ T7949] loop8: detected capacity change from 0 to 4096 [ 2737.301437][ T7949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2738.440860][ T6733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2738.456447][ T6733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2738.472675][ T6733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2738.497432][ T6733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2738.509463][ T6733] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2738.517710][ T6733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2738.605440][ T6023] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2738.806371][ T7955] lo speed is unknown, defaulting to 1000 [ 2740.613963][ T6733] Bluetooth: hci2: command tx timeout [ 2741.617385][ T7955] chnl_net:caif_netlink_parms(): no params data found [ 2742.214516][ T7985] ptrace attach of "./syz-executor exec"[6023] was attempted by " [ 2742.813577][ T6733] Bluetooth: hci2: command tx timeout [ 2743.053994][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2743.061284][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 2743.069563][ T7955] bridge_slave_0: entered allmulticast mode [ 2743.079555][ T7955] bridge_slave_0: entered promiscuous mode [ 2743.216413][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 2743.244012][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 2743.272782][ T7955] bridge_slave_1: entered allmulticast mode [ 2743.286393][ T7955] bridge_slave_1: entered promiscuous mode [ 2743.577785][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2743.590833][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2743.712505][ T7955] team0: Port device team_slave_0 added [ 2743.746658][ T7955] team0: Port device team_slave_1 added [ 2744.777068][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2744.815305][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2744.873497][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2746.027836][ T6733] Bluetooth: hci2: command tx timeout [ 2746.873720][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2746.880753][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2746.963499][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2747.143685][ T7955] hsr_slave_0: entered promiscuous mode [ 2747.174508][ T7955] hsr_slave_1: entered promiscuous mode [ 2747.183286][ T7955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2747.190920][ T7955] Cannot create hsr debugfs directory [ 2747.582241][ T8008] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2747.640774][ T8011] macvlan3: entered promiscuous mode [ 2748.421321][ T3802] Bluetooth: hci2: command tx timeout [ 2748.852290][ T8011] macvlan3: entered allmulticast mode [ 2749.140050][ T8011] bond13: entered promiscuous mode [ 2749.278094][ T8011] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2749.376639][ T8011] team0: Port device macvlan3 added [ 2749.953081][ T8022] tipc: Enabling of bearer rejected, failed to enable media [ 2750.259477][ T7955] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2750.347087][ T7955] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2752.333821][ T7955] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2752.503774][ T7955] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2752.927334][ T8039] tipc: Enabling of bearer rejected, failed to enable media [ 2753.380960][ T8039] tipc: Enabling of bearer rejected, failed to enable media [ 2753.706712][ T7955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2753.737850][ T7955] 8021q: adding VLAN 0 to HW filter on device team0 [ 2753.779108][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 2753.786352][ T7513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2753.921127][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2753.928434][ T5455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2754.164905][ T7955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2756.077427][ T7955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2758.714010][ T7955] veth0_vlan: entered promiscuous mode [ 2758.760630][ T7955] veth1_vlan: entered promiscuous mode [ 2758.914813][ T7955] veth0_macvtap: entered promiscuous mode [ 2759.007380][ T7955] veth1_macvtap: entered promiscuous mode [ 2759.053600][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2759.074462][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2759.099971][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2759.120683][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2759.154448][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2759.197079][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2759.218072][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2759.253623][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2759.272679][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2759.313985][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2759.434233][ T7955] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2759.453114][ T7955] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2759.469478][ T7955] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2759.482789][ T7955] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2759.718561][T25899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2759.734066][T25899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2759.818962][T25899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2759.831657][T25899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2767.513285][ T8153] tipc: Enabled bearer , priority 0 [ 2767.641849][ T8149] tipc: Resetting bearer [ 2767.661529][ T8155] syzkaller0: entered promiscuous mode [ 2767.674562][ T8155] syzkaller0: entered allmulticast mode [ 2767.710931][ T8148] tipc: Resetting bearer [ 2767.856549][ T8148] tipc: Disabling bearer [ 2768.738610][ T8175] syzkaller0: entered promiscuous mode [ 2768.745433][ T8175] syzkaller0: entered allmulticast mode [ 2769.061195][ T8180] tipc: Enabling of bearer rejected, already enabled [ 2773.662674][ T8218] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2773.662674][ T8218] The task syz.8.11149 (8218) triggered the difference, watch for misbehavior. [ 2773.994548][ T8218] loop8: detected capacity change from 0 to 512 [ 2775.101974][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.111975][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.133581][ T8226] loop8: detected capacity change from 0 to 16 [ 2775.194681][ T8226] erofs: (device loop8): mounted with root inode @ nid 36. [ 2777.904293][ T8227] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11152'. [ 2780.151330][ T8263] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11161'. [ 2781.302307][ T8271] loop8: detected capacity change from 0 to 16 [ 2781.941662][ T8271] erofs: (device loop8): mounted with root inode @ nid 36. [ 2781.958060][ T8270] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 2781.968140][ T8270] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 2787.673371][ T8286] loop8: detected capacity change from 0 to 2048 [ 2787.800605][ T8289] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2788.570342][ T28] audit: type=1800 audit(1768186232.802:1365): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11168" name="bus" dev="loop8" ino=2097152 res=0 errno=0 [ 2798.925638][ T6733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2798.939723][ T6733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2798.957467][ T6733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2798.966087][ T6733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2798.976063][ T6733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2798.983685][ T6733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2799.076443][ T8348] lo speed is unknown, defaulting to 1000 [ 2801.290830][ T3802] Bluetooth: hci1: command tx timeout [ 2803.145059][ T8348] chnl_net:caif_netlink_parms(): no params data found [ 2803.333054][ T3802] Bluetooth: hci1: command tx timeout [ 2805.039135][ T8391] tipc: Started in network mode [ 2805.045578][ T8391] tipc: Node identity 0a77ebc79af5, cluster identity 4711 [ 2805.076520][ T8391] tipc: Enabled bearer , priority 0 [ 2805.160493][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 2805.167809][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2805.303540][ T8348] bridge_slave_0: entered allmulticast mode [ 2805.313544][ T8348] bridge_slave_0: entered promiscuous mode [ 2805.325322][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 2805.709968][ T3802] Bluetooth: hci1: command tx timeout [ 2806.190969][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2806.198830][ T8348] bridge_slave_1: entered allmulticast mode [ 2806.261983][ T8348] bridge_slave_1: entered promiscuous mode [ 2806.455322][ T8391] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2807.097790][ T8399] tipc: Resetting bearer [ 2807.120340][ T6898] tipc: Node number set to 2424499143 [ 2807.460692][ T8385] tipc: Disabling bearer [ 2807.755070][ T3802] Bluetooth: hci1: command tx timeout [ 2809.802634][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2809.814924][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2814.911823][ T8348] team0: Port device team_slave_0 added [ 2814.947094][ T8348] team0: Port device team_slave_1 added [ 2815.513597][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2815.527332][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2815.572634][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2815.622840][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2815.669979][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2815.789308][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2817.118183][ T8348] hsr_slave_0: entered promiscuous mode [ 2817.200416][ T8348] hsr_slave_1: entered promiscuous mode [ 2817.309300][ T8348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2817.316951][ T8348] Cannot create hsr debugfs directory [ 2818.733640][ T8445] tipc: New replicast peer: 255.255.255.255 [ 2818.740490][ T8445] tipc: Enabled bearer , priority 10 [ 2822.222555][ T8348] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2822.441839][ T8348] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2823.211278][ T8348] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2823.234799][ T8348] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2824.068202][ T8482] netlink: 'syz.7.11214': attribute type 1 has an invalid length. [ 2824.436064][ T8482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2824.546999][ T8488] bond1: (slave ip6gretap1): making interface the new active one [ 2824.601901][ T8488] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2824.721467][ T8482] veth3: entered promiscuous mode [ 2824.743808][ T8482] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2824.794670][ T8487] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2824.901053][ T8490] netlink: 'syz.1.11216': attribute type 2 has an invalid length. [ 2824.964196][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2825.057082][ T8495] netlink: 'syz.8.11217': attribute type 6 has an invalid length. [ 2825.066101][ T8495] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.11217'. [ 2827.514700][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 2827.705596][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 2827.712922][ T5458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2827.810973][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 2827.818312][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2828.733459][ T8348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2828.761285][ T8348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2829.070374][T25367] ~ÿ: left promiscuous mode [ 2829.753234][T25367] tipc: Disabling bearer [ 2829.776660][T25367] tipc: Disabling bearer [ 2829.823669][T25367] tipc: Left network mode [ 2834.237989][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2836.127485][ T8348] veth0_vlan: entered promiscuous mode [ 2836.210362][ T8547] loop7: detected capacity change from 0 to 256 [ 2836.225959][ T8547] exfat: Bad value for 'uid' [ 2836.531006][ T8348] veth1_vlan: entered promiscuous mode [ 2836.589855][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.599714][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.019789][ T8543] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2842.391307][ T8348] veth0_macvtap: entered promiscuous mode [ 2842.414293][ T8348] veth1_macvtap: entered promiscuous mode [ 2842.570211][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2842.597781][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2842.619443][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2842.648164][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2842.667861][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2842.685089][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2842.716317][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2842.832203][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2842.887737][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2842.918146][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2842.935208][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2842.958052][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2842.989222][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2843.029554][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2843.140578][ T8348] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2843.167772][ T8348] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2843.194876][ T8348] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2843.227772][ T8348] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.321321][T25367] hsr_slave_0: left promiscuous mode [ 2844.353086][T25367] hsr_slave_1: left promiscuous mode [ 2844.399453][T25367] batman_adv: batadv0: Removing interface: dummy0 [ 2844.445654][T25367] bond13: left promiscuous mode [ 2845.167367][T25367] team0 (unregistering): Port device macvlan3 removed [ 2846.630240][T25367] bond13 (unregistering): Released all slaves [ 2846.692776][T25367] bond12 (unregistering): (slave veth21): Releasing active interface [ 2847.032759][T25367] bond12 (unregistering): Released all slaves [ 2848.321264][T25367] bond11 (unregistering): Released all slaves [ 2849.573680][T25367] bond10 (unregistering): Released all slaves [ 2849.645922][T25367] team0 (unregistering): Port device bridge20 removed [ 2849.709804][T25367] bond9 (unregistering): Released all slaves [ 2850.930337][T25367] bond8 (unregistering): Released all slaves [ 2851.386549][T25367] bond7 (unregistering): Released all slaves [ 2851.724474][T25367] bond6 (unregistering): Released all slaves [ 2852.311665][T25367] bond5 (unregistering): Released all slaves [ 2852.901871][T25367] bond4 (unregistering): Released all slaves [ 2853.277232][T25367] bond3 (unregistering): Released all slaves [ 2853.671867][T25367] bond2 (unregistering): Released all slaves [ 2854.500617][T25367] bond1 (unregistering): Released all slaves [ 2856.312530][ T6733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2856.345502][ T6733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2856.354569][ T6733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2856.363493][ T6733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2856.388637][ T6733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2856.396081][ T6733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2856.944427][T25367] bond0 (unregistering): Released all slaves [ 2857.450934][ T8603] lo speed is unknown, defaulting to 1000 [ 2858.487945][ T8634] lo speed is unknown, defaulting to 1000 [ 2858.529650][ T6733] Bluetooth: hci0: command tx timeout [ 2860.996826][ T6733] Bluetooth: hci0: command tx timeout [ 2863.566675][ T6733] Bluetooth: hci0: command tx timeout [ 2865.006932][ T6733] Bluetooth: hci2: command 0x0406 tx timeout [ 2865.208445][ T8664] syzkaller0: entered promiscuous mode [ 2865.232982][ T8664] syzkaller0: entered allmulticast mode [ 2865.585266][ T6733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2865.609340][ T6733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2865.619874][ T6733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2865.628348][ T6733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2865.636203][ T6733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2865.647821][ T8638] Bluetooth: hci0: command tx timeout [ 2865.653980][ T6733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2866.149762][T25367] IPVS: stop unused estimator thread 0... [ 2866.210367][ T8668] lo speed is unknown, defaulting to 1000 [ 2867.181445][T25367] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2868.428494][ T6733] Bluetooth: hci1: command tx timeout [ 2868.515332][ T8634] chnl_net:caif_netlink_parms(): no params data found [ 2869.679837][T25367] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2870.231919][ T5411] ------------[ cut here ]------------ [ 2870.238621][ T5411] WARNING: CPU: 1 PID: 5411 at io_uring/io_uring.c:3214 io_ring_exit_work+0x39e/0x7e0 [ 2870.248660][ T5411] Modules linked in: [ 2870.252606][ T5411] CPU: 1 PID: 5411 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2870.260370][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2870.270694][ T5411] Workqueue: iou_exit io_ring_exit_work [ 2870.276381][ T5411] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 2870.282153][ T5411] Code: e8 57 03 26 f7 48 89 df 48 c7 c6 c0 9a 5f 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 ac de bb f9 e9 64 ff ff ff e8 32 03 26 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 2870.302161][ T5411] RSP: 0018:ffffc9000c8f7a40 EFLAGS: 00010293 [ 2870.308615][ T5411] RAX: ffffffff8a5fa7ce RBX: 000000010003eb2a RCX: ffff88806a60bc00 [ 2870.317091][ T5411] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 2870.325197][ T5411] RBP: ffffc9000c8f7bb0 R08: ffffc9000c8f79c7 R09: 1ffff9200191ef38 [ 2870.333253][ T5411] R10: dffffc0000000000 R11: fffff5200191ef39 R12: 000000010003eb27 [ 2870.341348][ T5411] R13: ffff88805cf78288 R14: ffff88805cf78510 R15: dffffc0000000000 [ 2870.349423][ T5411] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2870.358689][ T5411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2870.365528][ T5411] CR2: 00007fe197e61f98 CR3: 000000005e2d6000 CR4: 00000000003506e0 [ 2870.373621][ T5411] Call Trace: [ 2870.376978][ T5411] [ 2870.379967][ T5411] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 2870.385870][ T5411] ? process_scheduled_works+0x957/0x15b0 [ 2870.391709][ T5411] process_scheduled_works+0xa45/0x15b0 [ 2870.397511][ T5411] ? assign_work+0x400/0x400 [ 2870.402160][ T5411] ? assign_work+0x39e/0x400 [ 2870.406885][ T5411] worker_thread+0xa55/0xfc0 [ 2870.411528][ T5411] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2870.417524][ T5411] ? _raw_spin_unlock+0x40/0x40 [ 2870.422442][ T5411] kthread+0x2fa/0x390 [ 2870.426623][ T5411] ? pr_cont_work+0x560/0x560 [ 2870.431355][ T5411] ? kthread_blkcg+0xd0/0xd0 [ 2870.435990][ T5411] ret_from_fork+0x48/0x80 [ 2870.440542][ T5411] ? kthread_blkcg+0xd0/0xd0 [ 2870.445176][ T5411] ret_from_fork_asm+0x11/0x20 [ 2870.451567][ T5411] [ 2870.454636][ T5411] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2870.461952][ T5411] CPU: 1 PID: 5411 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2870.469530][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2870.479706][ T5411] Workqueue: iou_exit io_ring_exit_work [ 2870.485306][ T5411] Call Trace: [ 2870.488624][ T5411] [ 2870.491588][ T5411] dump_stack_lvl+0x16c/0x230 [ 2870.496308][ T5411] ? show_regs_print_info+0x20/0x20 [ 2870.501550][ T5411] ? load_image+0x3b0/0x3b0 [ 2870.506113][ T5411] panic+0x2c0/0x710 [ 2870.510056][ T5411] ? bpf_jit_dump+0xd0/0xd0 [ 2870.514607][ T5411] ? ret_from_fork_asm+0x11/0x20 [ 2870.519591][ T5411] __warn+0x2e0/0x470 [ 2870.523615][ T5411] ? io_ring_exit_work+0x39e/0x7e0 [ 2870.528773][ T5411] ? io_ring_exit_work+0x39e/0x7e0 [ 2870.533946][ T5411] report_bug+0x2be/0x4f0 [ 2870.538326][ T5411] ? io_ring_exit_work+0x39e/0x7e0 [ 2870.543492][ T5411] ? io_ring_exit_work+0x39e/0x7e0 [ 2870.548660][ T5411] ? io_ring_exit_work+0x3a0/0x7e0 [ 2870.553817][ T5411] handle_bug+0xcf/0x120 [ 2870.558097][ T5411] exc_invalid_op+0x1a/0x50 [ 2870.562639][ T5411] asm_exc_invalid_op+0x1a/0x20 [ 2870.567526][ T5411] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 2870.573294][ T5411] Code: e8 57 03 26 f7 48 89 df 48 c7 c6 c0 9a 5f 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 ac de bb f9 e9 64 ff ff ff e8 32 03 26 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 2870.592948][ T5411] RSP: 0018:ffffc9000c8f7a40 EFLAGS: 00010293 [ 2870.599059][ T5411] RAX: ffffffff8a5fa7ce RBX: 000000010003eb2a RCX: ffff88806a60bc00 [ 2870.607068][ T5411] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 2870.615102][ T5411] RBP: ffffc9000c8f7bb0 R08: ffffc9000c8f79c7 R09: 1ffff9200191ef38 [ 2870.623104][ T5411] R10: dffffc0000000000 R11: fffff5200191ef39 R12: 000000010003eb27 [ 2870.631115][ T5411] R13: ffff88805cf78288 R14: ffff88805cf78510 R15: dffffc0000000000 [ 2870.639128][ T5411] ? io_ring_exit_work+0x39e/0x7e0 [ 2870.644314][ T5411] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 2870.650182][ T5411] ? process_scheduled_works+0x957/0x15b0 [ 2870.655941][ T5411] process_scheduled_works+0xa45/0x15b0 [ 2870.661565][ T5411] ? assign_work+0x400/0x400 [ 2870.666291][ T5411] ? assign_work+0x39e/0x400 [ 2870.670930][ T5411] worker_thread+0xa55/0xfc0 [ 2870.675586][ T5411] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2870.681541][ T5411] ? _raw_spin_unlock+0x40/0x40 [ 2870.686455][ T5411] kthread+0x2fa/0x390 [ 2870.690595][ T5411] ? pr_cont_work+0x560/0x560 [ 2870.695322][ T5411] ? kthread_blkcg+0xd0/0xd0 [ 2870.699947][ T5411] ret_from_fork+0x48/0x80 [ 2870.704438][ T5411] ? kthread_blkcg+0xd0/0xd0 [ 2870.709078][ T5411] ret_from_fork_asm+0x11/0x20 [ 2870.713901][ T5411] [ 2870.717515][ T5411] Kernel Offset: disabled [ 2870.721990][ T5411] Rebooting in 86400 seconds..