last executing test programs: 7m3.718444482s ago: executing program 0 (id=1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000000380)=0x5, 0x4) socket$unix(0x1, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x69) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000040)=[0x8000, 0x8000], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 6m59.347973829s ago: executing program 0 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03"], 0x34}}, 0x0) shmget(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) fchown(0xffffffffffffffff, 0x0, 0xee01) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00002f7000/0x2000)=nil, 0x2000, 0x3) socket$inet6(0xa, 0x3, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = memfd_create(&(0x7f0000000280)='/dev/loop#\x00', 0x3) fallocate(r5, 0x0, 0x0, 0x200401) fcntl$addseals(r5, 0x409, 0x4) fallocate(r5, 0x0, 0x0, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x33) 6m51.769520586s ago: executing program 0 (id=18): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000000380)=0x5, 0x4) socket$unix(0x1, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x69) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000040)=[0x8000, 0x8000], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 6m46.147668192s ago: executing program 0 (id=21): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) 6m31.112607813s ago: executing program 32 (id=21): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) 6m13.567693042s ago: executing program 3 (id=79): memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) read$alg(0xffffffffffffffff, &(0x7f0000001540)=""/4131, 0x1023) 6m11.77786928s ago: executing program 3 (id=81): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x14e8, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1548) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$netrom(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) 6m10.753179676s ago: executing program 3 (id=83): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xb8, 0x8, 0xfa04, 0xb8, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x90, 0xb8, 0x0, {0x0, 0x74020000}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240c0081}, 0x20000000) 6m10.684493077s ago: executing program 3 (id=84): memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) read$alg(0xffffffffffffffff, &(0x7f0000001540)=""/4131, 0x1023) 6m9.657256353s ago: executing program 3 (id=85): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x8000000, 0xfc, &(0x7f0000000480)=""/252}, {0x1, 0xf, &(0x7f0000000240)=""/15}]}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x10, 0xb, {}, {0x5, 0x8, 0x0, 0xb, 0x3, 0x10, "6e4f3cf2"}, 0x101, 0x1, {0x0}, 0x6}) 6m8.029882488s ago: executing program 3 (id=86): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) syz_clone3(&(0x7f00000004c0)={0x2004000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0xb9c1, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000039000000", @ANYBLOB="14005a8010000080040001"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "357d78138e"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "685310f12766f69975f9"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44008}, 0x20008981) 5m52.718562773s ago: executing program 33 (id=86): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) syz_clone3(&(0x7f00000004c0)={0x2004000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0xb9c1, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000039000000", @ANYBLOB="14005a8010000080040001"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "357d78138e"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "685310f12766f69975f9"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44008}, 0x20008981) 2m35.143974857s ago: executing program 1 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2604402c}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x2, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_usb_connect(0x6, 0x9a, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001"], 0x44}}, 0x20008000) 2m29.623698842s ago: executing program 1 (id=507): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x4b8, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x70, 0x98, 0x0, {0x22e}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) 2m28.287592953s ago: executing program 1 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r1, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x620b}, 0x0) 2m28.076410486s ago: executing program 1 (id=512): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000005900)={[{@force}, {@barrier}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'macgreek'}}, {}, {@force}, {@umask={'umask', 0x3d, 0x399}}, {@type={'type', 0x3d, "3562f949"}}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x9, '#'}, @main=@item_4={0x3, 0x0, 0xb, "1ce93ee9"}, @global=@item_4={0x3, 0x1, 0x3, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x3, "0900be00"}, @global=@item_4={0x3, 0x1, 0x8, "e448aa5b"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0xb, "31654111"}]}}, 0x0}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 2m25.575917904s ago: executing program 1 (id=521): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000001480)) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r0, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) accept4$inet(r0, 0x0, 0x0, 0x80800) 2m24.301190074s ago: executing program 1 (id=525): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 2m23.602149885s ago: executing program 34 (id=525): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 25.640679396s ago: executing program 6 (id=914): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)}) io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 24.70769753s ago: executing program 6 (id=917): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2008054, &(0x7f0000000140)=ANY=[], 0x1, 0xf43, &(0x7f0000002d80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100) (fail_nth: 3) pwrite64(r4, 0x0, 0x0, 0xfecc) syz_open_dev$I2C(0x0, 0x1, 0x402) 23.561546528s ago: executing program 6 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4090) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f77657865632c747a3d5554432c7379735f696d6d757461626c652c6e6f646f74732c6e6f646f74732c646f74732c6572726f72733d636f6e74696e75652c646f74732c6e6f646f74732c636865636b3d7374726963742c7379735f696d6d757461626c652c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c636865636b3d7374726963742c646f74732c6e6f646f74732c757365667265652c6e6f646f74732c6e6f646f74732c00ee9713032a77c86d5c3a5edb0950783b197cf6e509361265937d84cb86a9f59491ade6978711bafdc6e4fd59dedbf4a3afcc5accf742bdd669730d726f201b2721f84eb4fd91e55f81825ac2d4c11007cdbad5f870a7436e1002f40cc70d882b1d62616004185a89e51db441e7da"], 0xfd, 0x1d4, &(0x7f00000002c0)="$eJzs3UFr02AYB/Cn3VwzT7sJohDYxdNQP8FEJogBQelBTwrTyyqCu0Qv28fw84kfQHbqRSIx2eKqh7SQZHa/36VP+s+TvHlp01769s2dD0eHH4/ff7/1NZJkFOP92I/5KHZiHOdOAwBYJ/OiiB9FZZm+3W/djQkA6FaLz/+fPQ8JAOjYy1evnz3KsoMXaZpEnJ3m03xaPVb5k6fZwf30t52m6yzPpxsX+YN08btDmd+Im3X+sOpPL+dbcW+3ysvs8fOszDeafBKH1cak4ykAAAAAAAAAAAAAAAAAAAAAAIDe3Y303D/X99nbW8y367za+mN9oIX1fTbj9ma92SwPVJz0cVEAAAAAAAAAAAAAAAAAAADwnzn+/OXo7Wz27lNTTCLi8jPLFKP6wCu2912MY5Czb9WzdDUmYe2K9GoMY7biu6B8dSzdNW6387woilYHbO4RkyFuTAAAAAAAAAAAAAAAAAAAcA01P/r9O0uGGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADKD5//8VipOIaLHzxcm2B71UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1tivAAAA//8HAzMX") getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x41) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sync() syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f00000004c0)='./file0\x00', 0x3806022, &(0x7f0000000500), 0x1, 0x3e8, &(0x7f0000000000)="$eJzs3MtrXNUfAPDvvXn1+UvyMz5qXURcGBCTJo21gojZiIiu7NKFMY9aOmkkGcGGgIrirju3LhQX/g2uFPwPBHHlWgpB0oIuR+7MvemYzKSdTsaLmc8HTjnnnhnOuffbc0977j0TQN+ajIhPImI4IlYjYjQ/nuQpXm2k7HN3d7eXspRErfb2H0m9/s7u9lI0fSdzOvsjjZhKI9LPI863aHfz5tb1xUplZSMvz1TXPpjZvLn1/LW1xasrV1duzF18cXb+0tyl2ReO7Fxvnb/80tPzb/x667Vvln658t17WX/P5HXN53FUJmNy75rsd+GoGyvZmbI7wENJI2IgIgbr4380Buq5htH4+J1SOwcA9EStVhvYVwYAjr3EnA8Afab4f/+d3e2lIpWyEEEpdhYi4kQj/sXz3UbN4N6ToKEePt+bjIj30+8nshQ9eg4LAAAA0M9+WIiIy63W/9J4qulzZyPif/n+gLGIGI+I/0fEI122P7mvfHD9J73dZRMcYmch4uWmvR13m+KfGxvIS2frsR9KVq9VVi7kfx+mYmgkK88e0safW9e/aFfXvP6Xpaz9Yi0w78ftwZF/fmd5sbrYzTlzz86nEU8Otop/srf+m0TERBdt/Di+9lW7uvvHn16qfR3xbMvxf2/nUnL4/qyZ+v1gprgrHPTWT5+926598S9XNv5PHR7/saR5v95m5208fu63jXZ1D3v/H06u1Ds4nB/7aLFa3ZiNGE7ePHh8rvM+H1fF9SiuVxb/qWdaz/9FELIL+mhEPJbFMiKeiIhzHbT57fhfJ9vVGf/lyuK/3NH47zzzysTrP7dr/8HG/3y9M1P5Ef/+u78HDVDZ/QQAAAAAAADgaKT1vd1JOr2XT9Pp6cZveE/EqbSyvll9bnX9wxvLjT3gYzGUFm96jTa9DzqbvxdclOf2lS/m7wx/OXKyXp5eWq8sl33yANCnTreZ/zO/j5TdOwCgZ06U3QEA4F9n/geA/mP+B4D+Y/4HgP5j/geA/mP+B4C+0s3v+svIyBzXTNl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+2vwMAAP//xC/MZQ==") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) creat(0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 19.287707494s ago: executing program 6 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x845, &(0x7f0000000400)={[{@fat=@sys_immutable}, {@shortname_winnt}, {@fat=@flush}, {@fat=@nfs}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@utf8no}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x275, &(0x7f0000000a00)="$eJzs3MFrI1UYAPDPdLvtdtlNDyIoiA+96CXs1r8gyC6IBaVuRD0IszbV0DEpmViJiLs3r/4di0dvgvoP9OLNu3gpguBlD2Jkk4xNa2B3pXWq+f0gzJd58+W9mcyEbwbyDt/+8qPdnaKxkw2itpqiFnE37kesP4imnpgua+P4Ysy6Gy9d/u3HZ998593XmpubN7ZSutm89fJGSunqc99+8tlXz38/uPzW11e/WYmD9fcOf9346eCpg6cP/7hVfnpvkLJ0u9cbZLfzdtruFLuNlN7I21nRTp1u0e4fa9/Je3t7w5R1t6+s7fXbRZGy7jDttodp0EuD/jBlH2Sdbmo0GunKWiyapcfOaN3b2sqaZzIYqnBp3sp+v5ktzW1s3fs3BgUAnC9V1f8fdorUKVL3YfV/LdT/Z0f9vwge1P9r0+v3OPU/AAAAAAAAAAAAAAD8F9wfjeqj0aheLsvXSkSsRkT5vupxcjZ8/4tt5o97qxH5F/ut/dZkOWlv7kQn8mjHteWI38fnw9Qkvvnq5o1raWw9vsvvTPPv7LeWYqXML63Pz78+yU/H85djbbb/jajHk/PzN+bmX4wXX5jJb0Q9fng/epHH9vi8Psr//HpKr7y+eSL/0ng7AAAA+D9opL/87f593N5I5bQhJ9onK4+eD0T9Ic8HTtxfX4hnLlS33wAAALBIiuGnu1met/uCxwscujMPahFRUe+/RCzHuTgIpxr8/PHkqn+Ujav+ZQIAAE7bUdFf9UgAAAAAAAAAAAAAAAAAAABgcT3q5GHl9v9k7rGZ7paq2UsAAAAAAAAAAAAAAAAAAAAAAAA4H/4MAAD//9f3IOU=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0/../file0\x00', 0x0, 0x1322030, &(0x7f0000000080)=ANY=[@ANYBLOB='uid=', @ANYRESHEX, @ANYRESDEC]) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x100c007, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfd, 0xc2f, &(0x7f0000001a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 18.107753171s ago: executing program 6 (id=939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@setlink={0x50, 0x13, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1818, 0x2400}, [@IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x52}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x50}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x170, r2, 0x510, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xa, 0x6, 0x0, 0x8000, 0x7, 0xfffffff5, 0x8, 0xa, 0x6, 0xfffffffc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff814e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x58e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x274}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x9, 0xff, 0x7, 0x6, 0x7, 0x1, 0xa5f0, 0x0]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffc0, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x74e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8c6f}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x46a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x4a63, 0x3, 0xffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x50e, 0x2, 0x8001, 0x5]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 17.505191321s ago: executing program 6 (id=941): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c002001fff2ff0000000000000000000000ff0200000000000000000000000000010004000000000000c910"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000001000000500000085000000f8020000a70000000000000018000000000000000000000100000000950000000000000095002b4c827492000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000"], 0x64}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x800}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 16.590587225s ago: executing program 35 (id=941): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c002001fff2ff0000000000000000000000ff0200000000000000000000000000010004000000000000c910"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000001000000500000085000000f8020000a70000000000000018000000000000000000000100000000950000000000000095002b4c827492000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000"], 0x64}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x800}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 11.269534417s ago: executing program 4 (id=964): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{@my=0x0, 0x1}, 0xffffffffffff8001, 0xfffffffffffffffd, 0x0, 0x7}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r0, 0x409, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = userfaultfd(0x80000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x6d4}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000200)) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff, 0x4a0}, 0xc) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x138, 0x1, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x66, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010102, {[@cipso={0x86, 0x12, 0x2, [{0x6, 0x3, "c1"}, {0x7, 0x9, "2366b13a83b28c"}]}, @cipso={0x86, 0x5e, 0xffffffffffffffff, [{0x0, 0xa, "434f0721b0830cdb"}, {0x0, 0x11, "b0c39225781ac9a521381919f6e0dc"}, {0x0, 0xd, "c1c42e5f65b494b435a175"}, {0x7, 0x10, "077cb7793fb0ec1d468949b72753"}, {0x5, 0xf, "f8361ceb47a320f7c03f76acd2"}, {0x2, 0x11, "16c9debd11e97f64d52bef59a9217a"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x19, 0x700, 0x81, 0x1, {{0x26, 0x4, 0x2, 0x1d, 0x98, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x24, 0x57, 0x0, 0xc, [0x1, 0x800, 0x7ff, 0x3, 0xa604, 0x200, 0x0, 0x7]}, @cipso={0x86, 0x17, 0x0, [{0x1, 0x11, "c9890006b573e348e4343311d1b260"}]}, @end, @end, @rr={0x7, 0x7, 0xfd, [@multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x5, 0x3, 0x8, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff0f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010102, 0xf2}, {@multicast2, 0xc3}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000003100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000030c0)={&(0x7f0000000540)=@newtaction={0x2b74, 0x30, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{0x78, 0x1, [@m_sample={0x74, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x3d, 0x6, "0448f50719fc334b0d5559e3af6b61a4d525ff12219d5d3c65154c06e81ebf20901260323670351da03c836b979ffb0f42f04d151f10c6e459"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x1384, 0x1, [@m_ctinfo={0x104, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}]}, {0xcd, 0x6, "9b334e152de4204118e18671913ca2d7eca5e54cc11f65883c8560cc36cd692cbbfe060e25c230d6ed0a39e960bd999c0ac5e292c70e0a9f9303795527216c6902931607356f161b71944323e22020e60fadf038e29d49fbf0bdf79f768b075ac2487c40a002c72d4ac6aa5432815b18a825514cde423dd84be11113d5d947ab3effe3abfdd73e16c47a55f229bd1e741f566e23e36938e6e2da6e0248f5399c2f2972c0200fd7f91f3ad677c76983ed00034eea4a8a919c13ceeeac0487bea66df837ad256572611e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x44, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xecf}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0x7, 0x6, "36c802"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x98, 0x17, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x5f, 0x6, "6d2a9effe3f25c81d7ecff3b7d21303b2e760df9610b9980c77a3276b23e4de0f42eca2a5d144878863f76081fa03f222b1a81c58df248e710b28060c21b13d2faec792238c4a018f3b23f59c8d43035e049a51ad394e7176b5f94"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0xd80, 0x1b, 0x0, 0x0, {{0xb}, {0xcfc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3f3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff56}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa833}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a, 0x7, 0x6, 0x4, 0x0, 0x1, 0xfffff800, 0x6, 0x9, 0x9, 0xe9, 0x47b8, 0x8000, 0x3, 0x4, 0x56, 0x0, 0x1918, 0xa, 0xd21, 0x4, 0x1, 0x8, 0x6a, 0x6, 0xfc, 0x8, 0x8, 0x3, 0x40, 0x101, 0x6, 0x10001, 0x7fff, 0x8, 0x100, 0xfff, 0x3, 0x32, 0xe, 0x400, 0x9, 0x80000001, 0x200000, 0x5, 0x8, 0x62, 0x8, 0xfc80, 0x2, 0x8c1, 0x5, 0xd, 0x7, 0xbf5c000, 0x2, 0xc7d, 0x2, 0x5, 0x6, 0x80, 0x8b2, 0x6, 0x6, 0x9, 0x7, 0x628b, 0x5, 0xd519, 0x8, 0xffffffff, 0x2, 0x7ec, 0x8518, 0x6, 0x2, 0x6, 0xfa, 0x1, 0x0, 0x8, 0x2, 0x5, 0x3, 0xffff14de, 0x4, 0x0, 0x6, 0x10001, 0x9, 0x1, 0xaa, 0x0, 0xfff, 0x2, 0x8000000, 0x91bf, 0xffff, 0x2, 0xaa6, 0x4469, 0x101, 0x1, 0x4, 0x0, 0x38f, 0x8, 0x100, 0xc, 0x5, 0x401, 0x9, 0xfffffff7, 0x1, 0xfffffffa, 0x9, 0x7fffffff, 0x1, 0x7fffffff, 0x3, 0x7, 0x1445, 0x120, 0x4, 0x2, 0x5c9, 0x4, 0x6, 0x2, 0x7, 0x4, 0xb, 0x9, 0x6, 0x3, 0x2, 0x7, 0x0, 0x80000001, 0x5, 0x3, 0x1124, 0xa, 0x3, 0x8, 0x6, 0x8, 0x8, 0x4, 0x4, 0x7a3, 0xd205, 0x1000, 0x0, 0x1, 0x2, 0x2a, 0xfffffffd, 0x7f, 0x100, 0xffffffff, 0x9a9, 0x40, 0xe, 0x6, 0xa2b8, 0x3, 0x80, 0x80, 0x5, 0x2, 0x6, 0x1858, 0x3, 0x1, 0xfffffff8, 0x80000001, 0xad, 0x100, 0x9ce, 0xff, 0x1400, 0x2, 0x1000, 0x5, 0xa0, 0x1, 0x9, 0x0, 0x40000000, 0x3, 0xa6, 0x200, 0x9, 0x7, 0x0, 0x9, 0xb, 0x7, 0x99, 0x1, 0x88, 0x0, 0x8, 0x3, 0x7, 0x62e, 0x400, 0x6, 0x9, 0x8, 0xf, 0x8, 0x8000, 0x0, 0x0, 0x8, 0x8001, 0x4, 0x4e48c5d, 0x7, 0x2, 0x9, 0x6, 0x84e, 0xffffffff, 0xffffffff, 0x1, 0x5, 0x7ff, 0x0, 0x9, 0x4, 0x3, 0x5, 0x5, 0x3, 0x7, 0x3, 0x4, 0x7, 0x80000001, 0xcc8, 0x1, 0x3, 0x6, 0x3, 0x8, 0x1, 0x96, 0x10000, 0x6, 0x20000000, 0x6, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x72, 0x9, 0x80000001, 0x1bc, 0x437, 0x9, 0x5, 0xffff, 0x7, 0x2, 0x9, 0xd, 0x8, 0x0, 0x5ec, 0x2, 0x4, 0x80000001, 0x7, 0x6, 0x8001, 0x5, 0xf2e, 0x1200, 0x1, 0xfffffffb, 0x1, 0xfffffffd, 0xfffffffa, 0x400, 0xc, 0x0, 0x7f, 0x9, 0x5e, 0x5, 0x1, 0x6d, 0x1, 0x1, 0x5, 0x8, 0x9, 0x34, 0x200, 0x6, 0x2, 0x3, 0x9, 0x7, 0x4, 0x80, 0x7, 0x8, 0xb, 0x5, 0x800, 0x115ce0, 0x5, 0x6, 0x1, 0x7, 0x0, 0x6, 0xffff, 0x6, 0x4, 0x40, 0x9, 0xc5, 0x80, 0x3, 0x4, 0x81, 0x6, 0xfffffffa, 0x2, 0x0, 0xb0, 0x514, 0x4, 0xc8f, 0x3ff, 0x9, 0x9, 0x3, 0x3, 0x2, 0x4000000, 0x8, 0x6, 0xcea2, 0x101, 0x4, 0xad3, 0xffffffff, 0x5bb, 0x80, 0x100, 0x3, 0x6284, 0x2, 0x8, 0x4, 0x100, 0x8, 0x4, 0x1, 0x8001, 0x3, 0x401, 0x7fffffff, 0x4, 0xe64f, 0x9, 0x10001, 0x4, 0x3b6, 0x10000, 0x4, 0x4, 0x40000, 0x3, 0x3, 0xf38e, 0x40, 0x0, 0x6, 0x4, 0x7, 0x5, 0x0, 0x4, 0x3, 0x0, 0x2, 0x1, 0x4, 0xb4, 0x10001, 0x623312bb, 0x1, 0x3, 0x2, 0xc8, 0xbee, 0x8, 0x6, 0x2, 0x800, 0x0, 0x2, 0xa2, 0xffffffff, 0x9, 0x1, 0x0, 0xc, 0x28000000, 0x3, 0x1, 0x6, 0x4, 0x0, 0x9, 0xffff, 0x4, 0xffff, 0x8, 0x6, 0xc0a, 0x2, 0x8, 0x6, 0x2, 0x9, 0x2, 0x73, 0x3, 0x5, 0x8001, 0x80000001, 0xb2, 0x3, 0xd, 0x1, 0xd33a, 0x8, 0x5, 0x4, 0x5, 0x80000001, 0xff, 0x3, 0x8, 0x9, 0x9, 0xe, 0x1ff, 0x7, 0xfff, 0x2000000, 0x9, 0x1000, 0x9, 0xdcd6, 0x5, 0x10, 0x400, 0x8, 0x2420, 0x400, 0x5, 0x5c2f0709, 0x8001, 0x9, 0x2, 0x7, 0xfffffffa, 0x6, 0x9, 0xffffd6f8, 0xfffffff7, 0x39d, 0x1, 0x80000000, 0x9, 0x411, 0x0, 0x7fff, 0x3, 0x1000, 0xff, 0x24, 0x7fffffff, 0x0, 0x1, 0x4, 0x5, 0xf7, 0xffffff21, 0x9, 0x2, 0x0, 0x800, 0x5, 0x1, 0x6, 0x1, 0x80000000, 0x6, 0x3, 0x4, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xd22ac8fe49f0ebc1, 0xb1, 0x1, 0x8000, {0xff, 0x1, 0x7, 0x4, 0x2, 0x6d72}, {0x7, 0x0, 0x1, 0x7, 0x6, 0x8}, 0x8000, 0xc, 0xfffffff2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x7, 0x7f, 0x80000001, 0x5, {0x4, 0x1, 0x0, 0x7b8, 0x8, 0x80}, {0x0, 0x0, 0x8, 0x7f, 0x0, 0x1000}, 0xbd, 0x2f0e, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff40a}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1ff, 0x1, 0x8, 0x19fa4809, 0xed44, 0x7, 0x8333, 0x3, 0x3, 0x4, 0x7cc, 0x82b, 0x2, 0x4, 0x3, 0x5, 0x5, 0x3b, 0xf645, 0x6, 0x8175, 0x4, 0x55, 0x2, 0xfffffffe, 0x75, 0xffff, 0x3, 0x1, 0xf0, 0x7, 0x0, 0x50, 0x5, 0x6, 0xd6, 0x0, 0x10000, 0x0, 0x2, 0x9, 0x10, 0x4, 0x8001, 0x3, 0x5d43, 0x7fff, 0xffff, 0xe, 0x0, 0x7, 0x3, 0x8, 0x4, 0x7, 0x0, 0x3e, 0x400, 0xe3, 0x8, 0xfffffffd, 0x81, 0x7, 0x81, 0xfffffff8, 0x2, 0x1, 0xfffff51d, 0x3, 0x9, 0x8, 0x1, 0x4, 0x5, 0x6, 0xc, 0x200, 0x258d, 0xb, 0x0, 0x8, 0x4, 0x4, 0x0, 0x9, 0x8, 0x4, 0xff, 0x7, 0xf, 0x3, 0x1, 0xc000000, 0x2, 0x0, 0xbd, 0x9, 0x4, 0x4, 0x8, 0xfb, 0x3, 0x3, 0x80000001, 0xf5ed, 0x60d, 0x1, 0x7, 0x9, 0x5, 0x80000000, 0x1, 0x12, 0xdfea, 0xcb, 0x0, 0x9, 0x81, 0x8001, 0x8, 0x9, 0x200, 0x5, 0x5, 0x6, 0x8001, 0x8, 0x0, 0x8, 0x6673, 0x0, 0x5, 0x2, 0x8, 0x8, 0x6, 0xc4ce, 0x3, 0x9, 0x1, 0x8b9, 0x7, 0x3, 0x0, 0x0, 0x8, 0xaf, 0x5, 0x4, 0x400, 0x80000001, 0x3, 0x95, 0x0, 0xad4, 0x2, 0x2, 0x0, 0x0, 0x4, 0x800, 0x6, 0x3, 0x6, 0x0, 0x0, 0x9, 0xbe4, 0xfffffff7, 0xfffffff7, 0xffff, 0x5, 0x6, 0x1, 0x8, 0xb, 0x5, 0x0, 0x9, 0x10000, 0xc91, 0xd5ee, 0x2, 0xafb, 0x0, 0xab, 0x80000001, 0xf, 0xfffffffa, 0x8, 0x5, 0x7, 0x10, 0x4, 0xf2, 0x0, 0x3ff, 0x0, 0x6df2, 0x4, 0x0, 0x1, 0x200, 0xffffffff, 0x9, 0xf3c9, 0x0, 0x5, 0x7fff, 0x2, 0x68, 0x8, 0x1ff, 0x101, 0x5, 0x6, 0x2b, 0xf, 0x80000000, 0x3, 0x4, 0x0, 0x0, 0x1, 0x800, 0x10000, 0x7, 0x6, 0x6, 0x67a, 0x2, 0x6, 0x10, 0x9, 0x0, 0x0, 0x4, 0x6, 0x2, 0x7, 0x6, 0x4, 0x8, 0x7, 0x4, 0x2, 0xfff, 0x78, 0x10000, 0x975b, 0x0, 0x9, 0xf, 0x3, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]]}, {0x5b, 0x6, "60930153e90e21eb8c1bcabd5ecb91bb6ab31ba997c2d3c351953c3a8ac47388f4766d94d43c2dec6894c113933a77658513852a914938b347ef09f6f329c6e718e41b2c0e16863e89e28cdc2df24d468e57193477c2a1"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4, 0x10000000, 0x6, 0x3}, 0x2, r5}}]}, {0xe6, 0x6, "6da3cea3f144a5431a1fc36d24ea8387a864188d05bad600cd71dd09eea5f0eff98a7c785a2b10fde1bfb80d68af6a8df5ba329a0fe25a1725c478197e3a7a2143bf0b3b3518b1be6c2370ca7186ccf4b3672e69570b6188ca5b00c382516c41807bec66d4f7ce6144f95e01454883c41034e1c19bc561349060b288a26cfbe70c0f059566e06ea0d4e98a48c9df44b230c7b35972bdb79aa674ef78386fb753c660c264901a7253c2cc7699332182d756379da6bd483e3698240e00266fec4c8d01097c39f1dab9801baa4c1a66474834aa6308c6de4c1d7a78e8e864c410bdc866"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xa0, 0xd, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x14, 0x6, "0965917d9867fff888fcf7d9c7aefb4a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x11c, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xcd, 0x6, "287f644f684d0e42a20729eb6c080c566eea23664dc63a22ea63585f8e84038fff07bf291ad42a7310b33e3c8d2ec69b7ea0f941bf78aeb512d6a8d8a658cefffda08754f221dccd91690b173236d7389e9ab2818d1ba337ed82c1e0defc82ab2430f26ab5872a8da068515896083f0e9582fece1d4d732762731618417121202e9ac37b7e5e45e284b57559e28b0539652f20d443adca2ad1c30d7136a211a354e8e42f32b0111fea39b9a85a3e40fbe6e386ef8a960760050bcd9b7a419d1de1cdbeb7bd243b1cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x130, 0xa, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x7, 0x20000000, 0xa, 0x6}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1ff, 0x8, 0x555ffe75, 0x10000}, 0x2, r7}}]}, {0xc4, 0x6, "037258c7bb98852a58defffc5823619988f1ebc39838a69304e57e77ae20badf22fb76cdbc10006cb702574fe2dbac71f847113c02bba7f2021975f6ddcc264427c49e5ecf174f6b47b65dff8fe1d9b6762715a41e5f1b3da01948269403767ef7ae8f30f843bbafd1675eab5d33f71de1d587de0a30d388ff65b8426ec3af47c53dcbcc68dddad272e2b59503d99fe148c91e54948996ea940b34f5d53adf7e24de0d30faf459f9c6bd60920bda8279a0d5ad00b87c4677fd737852918d3fab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x47c, 0x1, [@m_csum={0xe8, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x8, 0x8000}, 0x17}}]}, {0x9e, 0x6, "7a4c3ddf97cd19a5e32c816c9abf93c8c4cafc8a80f91e801e0730e28717c62d6f2288d8a6eba4f29927aaa4f70dd6178244fbc0da7d48cc126ab79c3195106f831a55c3d34631f1dd1448e5e2887089e2c1119838dabb2714bff969e3d39f1d02a38dd29ffcefa6d4ea7300b93479bda102340b987b720c1ffabfd94482f909319de3567c6cd43799683288d93751f7da9f75570d5e1397f14a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xf4, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4, 0xffffffffeffffff8, 0x7, 0x621}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x262}, @TCA_CTINFO_ACT={0x18, 0x3, {0xb, 0x9, 0x0, 0x8a5, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0x66, 0x6, "5b2e51c15658526b5514e1dbe2105b58708ad0dc11a1094321f87bce85a9d1df6dc00d9336a8899eb2c118787049e29f69a7a82c3956dc66a57204b33f36c6406d752694f09da66ac621cdcffcb26dccd71beef768c26ab3edc71fef4393b7289bb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xdc, 0x1c, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x89, 0x6, "3fd787f90c50c68958e340fd53d13a2e0de6d31cdc53ac28b0d41c55bda007251569c2bdb661d85e624ee9ce4b016346c97b8c05b023f27a2fbc9a802171bdcf40ff2acf7b6a04821c790fe6b950ae6d2def81848c833764d4b4da97097e2ed0c429312805d0601fbb7ade75fd54b75249ab609c0ce5c3785806a3ef608bc73d75bdbf4fcb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x110, 0x15, 0x0, 0x0, {{0x7}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0xaa89148961f78951}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x91, 0x6, {0x5, 'nat\x00', 0x56, 0x6, "9f9b8d59d2f403fea4775626168bdc409280fd2e78df2e785b8b3afee83d53b0405f95b008f747df63d1227bc922dc3c5b60ae374c6e0ac7bbd7426a20a87303f73b36447ed44451a4c3655a819165bf63eae971772a60d6d556ade8e6cb63cc1f56e4f4451e89"}}]}, {0x33, 0x6, "46d254e3ad6f0a03b20a209bc198dc3f21740c9d25dfbd3bb2bea921012cc2f3ce55536a12d1100a249375e9dc0daf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0xb0, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x87, 0x6, "8d88caba261e33ee27692a8f9241d8e68e6cd3b89e0fd9595cdb335d44a8522cf3997ce9b27a98d465f04871a44698afb24d79dd6dbec116880acb09ba59fd328e88763539ce21d46b73a847ca5dc66857651e4506cf6ff7ba1cb0dfb35042940fc3a0c00864dd626302b780da89ba6d7fe99fd20ed2fe2031661cd7ff4e4a23191077"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x10c, 0x1, [@m_ct={0x108, 0x5, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0xcd, 0x6, "ca3d2c04d2a4757c5f83da8b2442b7239f6b7517da86b099260cce88df174bada546294a75002d55f72a253da7ced4b4f1a996cf615f329ccc0bdfcadcc1c69d848d6b2f065f67ab92582bdae199126325bde1e1dbec39839b529631f7157d49bc67fb9ab966117cbfbc608a0391ce5bf7f317c37577fc622f742fdee1d77525958babe6eb7b2fe968d2b257cc9d19742928d87ea7a810429436a7768e4cdd6a0bcc238956a4294ee0fea90ff92a65032c7ac3c2aed5627558a31e5d5e1b9b76148c84378b720b7881"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x11dc, 0x1, [@m_tunnel_key={0x17c, 0x8, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x96df, 0x20000000, 0x3, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x10000}]}, {0xef, 0x6, "056f622260a802f2e3249a52b6389cfc9d3fe3d19d7947b54ed1c927435a2786748db7840a957c3dcae8538462f4cee11d6e08b8b322f9d18bbbc5839eb8bb1a568e377d154dd4b650e8a8b99e6811ccdb8397c3cac9b024a8ce90554b9d1f095b5e87afee3510dc1f74a4a6421d46de34be0194eeb6b317866dd6b2f2ba1113e05a9a62cc3f1bac0da3632457089daf92e5b3827c80a095db3c47315f99cd762718411bc5fe7521613ea7da51dff3723d89edd23f884e6383819ec236243cb1f5ad4b672d984b2bc8f4839e20b7efdd088f718b522c357b0167675826c7b6c313cadd31339b300768094a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x105c, 0xe, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x6, 0x23f, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2b74}, 0x1, 0x0, 0x0, 0x40081}, 0x8090) read$hiddev(r4, &(0x7f0000003140)=""/96, 0x60) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000031c0)=0x0) move_pages(r9, 0x2, &(0x7f0000003200)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000003240)=[0xe03], &(0x7f0000003280)=[0x0, 0x0], 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x14) getdents(r4, &(0x7f00000032c0)=""/188, 0xbc) fallocate(r3, 0x10, 0xd, 0x6) mq_unlink(&(0x7f0000003380)='\x00') setpriority(0x2, r9, 0x1) sendmmsg$unix(r4, &(0x7f0000007ec0)=[{{&(0x7f00000033c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003440)="cb4f78b01e045e059743f4be45886c4c7d2b5b17782f648a11288bd1201aa3ce49d562ddce675dfde2598136eece5e44018abe2899c4eb176c2569cd0d8eb31644492e3623652bb2fdff023883265086b284de11499ca75e75a3ee46f1dc4a7509c6c0331aabb0b188c38a29c34ffa1b49b9ad04b0e6b1e92df87215cd2baf6fcf7b76880709d1518640f73d486ad451db6308a810f10c4d71ac66d4c0180c67e9567f7bfd4f6de8a4cca2fee8e7aa83d3be71276d72a145", 0xb8}, {&(0x7f0000003500)="cd18e775ea976e7a85c6ec07c932d110919708f2d228ba2dec96fd88a24fd8c1630c59e411bea91e4367ba4b1f29d86c5d7eba8549e95b0ae3d5691acbd8867c52e5e4b9e2b48193d62c6e912b19625424c8eaa77beb2626251c5cdaea76a000751a55e650cd76ceed71c52166a322e7cc4b68d907a5fbb91bd780ab51245912c22da8680926faf0af30587876eb99c097ecaaf1375204311fcc145f", 0x9c}, {&(0x7f00000035c0)="96b4efbd79a82c4ab5b1c04163721d48f724dc4a6149e4af47adbfc99197fc7da2c3eb53e3615191525c689c477b83c41d98ff18667e3bb182baadb351eadd63203e5e23c494003e19e1c54f3c50f9add96d449b1ca8a0", 0x57}, {&(0x7f0000003640)="dfced8e39e8f500ab47a2f41530b3a6d1fd3381ec71a7e408c519f9e464b97adfa8df576dad7e412417806c97b7158ef75138c9dc04d5dcdb6a7465dff1b3d94c3f3497a28944f1e812701f35c4054b367e1794787f25d142daecc9e6523aa643a566756b44d64b7c4f14f7321dfa819a5609342901934f0fb8e67bb0dd2357005", 0x81}, {&(0x7f0000003700)="406158dda50bc88329d5d084262ef0", 0xf}], 0x5, &(0x7f0000005880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r0, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r4, r10, r10, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0xa0, 0x800}}, {{&(0x7f0000005940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006a00)=[{&(0x7f00000059c0)="2759ee24bf75fba298", 0x9}, {&(0x7f0000005a00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40014}}, {{&(0x7f0000006a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006ac0)="8eaef3552140fc87f95281ec064fa473c21264b21ec0979404e2cdbb37a4197690e6ead25242973a4fb7c93d894a3ecf52fdb807668dfc010f8f5c77bbc043fca9424cde3480018f3517e297ea8f501c26a3a099fc94bbd806702be983ee36f029b506d6d87212c010b2f2b30dc644e4d76d668755939879c6cc4ee823189f405b317f3393640b3f1c2ab663a2f9a2d2fae931ca3535c2ebc397878719500bdf881555a3f0572cc0c6aea70c7ef55e15", 0xb0}, {&(0x7f0000006b80)="dcdbf2c6f960e23338968fc5be1ce8ffec6c340a040b12d252183f4efbb134c3e861ecc0266f6c4fa7528fe659e622d88491ef871c18f72de6a9be1a279f705be6cf46571364b9fadf4cc1523f6e9176820483a13f4f5dc16295ed187e8d5706d3c7e2aa1a5430362946ade1548e0e92e316", 0x72}, {&(0x7f0000006c00)="0ab54ddb4437bb59c270fb20f25d44b24ad50aaa4aaa135cd3876201390058e4cae6d1ba6c5de852e4b5a645a858525d42241f254b57b92a9339baa333a936b67eb1576fd49aa1df2b37945b6f373de8766be4f72addd612da685826bd08553b2926912ab0d25a57ff977f921a57917d49b287f2bee216bcdc2a487b5a", 0x7d}, {&(0x7f0000006c80)="33a44b9fe1", 0x5}, {&(0x7f0000006cc0)="f9bbca762064a3b0e538959da7c5e3ec2853c5f95cff60a07e0a72fd91bbdebb764c9a28fc06c79a86c471963813a6a35ae7e9daf177fd3d9bca0cdc45d6de0eb0a972c9acfe9eed9afdd6876d3a1230721b49853ca2d43515fa5acb701d002d55d05d5175551ea5812962890bb50e9bac9860ed213138ba60ec0c79893b9fd10fb9d5eb94226ba93503d985b2800cefacb51acf3aa7a3183fd762a6d81ab83df5b530aaafa15bdf1da8c228b6c10d7601d70ac785a5e04cafc4102575f0ca7c3cf7ecd964cb3d3b994b6c", 0xcb}], 0x5, &(0x7f00000072c0)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r3, r8, 0xffffffffffffffff, r10]}}, @rights={{0x18, 0x1, 0x1, [r8, r4]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, r4, r8]}}, @rights={{0x20, 0x1, 0x1, [r8, r2, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r4, r8, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x38, 0x1, 0x1, [r3, r8, r3, r8, r4, r3, 0xffffffffffffffff, r4, r0, r2]}}], 0x158}}, {{&(0x7f0000007440)=@file={0x0, '.\x00'}, 0x6e, &(0x7f00000078c0)=[{&(0x7f00000074c0)="d936e87e442f66b1eb66790ad98076ea57bd56fd1bc6a98dd88beac7d0022c0627cc6958aff82bbdad8a4cf662d39f68160c256aeb332ef5cc03e1ea202189607792722754135fb96f25b4b27e4bca6cd932d2bef488bc9070a4e8fbf994c451c10ed292ba36e11c434b1aedbb7d0ec4f8ccb84b488ac30816c3edb228eefcd9c68594b7758962f484c22b82", 0x8c}, {&(0x7f0000007580)="5de2507a61bc339bfdf9094cb3bbdac9b5107f2d630e1793716b512d46fa29eb4ce4963574234748209cb66ee619bae0bfb1f5f5e2f93f8e1a1721d2432ff5f3ef504b1cb79eafb591679feb79eb7d89d3429dc41b120988146c489dfe11e7311f5cf6a974df49e9df0ac11632df1f163d7b907410899659d858269b99f415c55aba2aec50a24b7bc9d2c426dea61c8acb67230eb03100bece04dc261fde1a361e605da8856e03b6f5432de575afb74f1b3170bde53a5bb4efceae", 0xbb}, {&(0x7f0000007640)="d1b5e869e726f81c3c51c7958c653753e134", 0x12}, {&(0x7f0000007680)="da7e1efc24a5a6015ff0cd334b74baec68f960266f164a942cc5299a8865dac60b5219503696b14683222f0edc54ad1ccaed414364643c8e0b73734b366d24b1984d037d699842dbc3081665c4bcce6644ad1481ab3d3078f00292956af6f7b8dde82d64d8662d022e98d2cd0b7588ec2e8758146085085fed9792fcc455587f423a49b40bb76b8eba8699324c9f537d9c483ec5bf21384e78404c10dfd486cc7fa5464cd284", 0xa6}, {&(0x7f0000007740)="a5c82d4ffc33212936db5f9e6565fedf31fe14d7f98317469c7390c8e991984dcb7bd7fb3ce5c8dc885e2adf12f2dc80415e6861fccb9a4efbef1e8070c69147c763d8a104aa", 0x46}, {&(0x7f00000077c0)="8df3a42628a6ce4efc465d8e1e52656b2883ee3c2d0f963fb8c9cb8b0a07a4f544c78afd3191c82ff2fa397340234518f28ce41ca1968b8f99c9039e72ff31f786474502999331a444b86e53e620441e00a0fdd38af04089be3db8109ff7708dd6c00eda3c2ad6bc9cdab786cba0f8ffe4f59def894b65ab7fa05962c2af042672f16cee291bb45687cea7d2fb1ca3a311ba08e54834e153a74e5aa7a6d2e0ff6ee4b204c1b842756162e75d1f81e0ab5fd2362b7265947269375dc46abc40a3ed8e6c6f3ad30f60", 0xc8}], 0x6, &(0x7f0000007a80)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x38, 0x48884}}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000007ac0)="284a870c3a46e9e4350f30e56b523a3714b1f51d4375f9a0d83a0d19615b51679360ef28936af38a68b77a758e89fb66b5db9b1aa4f0e84f7272349a5926530ce883b5118f4608063429ce021d76a8871e35ad3de465642255efc50ae4e7751f457354a7559eddbb7e593f20e47dd87df4e085c058db251fb6c3642ef52c0b1067a3", 0x82}, {&(0x7f0000007b80)="08d32e547c48a46e07c5f59a71696ce12d6b1e75ed20b05c37d6ef821575ced50beb485ca787", 0x26}, {&(0x7f0000007bc0)="57e08dbd4203ab6b95a5ffbb77f222b45108779ad4cf26a308640e8b721b5579175d64b478818c5536764a3ebe558d56fd4c31fc2cf53ed83cbb2530ffa816987e8dde594e1e691456807afb8ba11700d615886a5a990e10ab25e4351ee499d29c1848ba924e6f13e8ed8ed67df8735ff66160ba8043198ad388bf2aa07841e44a8e95a2f62ee15d367e95705b70b95613f99746a4cb0d9e2a", 0x99}, {&(0x7f0000007c80)="b84c8ce60b70ad7f0f45aa5849a678345ac58865bbab20b16651819cd3b7097534e40a85e548aa36b4dd669356ee5b75c9ccf6a48bb2b91fb7415d3393abeb57bc6313ebcafa99b2090ee8c76236f004806e175f73b41fb526c0f3afd53d199291c4c11740bb37b6f7c875236592ee2e878748fd4c5ca24500b8640e53f3c4809c2252f5ea7c7bdd2e47385e01cccfcacc1608e4e686", 0x96}, {&(0x7f0000007d40)="d9e1354137687342e1cbf7d0b4d3683e3b1d30dc6400c5ffe4f43fbaae155b6b87676fc0955a23df7a33fe4022711745edc29e986a1859444c2972d0284a257eb935e92a0582ac8874575a2bf3ae24f944a8db2beb41cbcda92fe5310c8fe890348a25f26a2daf283166bdeca2d3f0f64c1536b7c52b793f6b68346833ba348b4a8b933c7fb5a819c618c39ccf5d15cfaac77b3dacf2178f95405ced79a8995f4848591dbfa5d5ea5855f20a418e54395b324682051e1ff2158a66f7b37e4fc49954f0", 0xc3}], 0x5, 0x0, 0x0, 0x4040844}}], 0x5, 0x80) 10.923831222s ago: executing program 4 (id=966): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2fb, &(0x7f0000001fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) 10.717477925s ago: executing program 2 (id=967): syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200f8"], 0x40}}, 0xc800) 10.457688109s ago: executing program 4 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000200)) 10.330089051s ago: executing program 2 (id=970): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) 10.159988374s ago: executing program 2 (id=971): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@discard}]}, 0xfd, 0x277, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz '], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000009, 0x11, r0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xb}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) truncate(&(0x7f0000000080)='./file1\x00', 0xc30) 9.363157566s ago: executing program 4 (id=973): openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa8efeba21ee8de51, &(0x7f0000000bc0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5a34325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c70c7dd0ceb659e250e5119c5992ee82dcfb95d0269ade1e10bd70f4b00"/197], 0xff, 0x6de, &(0x7f0000000180)="$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") creat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f00000015c0)={0x4, [0x0, 0x8, 0x40], [{0x0, 0x8, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x5, 0x100000}, {}, {}, {0x5, 0x10001}, {0x8, 0x80000}, {0xee, 0x80000000}, {0x8}], 0x20}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a0, 0x98, 0x0, 0x138, 0x138, 0x0, 0x308, 0x308, 0x308, 0x308, 0x308, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xa}}}, {{@ip={@loopback, @private=0xa010102, 0xffffff00, 0xff, 'ip6tnl0\x00', 'veth0_vlan\x00', {}, {}, 0x5e, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x1843, 0xfd3, 0x15, &(0x7f00000002c0)={[0x2]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) 8.783753705s ago: executing program 2 (id=974): openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f00000015c0)={0x4, [0x0, 0x8, 0x40], [{0x0, 0x8, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x5, 0x100000}, {}, {}, {0x5, 0x10001}, {0x8, 0x80000}, {0xee, 0x80000000}, {0x8}], 0x20}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x1843, 0xfd3, 0x15, &(0x7f00000002c0)={[0x2]}, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) (fail_nth: 3) 5.463224206s ago: executing program 7 (id=982): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r1, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 5.301602908s ago: executing program 2 (id=983): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@dioread_lock}, {}, {@noauto_da_alloc}]}, 0xfe, 0x564, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbDb9lWpTKEU9SKAHK7WbJvFHBQ/1KFos6L0uyTSUbLoluylNLNge7MWLFEHEgohn7x6L/4B/RUELRUrQg5fIbGbTbbL52a2bOp8PTPvezOy++e6b78ubnV02gMIayf4pRbwcEV8nEUc6tpUj3ziyst/SoxuT2ZLE8vInfyaR5Ova+yf5/0N55aWI+PXLiFOl9e02FhZnqrVaOpfXR5uzV0cbC4unL89Wp9Pp9Mr4xMTZtybG333n7Z7F+vqFv7/7+N4HZ786sfTtzw+O3kniXBzOt3XG8RRudlZGYiR/TQbj3Jodx3rQ2F6S9PsA2JWBPM8HIxsDjsRAnvXA/98XEbEMFFQi/6Gg2vOA9rV9j66DnxsP31+5AFoff3nlvZE40Lo2OrSUPHFllF3vDveg/ayNX/64eydbonfvQwBs6eatiDhTLq8f/5J8/Nu9M9vYZ20bOxz/lnd4SECHe9n8541u85/S6vwnusx/hrrk7m5snf+lBz1oZkPZ/O+9rvPf1ZtWwwN57YXWnG8wuXS5lmZj24sRcTIG92f1ze7nnF26v+E41Tn/y5as/fZcMD+OB+X9Tz5mqtqsPk3MnR7einil6/w3We3/pEv/Z6/HhW22cTy9++pG27aO/9la/jHita79//iOVrL5/cnR1vkw2j4r1vvr9vHfNmq/3/Fn/X9o8/iHk877tY2dt/HDgX/Sjbbt9vzfl3zaKu/L112vNptzYxH7ko/Wrx9//Nh2vb1/Fv/JE5uPf93O/4MR8dk247997PaGu26v/5/d3dUs/qkd9f/OC/c//Pz73cef9f+brdLJfM12xr/tHuDTvHYAAAAAAACw15Qi4nAkpcpquVSqVFY+33EsDpVq9Ubz1KX6/JWpaH1XdjgGS+073UMdn4cYyz8P266Pr6lPRMTRiPhm4GCrXpms16b6HTwAAAAAAAAAAAAAAAAAAADsEUOd3///KVuz8v3/zO8DfT444Nnzk99QXFvmfy9+6QnYk/z9h+KS/1Bc8h+KS/5Dccl/KC75D8Ul/6G45D8AAAAAAAAAAAAAAAAAAAAAAAAAAAD01IXz57NleenRjcmsPnVtYX6mfu30VNqYqczOT1Ym63NXK9P1+nQtrUzWZ7d6vlq9fnVsPOavjzbTRnO0sbB4cbY+f6V58fJsdTq9mA7+J1EBAAAAAAAAAAAAAAAAAADA86WxsDhTrdXSOYXCFMp53/fmCcv9DkehsxC96tz+jUkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNa/AQAA//+1XjNO") openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x48, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x8, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x9, 0x3c5b, 0x1, 0x24, 0x676, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x5, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x200008, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xe, 0x2bf, 0x6c9, 0x401, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x3, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x35, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xa, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0xffffe24b, 0x9, 0x1, 0x7, 0x3, 0x7, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7ff, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x100005, 0x5, 0x0, 0x80000001, 0x5, 0xfffffbff, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x10008, 0x4, 0x6d01, 0x1, 0x38, 0x800003, 0x200, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x80, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8000007, 0x5, 0x3, 0x80000001, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x8, 0x2, 0x14c, 0x60a7, 0x80006, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x4003, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x8, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x2, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xfdff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 5.273692869s ago: executing program 7 (id=984): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x803e000000000000) close_range(r3, 0xffffffffffffffff, 0x0) 4.50919974s ago: executing program 5 (id=985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x27, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x71, 0x0, 0x0, @str='&^\x00'}]}, 0x18}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000008140e8cf09713c4b96f254a8d4b16be4ce06edc00dcfcd59bbaf4fbad075035cd0f4abd6087923092e5d45b3cbfa832148657d9e1b1f65bdbb"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x24) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x300}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") open(&(0x7f00000006c0)='./file1\x00', 0x10000, 0x14c) socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xffdffffe) openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x4002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000040)={0x0, 0x14, 0x0, 0xffffffc1, "25ae97df00000bba21c599885b000000000001000012f6a362dd8bc400"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r10 = dup2(r6, r6) preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000100)=""/217, 0xd9}], 0x1, 0x0, 0x10000ac1) 4.150064706s ago: executing program 4 (id=986): syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket(0x10, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000a100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a30000000001400000011"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_mount_image$zonefs(&(0x7f0000000000), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80)={[{@errors_zone_offline}, {@errors_repair}, {@errors_zone_offline}]}, 0x4, 0x9dc3, &(0x7f0000000040)="$eJwEwAMAbQUAwNBs27aXbdu2bS/3ro1s27Zt27a/0blvgPcP8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMGOHSAwwY4fIAjBjhygKMGOHqAYwY4doDjBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwW4dIDLBEiAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHeEqApwZogKcFeHqAZwR4ZoBnBXh2gOcEeG6AgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwjwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiAQwMcFuDwAEcEODLAUQGODnBMgGMDHCfEcUMcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqxKVDXCZEQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OcRTQjw1REM8LcTTQzwjxDNDPCvEs0M8J8RzQxyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYhXh3hNiNeGeF2I14d4Q4g3hnhTiDeHeEuIt4Z4W4i3h3hHiHeGeFeId4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDQhwa4rAQh4c4IsSRIY4KcXSIY0IcG+I4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhEuHeEyERLhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRnhLhqREa4WkRnh7hGRGeGeFZEZ4d4TkRnhvhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLh0AiHRTg8whERjoxwVISjIxwT4dgIx4lx3BjHi3H8GCeIccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKcekYl4mRGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjvGUGE+N0RhPi/H0GM+I8cwYz4rx7BjPifHcGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQGIfGOCzG4TGOiHFkjKNiHB3jmBjHxjhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgiS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCpyR4aoImeFqCpyd4RoJnJnhWgmcneE6C5yY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8EhyQ4NMFhCQ5PcESCIxMcleDoBMckODbBcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDrFZVIkxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlxVNTNMXTUjw9xTNSPDPFs1I8O8VzUjw3xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYrnpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkxaEpDktxeIojUhyZ4qgUR6c4JsWxKY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGS6TIRkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRmemqEZnpbh6RmekeGZGZ6V4dkZnpPhuRkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DIRkOzXBYhsMzHJHhyAxHZTg6wzEZjs1wnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl85xmRzJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQczfG0HE/P8Ywcz8zxrBzPzvGcHM/NcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OQ7JcWiOw3IcnuOIHEfmOCrH0TmOyXFsjuMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUSIHLFrhcgcsXuEKBKxa4UoErF7hKgasWuFqBqxe4RoFrFrhWgWsXuE6B6xa4XoHrF7hBgRsWuFGBGxe4SYGbFrhZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZ4XIHHF3hCgScWeFKBJxd4SoGnFmiBpxV4eoFnFHhmgWcVeHaB5xR4boGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSIFDCxxW4PACRxQ4ssBRBY4ucEyBYwscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS1yixCVLXKrEpUtcpkRKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSjy2xONKPL7EE0o8scSTSjy5xFNKPLVESzytxNNLPKPEM0s8q8SzSzynxHNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUNKHFrisBKHlziixJEljipxdIljShxb4jgVjlvheBWOX+EEFU5Y4UQVTlzhJBVOWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFVrhaRWeXuEZFZ5Z4VkVnl3hORWeW+GgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7C8yo8v8ILKrywwosqvLjCSyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuHQCodVOLzCERWOrHBUhaMrHFPh2ArHqXHcGsercfwaJ6hxwhonqnHiGiepcdIaJ6tx8hqnqHHKGqeqceoap6lx2hqnq3H6GmeoccYaZ6px5hpnqXHWGmercfYa56hxzhrnqnHuGuepcd4a56tx/hoXqHHBGheqceEaF6lx0RoXq3HxGpeocckal6px6RqXqZEal61xuRqXr3GFGlescaUaV65xlRpXrXG1GlevcY0a16xxrRrXrnGdGtetcb0a169xgxo3rHGjGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u8ZQaT63RGk+r8fQaz6jxzBrPqvHsGs+p8dwaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45Aah9Y4rMbhNY6ocWSNo2ocXeOYGsfWOE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUg0s3uEyDNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coOnNHhqgzZ4WoOnN3hGg2c2eFaDZzd4ToPnNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHNDi0wWENDm9wRIMjGxzV4OgGxzQ4tsFxWhy3xfFaHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWqTFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTWzypxZNbPKXFU1u0xdNaPL3FM1o8s8WzWjy7xXNaPLfFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKTFoS0Oa3F4iyNaHNniqBZHtzimxbEtjtPhuB2O1+H4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0eGSHS7V4dIdLtMhHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3OEpHZ7aoR2e1uHpHZ7R4ZkdntXh2R2e0+G5HQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MhHQ7tcFiHwzsc0eHIDkd1OLrDMR2O7XCcHsftcbwex+9xgh4n7HGiHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B5P6PHEHk/q8eQeT+nx1B7t8bQeT+/xjB7P7PGsHs/u8Zwez+1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvj/wTAAwBtBQDA0Gzbtpdt27ZtL9t810a2bdu27fpG574B3j/ABwb44AAfGuDDA3xkgI8O8LEBPj7AJwb45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8O8L8BDhng0AEOG+DwAY4Y4MgBjhrg6AGOGeDYAY4T4LgBjhfg+AFOEOCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhHgkgEuFeDSAS4TIAEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJAZ4Y4EkBnhzgKQGeGqABnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBDgIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8D/C/AIQEODXBYgMMDHBHgyABHBTg6wDEBjg1wnBDHDXG8EMcPcYIQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEJcMcakQlw5xmRAJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBBPCvHkEE8J8dQQDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDXEQYhBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh/idSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iAyE+GOJDIT4c4iMhPhriYyE+HuITIT4Z4lMhPh3iMyE+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyH+G+J/IQ4JcWiIw0IcHuKIEEeGOCrE0SGOCXFsiONEOG6E40U4foQTRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0S4ZIRLRbh0hMtESITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEG0e4SYSbRrhZhJtHuEWEW0a4VYRbR7hNhNtGuF2E20e4Q4Q7RrhThDtHuEuEu0a4W4S7R7hHhHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR3hChCdGeFKEJ0d4SoSnRmiEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2EgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CK+L8PoIb4jwxghvivDmCG+J8NYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+J8N8I/4twSIRDIxwW4fAIR0Q4MsJREY6OcEyEYyMcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLMbFY1wixiVjXCrGpWNcJkZiXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD7GE2I8McaTYjw5xlNiPDVGYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrYxzEGMQYxhjFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Md4XYzXx3hDjDfGeFOMN8d4S4y3xnhbjLfHeEeMd8Z4V4x3x3hPjPfGeF+M98f4QIwPxvhQjA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xvhfjENiHBrjsBiHxzgixpExjopxdIxjYhwb4zgJjpvgeAmOn+AECU6Y4EQJTpzgJAlOmuBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJLp7gEgkumeBSCS6d4DIJkuCyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZ6Q4IkJnpTgyQmekuCpCZrgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgIMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wesSvD7BGxK8McGbErw5wVsSvDXB2xK8PcE7ErwzwbsSvDvBexK8N8H7Erw/wQcSfDDBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfB/xIckuDQBIclODzBEQmOTHBUgqMTHJPg2ATHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSZEUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O8ZQUT03RFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFAcpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ilel+L1Kd6Q4o0p3pTizSnekuKtKd6W4u0p3pHinSneleLdKd6T4r0p3pfi/Sk+kOKDKT6U4sMpPpLioyk+luLjKT6R4pMpPpXi0yk+k+KzKT6X4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4pAUh6Y4LMXhKY5IcWSKo1IcneKYFMemOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGi2e4RIZLZrhUhktnuEyGZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGx2R4bIbHZXh8hidkeGKGJ2V4coanZHhqhmZ4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Y4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M787wngzvzfC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/83wvwyHZDg0w2EZDs9wRIYjMxyV4egMx2Q4NsNxchw3x/FyHD/HCXKcMMeJcpw4x0lynDTHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFclw8xyVyXDLHpXJcOsdlciTHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczwpx5NzPCXHU3M0x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Xh3jvfkeG+O9+V4f44P5Phgjg/l+HCOj+T4aI6P5fh4jk/k+GSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lOCTHoTkOy3F4jiNyHJnjqBxH5zgmx7E5jlPguAWOV+D4BU5Q4IQFTlTgxAVOUuCkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBS5S4KIFLlbg4gUuUeCSBS5V4NIFLlMgBS5b4HIFLl/gCgWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnljgSQWeXOApBZ5aoAWeVuDpBZ5R4JkFnlXg2QWeU+C5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQUOCgwKDAuMCowLTApMC8wKzAssCiwLrAqsC2wKbAvsCuwLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhBQ4tcFiBwwscUeDIAkcVOLrAMQWOLXCcEsctcbwSxy9xghInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSlyxxqRKXLnGZEilx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEk8q8eQSTynx1BIt8bQSTy/xjBLPLPGsEs8u8ZwSzy3xvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhKvLvGaEq8tcVBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDilxaInDShxe4ogSR5Y4qsTRJY4pcWyJ41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVLhkhUtVuHSFy1RIhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1Z4UoUnV3hKhadWaIWnVXh6hWdUeGaFZ1V4doXnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVeHWF11R4bYWDCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIhUMrHFbh8ApHVDiywlEVjq5wTIVjKxynxnFrHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqsala1ymRmpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLnGU2o8tUZrPK3G02s8o8YzazyrxrNrPKfGc2s8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQ2ocWuOwGofXOKLGkTWOqnF0jWNqHFvjOA2O2+B4DY7f4AQNTtjgRA1O3OAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FINLt3gMg3S4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDZ7S4KkN2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+CgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7B6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4NAGhzU4vMERDY5scFSDoxsc0+DYBsdpcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXanHpFpdpkRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27xlBZPbdEWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9p8doWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikBaHtjisxeEtjmhxZIujWhzd4pgWx7Y4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHS3e4TId0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh6d0eGqHdnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdjjoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7vCeDu/t8L4O7+/wgQ4f7PChDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dod0OLTDYR0O73BEhyM7HNXh6A7HdDi2w3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsselely6x2V6pMdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173K7H7Xvcoccde9ypx5173KXHXXvcrcfde9yjxz173KvHvXvcp8d9e9yvx/17PKDHA3s8qMeDezykx0N7PKzHw3s8oscjezyqx6N7PKbHY3s8rsfjezyhxxN7PKnHk3s8pcdTe7TH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY99j9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4//EwAPALQVAABDs23bXrZt27a9bNvGuzaybdu29Y3OfQO8f4APDPDBAT40wIcH+MgAHx3gYwN8fIBPDPDJAT41wKcH+MwAnx3gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3hfgPcH+ECADwb4UIAPB/hIgI8G+FiAjwf4RIBPBvhUgE8H+EyAzwb4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+IgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7E+0K8P8QHQnwwxIdCfDjER0J8NMTHQnw8xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4IBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xjiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8l+HSCzyT4bILPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9KQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M781wkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4X0Z3p/hAxk+mOFDGT6c4SMZPprhYxk+nuETGT6Z4VMZPp3hMxk+m+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewscFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgXeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsT7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3goHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYV3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4ZMVPlXh0xU+U+GzFT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/G+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8FBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0tDloMWgxbjFqMW0xaTFvMWsxbLFosW6xarFtsWmxb7FrsW7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7XDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hfR3e3+EDHT7Y4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+Pgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hv8nAB4AaCsAAIZm27a9bNu2bXvZtm27d21k27b9jU4wwHCA0QDjASYDTAeYDTAfYDHAcoDVAOsBNgNsB9gNsB/gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnAxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Af4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhviIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYLPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisykOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/NcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/l+HSOz+T4bI6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswMcLfKLAJwt8qsCnC3ymwGcLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+KgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7E50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWeF+N99f4QI0P1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1jioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Ft8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+1w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/P9Phsj4Me/w8AAP//wLDz/g==") r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_extract_tcp_res(&(0x7f0000000000), 0x18, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10bc}}, 0x8000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 4.027765048s ago: executing program 7 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) timer_delete(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x14, r5, 0x1}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 3.482029006s ago: executing program 5 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.413882248s ago: executing program 8 (id=944): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffb, 0x2448c1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) 2.851281976s ago: executing program 7 (id=989): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200f8"], 0x40}}, 0xc800) 2.082965588s ago: executing program 5 (id=990): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r1], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x298, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2414915b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3684}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbeb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4e72c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x332a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x571e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x887}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3550c1b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe2802fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1260d65d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58cce995}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f54}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc214}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74116d18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54a087a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x665d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bcb2552}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4142}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xedb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e8899e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42ddf69b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15e231b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ec526ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8cf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750c3aaa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f8cc0e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cafa7bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21f8a64}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7aed}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8285338}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f29}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x768f0b69}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fc56c15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x194c1514}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa28b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ecaff5e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3575a371}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c5f43aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79883351}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19cda6da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7863111c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46c623fb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2241948d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26f87844}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x768ec947}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf57c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb668}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x574263a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x524a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3126ceab}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.793421472s ago: executing program 2 (id=991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f8d5323ecbf30a31b9c846fa4b84ee2344a7efbe95d33765947206f5f2a973f245aba7822482a8371147c5b34a775be2960d4b755407e580a39f3cea7e03e893645b86e186a37b0f556acf06e793cbbcaa7e3faded7e9b6163aa4ea610cfe837f8757474ce3ad7e90ca24b95d01b1d3136e03d8caf8e5a64a20393a4fc7b39de2ba335347cd564ea494b0270b3f2ea7dc1b4d4606a1c34d085c65436cdcf94b01d3bb40d92695bb140031b0804816f3e1800a25afccfb194854c9bf63d0b0b1007ce5e8f1c07cef85708a945d4fd0"], 0x1, 0x15f, &(0x7f0000000ac0)="$eJzs209LKmEUx/HfM/693nvLsjbRImhRmzSV/rirlyI6iTSW5EoJopfS+yuodZHhMA44CuFYM5Tfz+r8PBx8RB49IArA0tp5G8rIKDUK29n8XcHEfSQAERlKeh8CWE6J57hPACAeT+dSV9Ljy21DidTUfjDqn437Vnq6fy9tJb2+ySgb3C8epL3xvPkzcz7n93Mz+/u74+f/q3/6rxWtKq81rXv9pj+/ueA2BCwXo2IwTzxg6aLt2Id+Trm57Oe0myuBXPVzxs3FxrXT/K6XACAk65P7nwjc/2Tg/gP4uXr9wWXdceybOQrLm51viiJEIRP+baKgWKCI81MJQBTS6nRLvf7goN2pt+yWfVU5rdSOq0flk1rJ3fxLk/s/gN/D/a5/9X4MiPswAAAAAAAAAAAAAAAglII24j4CAAAAgIhE8ic2AAAAAAAAAAAAAAAAAAAAAF/iIwAA//8EfyVg") pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x11, 0xd) 1.792484472s ago: executing program 4 (id=992): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x14907e, 0x2e) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x200) mknodat$loop(r2, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r3, &(0x7f00000004c0)='./bus\x00', r1, &(0x7f0000000500)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000840)=ANY=[@ANYRES8=r3, @ANYBLOB="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", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x0, 0xc42, &(0x7f0000000c80)="$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") ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x80000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r8 = dup(r7) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xfffc) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc01000013000d0000000000000093c99b21f2d27e7201000001ffffffff0000000000000000000000284e24000d0400ef080a00000000000000", @ANYRES16=r4, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x24000010) 1.743972023s ago: executing program 8 (id=993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local, {[@end]}}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 1.725983113s ago: executing program 7 (id=994): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 3) 1.519196727s ago: executing program 5 (id=995): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x78) 1.510342807s ago: executing program 8 (id=996): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x803e000000000000) close_range(r3, 0xffffffffffffffff, 0x0) 751.855788ms ago: executing program 5 (id=997): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x3c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x40, @mcast1, 0x1}, @in={0x2, 0x7, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x5, 0x20}, 0xc) 337.237895ms ago: executing program 7 (id=998): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20000005) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 226.046716ms ago: executing program 8 (id=999): userfaultfd(0xc0001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0xfffffffd, 0x1011b, 0xffffffffffffffff, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r9 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 0s ago: executing program 5 (id=1000): memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./file0\x00', 0x8, &(0x7f0000000240)={[{@errors_remount}, {}]}, 0x4, 0x51b, &(0x7f0000000780)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) kernel console output (not intermixed with test programs): 412.307025][ T7976] FAT-fs (loop4): Directory bread(block 70) failed [ 412.330724][ T7976] FAT-fs (loop4): Directory bread(block 71) failed [ 412.351242][ T7976] FAT-fs (loop4): Directory bread(block 72) failed [ 412.382181][ T7976] FAT-fs (loop4): Directory bread(block 73) failed [ 412.391380][ T7952] loop2: detected capacity change from 0 to 32768 [ 412.491585][ T7952] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 412.545599][ T7952] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 413.049304][ T8006] fuse: Bad value for 'group_id' [ 413.251448][ T8009] loop5: detected capacity change from 0 to 256 [ 413.334413][ T8009] exFAT-fs (loop5): bogus sectors bits per cluster : 143 [ 413.350377][ T4253] ocfs2: Unmounting device (7,2) on (node local) [ 413.369067][ T8009] exFAT-fs (loop5): failed to read boot sector [ 413.404522][ T8009] exFAT-fs (loop5): failed to recognize exfat type [ 413.670664][ T7986] netlink: 40 bytes leftover after parsing attributes in process `syz.7.753'. [ 413.811159][ T8020] loop2: detected capacity change from 0 to 512 [ 413.867048][ T8020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 413.925364][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.761'. [ 413.947167][ T8020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 413.984655][ T4341] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 414.001319][ T8020] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.174627][ T4341] usb 8-1: Using ep0 maxpacket: 16 [ 414.185873][ T4341] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.232628][ T4341] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.273113][ T4341] usb 8-1: config 0 interface 0 has no altsetting 0 [ 414.280211][ T4341] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 414.289441][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 414.289455][ T26] audit: type=1326 audit(1750697934.604:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.5.763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x0 [ 414.336121][ T4341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.357518][ T4341] usb 8-1: config 0 descriptor?? [ 414.374133][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 414.386883][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.763'. [ 414.403381][ T8033] device bond_slave_1 entered promiscuous mode [ 414.530811][ T8046] FAULT_INJECTION: forcing a failure. [ 414.530811][ T8046] name failslab, interval 1, probability 0, space 0, times 0 [ 414.550055][ T8046] CPU: 0 PID: 8046 Comm: syz.2.766 Not tainted 6.1.141-syzkaller #0 [ 414.558081][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.568148][ T8046] Call Trace: [ 414.571431][ T8046] [ 414.574365][ T8046] dump_stack_lvl+0x168/0x22e [ 414.579067][ T8046] ? show_regs_print_info+0x12/0x12 [ 414.584280][ T8046] ? load_image+0x3b0/0x3b0 [ 414.588879][ T8046] ? __might_sleep+0xd0/0xd0 [ 414.593481][ T8046] ? __lock_acquire+0x7c50/0x7c50 [ 414.598524][ T8046] should_fail_ex+0x399/0x4d0 [ 414.603257][ T8046] should_failslab+0x5/0x20 [ 414.607764][ T8046] slab_pre_alloc_hook+0x59/0x310 [ 414.612797][ T8046] ? __might_fault+0xa6/0x120 [ 414.617484][ T8046] ? kvmalloc_node+0x6c/0x180 [ 414.622167][ T8046] __kmem_cache_alloc_node+0x4f/0x260 [ 414.627556][ T8046] ? kvmalloc_node+0x6c/0x180 [ 414.632243][ T8046] __kmalloc_node+0xa0/0x240 [ 414.636842][ T8046] kvmalloc_node+0x6c/0x180 [ 414.641354][ T8046] xt_alloc_table_info+0x37/0xa0 [ 414.646304][ T8046] do_ip6t_set_ctl+0x87f/0xcd0 [ 414.651085][ T8046] ? nf_setsockopt+0x218/0x280 [ 414.655887][ T8046] ? ip6t_unregister_table_exit+0x230/0x230 [ 414.661798][ T8046] ? __lock_acquire+0x7c50/0x7c50 [ 414.666836][ T8046] ? trace_contention_end+0x5f/0x170 [ 414.672142][ T8046] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 414.677793][ T8046] ? mutex_unlock+0x10/0x10 [ 414.682480][ T8046] ? __fget_files+0x28/0x4d0 [ 414.687089][ T8046] ? __lock_acquire+0x7c50/0x7c50 [ 414.692218][ T8046] nf_setsockopt+0x25f/0x280 [ 414.696821][ T8046] rawv6_setsockopt+0x263/0x620 [ 414.701688][ T8046] ? __fget_files+0x44a/0x4d0 [ 414.706378][ T8046] ? raw6_destroy+0x30/0x30 [ 414.710888][ T8046] ? aa_sock_opt_perm+0x74/0x100 [ 414.715831][ T8046] ? sock_common_setsockopt+0x32/0xb0 [ 414.721212][ T8046] ? sock_common_recvmsg+0x1a0/0x1a0 [ 414.726516][ T8046] __sys_setsockopt+0x3d6/0x660 [ 414.731383][ T8046] ? __ia32_sys_recv+0xb0/0xb0 [ 414.736161][ T8046] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 414.742154][ T8046] ? lock_chain_count+0x20/0x20 [ 414.747022][ T8046] __x64_sys_setsockopt+0xb1/0xc0 [ 414.752064][ T8046] do_syscall_64+0x4c/0xa0 [ 414.756488][ T8046] ? clear_bhb_loop+0x60/0xb0 [ 414.761173][ T8046] ? clear_bhb_loop+0x60/0xb0 [ 414.765860][ T8046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.771771][ T8046] RIP: 0033:0x7f798018e929 [ 414.776198][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.795826][ T8046] RSP: 002b:00007f79810ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 414.804262][ T8046] RAX: ffffffffffffffda RBX: 00007f79803b5fa0 RCX: 00007f798018e929 [ 414.812249][ T8046] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 414.820233][ T8046] RBP: 00007f79810ab090 R08: 0000000000000568 R09: 0000000000000000 [ 414.828220][ T8046] R10: 0000200000000b80 R11: 0000000000000246 R12: 0000000000000001 [ 414.836207][ T8046] R13: 0000000000000000 R14: 00007f79803b5fa0 R15: 00007fff6da43d38 [ 414.844205][ T8046] [ 414.865114][ T8033] netlink: 'syz.5.763': attribute type 2 has an invalid length. [ 415.444617][ T8057] IPVS: Scheduler module ip_vs_sip not found [ 415.457728][ T8059] IPVS: length: 8 != 216 [ 415.530251][ T8068] FAULT_INJECTION: forcing a failure. [ 415.530251][ T8068] name failslab, interval 1, probability 0, space 0, times 0 [ 415.573795][ T8068] CPU: 1 PID: 8068 Comm: syz.5.772 Not tainted 6.1.141-syzkaller #0 [ 415.581831][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.591900][ T8068] Call Trace: [ 415.595193][ T8068] [ 415.598131][ T8068] dump_stack_lvl+0x168/0x22e [ 415.602827][ T8068] ? show_regs_print_info+0x12/0x12 [ 415.608038][ T8068] ? load_image+0x3b0/0x3b0 [ 415.612557][ T8068] ? __might_sleep+0xd0/0xd0 [ 415.617171][ T8068] ? __lock_acquire+0x7c50/0x7c50 [ 415.622225][ T8068] should_fail_ex+0x399/0x4d0 [ 415.626923][ T8068] should_failslab+0x5/0x20 [ 415.631447][ T8068] slab_pre_alloc_hook+0x59/0x310 [ 415.636495][ T8068] ? __split_vma+0x500/0x500 [ 415.641121][ T8068] kmem_cache_alloc+0x56/0x2f0 [ 415.645905][ T8068] ? vm_area_dup+0x23/0x1a0 [ 415.650433][ T8068] vm_area_dup+0x23/0x1a0 [ 415.654787][ T8068] __split_vma+0xb9/0x500 [ 415.659144][ T8068] do_mas_align_munmap+0x762/0x1220 [ 415.664373][ T8068] ? do_mas_munmap+0x2b0/0x2b0 [ 415.669151][ T8068] ? mtree_range_walk+0x672/0x7b0 [ 415.674188][ T8068] ? mas_walk+0x15f/0x180 [ 415.678524][ T8068] ? mas_find+0x1e8/0x230 [ 415.682863][ T8068] do_mas_munmap+0x240/0x2b0 [ 415.687463][ T8068] mmap_region+0x713/0x1d30 [ 415.691978][ T8068] ? file_mmap_ok+0x170/0x170 [ 415.696655][ T8068] ? validate_mm+0x22a/0x2b0 [ 415.701250][ T8068] ? cap_mmap_addr+0x165/0x2e0 [ 415.706009][ T8068] ? shmem_get_unmapped_area+0x2dc/0x710 [ 415.711652][ T8068] ? file_mmap_ok+0x11c/0x170 [ 415.716329][ T8068] do_mmap+0x894/0xf30 [ 415.720401][ T8068] ? mlock_future_check+0x100/0x100 [ 415.725595][ T8068] ? ima_file_free+0x3e0/0x3e0 [ 415.730356][ T8068] ? common_file_perm+0x171/0x1c0 [ 415.735380][ T8068] vm_mmap_pgoff+0x1b2/0x2b0 [ 415.739972][ T8068] ? account_locked_vm+0xe0/0xe0 [ 415.744911][ T8068] ksys_mmap_pgoff+0x516/0x6f0 [ 415.749673][ T8068] ? lockdep_hardirqs_on+0x94/0x140 [ 415.754864][ T8068] do_syscall_64+0x4c/0xa0 [ 415.759273][ T8068] ? clear_bhb_loop+0x60/0xb0 [ 415.763943][ T8068] ? clear_bhb_loop+0x60/0xb0 [ 415.768618][ T8068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.774517][ T8068] RIP: 0033:0x7fca0d58e929 [ 415.778925][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.798554][ T8068] RSP: 002b:00007fca0e3aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 415.806972][ T8068] RAX: ffffffffffffffda RBX: 00007fca0d7b5fa0 RCX: 00007fca0d58e929 [ 415.814946][ T8068] RDX: 000000000300000d RSI: 0000000000004000 RDI: 0000200000000000 [ 415.822914][ T8068] RBP: 00007fca0e3aa090 R08: 0000000000000006 R09: 0000000000001000 [ 415.830877][ T8068] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 415.838840][ T8068] R13: 0000000000000000 R14: 00007fca0d7b5fa0 R15: 00007ffc79624138 [ 415.846823][ T8068] [ 416.366236][ T8077] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.151240][ T4341] usbhid 8-1:0.0: can't add hid device: -71 [ 418.161890][ T4341] usbhid: probe of 8-1:0.0 failed with error -71 [ 418.291373][ T4341] usb 8-1: USB disconnect, device number 2 [ 418.899342][ T8090] loop2: detected capacity change from 0 to 2048 [ 419.001439][ T8091] loop4: detected capacity change from 0 to 512 [ 419.012705][ T8091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.114934][ T8091] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 420.124650][ T8091] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.246809][ T8090] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 420.464791][ T8096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.534467][ T8099] FAULT_INJECTION: forcing a failure. [ 420.534467][ T8099] name failslab, interval 1, probability 0, space 0, times 0 [ 420.547531][ T8099] CPU: 0 PID: 8099 Comm: syz.7.781 Not tainted 6.1.141-syzkaller #0 [ 420.555515][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.565560][ T8099] Call Trace: [ 420.568821][ T8099] [ 420.571737][ T8099] dump_stack_lvl+0x168/0x22e [ 420.576405][ T8099] ? show_regs_print_info+0x12/0x12 [ 420.581588][ T8099] ? load_image+0x3b0/0x3b0 [ 420.586073][ T8099] ? __might_sleep+0xd0/0xd0 [ 420.590648][ T8099] ? __lock_acquire+0x7c50/0x7c50 [ 420.595658][ T8099] should_fail_ex+0x399/0x4d0 [ 420.600325][ T8099] should_failslab+0x5/0x20 [ 420.604810][ T8099] slab_pre_alloc_hook+0x59/0x310 [ 420.609822][ T8099] kmem_cache_alloc+0x56/0x2f0 [ 420.614580][ T8099] ? __alloc_file+0x25/0x230 [ 420.619190][ T8099] __alloc_file+0x25/0x230 [ 420.623596][ T8099] alloc_empty_file+0x90/0x180 [ 420.628435][ T8099] path_openat+0xfc/0x2e70 [ 420.632844][ T8099] ? verify_lock_unused+0x140/0x140 [ 420.638032][ T8099] ? verify_lock_unused+0x140/0x140 [ 420.643238][ T8099] ? do_filp_open+0x3c0/0x3c0 [ 420.647933][ T8099] do_filp_open+0x1c1/0x3c0 [ 420.652432][ T8099] ? vfs_tmpfile+0x480/0x480 [ 420.657023][ T8099] ? _raw_spin_unlock+0x24/0x40 [ 420.661865][ T8099] ? alloc_fd+0x58f/0x630 [ 420.666195][ T8099] do_sys_openat2+0x142/0x490 [ 420.670874][ T8099] ? do_sys_open+0xe0/0xe0 [ 420.675292][ T8099] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 420.681263][ T8099] ? lock_chain_count+0x20/0x20 [ 420.686094][ T8099] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 420.692063][ T8099] __x64_sys_openat+0x135/0x160 [ 420.696905][ T8099] do_syscall_64+0x4c/0xa0 [ 420.701314][ T8099] ? clear_bhb_loop+0x60/0xb0 [ 420.705980][ T8099] ? clear_bhb_loop+0x60/0xb0 [ 420.710638][ T8099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.716551][ T8099] RIP: 0033:0x7fb9e278d290 [ 420.720951][ T8099] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 420.740546][ T8099] RSP: 002b:00007fb9e35c6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 420.748952][ T8099] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb9e278d290 [ 420.756920][ T8099] RDX: 0000000000000002 RSI: 00007fb9e35c6c10 RDI: 00000000ffffff9c [ 420.764878][ T8099] RBP: 00007fb9e35c6c10 R08: 0000000000000000 R09: 00236f656469762f [ 420.772842][ T8099] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 420.780802][ T8099] R13: 0000000000000001 R14: 00007fb9e29b6080 R15: 00007fff22627c68 [ 420.788772][ T8099] [ 421.200500][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 421.417408][ T8090] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 421.434310][ T8090] Remounting filesystem read-only [ 421.437483][ T8105] loop6: detected capacity change from 0 to 1024 [ 421.450694][ T8090] NILFS (loop2): mounting fs with errors [ 421.459084][ T8105] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 421.520838][ T8105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.011325][ T8117] loop6: detected capacity change from 0 to 32768 [ 422.026722][ T8105] netlink: 'syz.6.780': attribute type 12 has an invalid length. [ 422.220106][ T8116] loop7: detected capacity change from 0 to 65536 [ 422.286484][ T8105] jfs_rename did not expect dtDelete to return rc = -2 [ 422.295030][ T8105] ERROR: (device loop6): jfs_rename: [ 422.295030][ T8105] [ 422.316862][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 422.344154][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.353739][ T8123] loop4: detected capacity change from 0 to 16 [ 422.542087][ T8123] erofs: (device loop4): mounted with root inode @ nid 36. [ 422.592863][ T8116] XFS (loop7): Mounting V5 Filesystem [ 422.640335][ T8116] XFS (loop7): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c. Caller xlog_header_check_mount+0x8e/0xd0 [ 422.657473][ T8116] CPU: 0 PID: 8116 Comm: syz.7.785 Not tainted 6.1.141-syzkaller #0 [ 422.665483][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.675547][ T8116] Call Trace: [ 422.678817][ T8116] [ 422.681738][ T8116] dump_stack_lvl+0x168/0x22e [ 422.686406][ T8116] ? __xfs_printk+0x90/0x90 [ 422.690901][ T8116] ? show_regs_print_info+0x12/0x12 [ 422.696100][ T8116] ? kmem_cache_free+0xf7/0x290 [ 422.700947][ T8116] ? xfs_rw_bdev+0x2d2/0x2f0 [ 422.705548][ T8116] xfs_corruption_error+0x11e/0x170 [ 422.710744][ T8116] ? xlog_header_check_mount+0x8e/0xd0 [ 422.716202][ T8116] xlog_header_check_mount+0xbd/0xd0 [ 422.721481][ T8116] ? xlog_header_check_mount+0x8e/0xd0 [ 422.726928][ T8116] xlog_find_verify_log_record+0x32f/0x550 [ 422.732729][ T8116] xlog_find_zeroed+0x379/0x460 [ 422.737571][ T8116] xlog_find_head+0x60/0x790 [ 422.742148][ T8116] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 422.748036][ T8116] ? lockdep_hardirqs_on+0x94/0x140 [ 422.753225][ T8116] xlog_find_tail+0x3e/0xa00 [ 422.757803][ T8116] ? do_raw_spin_unlock+0x11d/0x230 [ 422.762996][ T8116] ? try_to_wake_up+0x67c/0x1080 [ 422.767935][ T8116] xlog_recover+0x48/0x450 [ 422.772343][ T8116] xfs_log_mount+0x2ba/0x460 [ 422.776930][ T8116] xfs_mountfs+0xc42/0x1d10 [ 422.781419][ T8116] ? lockdep_softirqs_off+0x420/0x420 [ 422.786793][ T8116] ? xfs_default_resblks+0x70/0x70 [ 422.791894][ T8116] ? init_timer_key+0x178/0x320 [ 422.796740][ T8116] ? rcu_is_watching+0x11/0xa0 [ 422.801496][ T8116] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 422.807730][ T8116] xfs_fs_fill_super+0x10f0/0x1350 [ 422.812856][ T8116] get_tree_bdev+0x3f1/0x610 [ 422.817448][ T8116] ? xfs_fs_warn_deprecated+0x190/0x190 [ 422.823432][ T8116] vfs_get_tree+0x88/0x270 [ 422.827852][ T8116] do_new_mount+0x24a/0xa40 [ 422.832351][ T8116] __se_sys_mount+0x2d6/0x3c0 [ 422.837021][ T8116] ? __x64_sys_mount+0xc0/0xc0 [ 422.841776][ T8116] ? lockdep_hardirqs_on+0x94/0x140 [ 422.846959][ T8116] ? __x64_sys_mount+0x1c/0xc0 [ 422.851714][ T8116] do_syscall_64+0x4c/0xa0 [ 422.856125][ T8116] ? clear_bhb_loop+0x60/0xb0 [ 422.860787][ T8116] ? clear_bhb_loop+0x60/0xb0 [ 422.865449][ T8116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.871335][ T8116] RIP: 0033:0x7fb9e27900ca [ 422.875999][ T8116] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.895599][ T8116] RSP: 002b:00007fb9e35e7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 422.904025][ T8116] RAX: ffffffffffffffda RBX: 00007fb9e35e7ef0 RCX: 00007fb9e27900ca [ 422.912021][ T8116] RDX: 000020000000b840 RSI: 0000200000000000 RDI: 00007fb9e35e7eb0 [ 422.920010][ T8116] RBP: 000020000000b840 R08: 00007fb9e35e7ef0 R09: 0000000000000000 [ 422.927970][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 422.936016][ T8116] R13: 00007fb9e35e7eb0 R14: 000000000000b967 R15: 00002000000002c0 [ 422.943983][ T8116] [ 422.947653][ T8116] XFS (loop7): Corruption detected. Unmount and run xfs_repair [ 422.955231][ T8116] XFS (loop7): log has mismatched uuid - can't recover [ 422.962115][ T8116] XFS (loop7): empty log check failed [ 422.967493][ T8116] XFS (loop7): log mount/recovery failed: error -117 [ 423.022568][ T8116] XFS (loop7): log mount failed [ 423.137040][ T4539] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 423.206034][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.356032][ T4539] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 423.384193][ T8116] loop7: detected capacity change from 0 to 8192 [ 423.406903][ T8116] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 423.407084][ T4539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.419985][ T8116] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 423.420088][ T8116] REISERFS (device loop7): using ordered data mode [ 423.420099][ T8116] reiserfs: using flush barriers [ 423.450426][ T8116] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 423.467179][ T8116] REISERFS (device loop7): checking transaction log (loop7) [ 423.528974][ T8116] REISERFS (device loop7): Using tea hash to sort names [ 423.536580][ T8116] REISERFS warning (device loop7): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 423.549364][ T8116] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 423.656305][ T8142] netlink: 'syz.5.788': attribute type 4 has an invalid length. [ 423.758365][ T8116] overlayfs: './bus' not a directory [ 423.875222][ T4539] usb 5-1: config 0 descriptor?? [ 423.902370][ T4539] cp210x 5-1:0.0: cp210x converter detected [ 423.963885][ T8155] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 423.998540][ T8155] cramfs: wrong magic [ 424.204923][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 424.228989][ T8157] device dummy0 entered promiscuous mode [ 424.287241][ T8157] device macvtap1 entered promiscuous mode [ 424.303491][ T4539] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 424.326546][ T8155] device dummy0 left promiscuous mode [ 424.391724][ T4539] usb 5-1: cp210x converter now attached to ttyUSB0 [ 427.602636][ T8167] loop6: detected capacity change from 0 to 512 [ 427.642254][ T8167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 427.917198][ T8167] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 427.927330][ T8167] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.322829][ T22] usb 5-1: USB disconnect, device number 13 [ 428.415298][ T4912] EXT4-fs (loop6): unmounting filesystem. [ 428.425066][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 428.490386][ T22] cp210x 5-1:0.0: device disconnected [ 428.753849][ T8186] netlink: 'syz.5.794': attribute type 21 has an invalid length. [ 428.761825][ T8186] netlink: 128 bytes leftover after parsing attributes in process `syz.5.794'. [ 428.773946][ T8186] netlink: 'syz.5.794': attribute type 6 has an invalid length. [ 428.781740][ T8186] netlink: 3 bytes leftover after parsing attributes in process `syz.5.794'. [ 429.484915][ T8188] loop2: detected capacity change from 0 to 2048 [ 429.564793][ T8188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.643476][ T8188] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 429.776011][ T8197] FAULT_INJECTION: forcing a failure. [ 429.776011][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 429.864358][ T8197] CPU: 0 PID: 8197 Comm: syz.6.802 Not tainted 6.1.141-syzkaller #0 [ 429.872415][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.882492][ T8197] Call Trace: [ 429.885786][ T8197] [ 429.888737][ T8197] dump_stack_lvl+0x168/0x22e [ 429.893445][ T8197] ? show_regs_print_info+0x12/0x12 [ 429.898680][ T8197] ? load_image+0x3b0/0x3b0 [ 429.903210][ T8197] ? __might_sleep+0xd0/0xd0 [ 429.907826][ T8197] ? __lock_acquire+0x7c50/0x7c50 [ 429.912883][ T8197] should_fail_ex+0x399/0x4d0 [ 429.917610][ T8197] should_failslab+0x5/0x20 [ 429.922139][ T8197] slab_pre_alloc_hook+0x59/0x310 [ 429.927191][ T8197] kmem_cache_alloc_node+0x5a/0x320 [ 429.932416][ T8197] ? __alloc_skb+0xfc/0x7e0 [ 429.936947][ T8197] __alloc_skb+0xfc/0x7e0 [ 429.941312][ T8197] alloc_skb_with_frags+0xa7/0x710 [ 429.946477][ T8197] ? __lock_acquire+0x7c50/0x7c50 [ 429.951533][ T8197] ? __lock_acquire+0x12e5/0x7c50 [ 429.956598][ T8197] sock_alloc_send_pskb+0x853/0x980 [ 429.961839][ T8197] ? sock_kzfree_s+0x50/0x50 [ 429.966469][ T8197] ? iov_iter_advance+0x84/0x1a0 [ 429.971436][ T8197] tun_get_user+0x79b/0x3b90 [ 429.976070][ T8197] ? rcu_read_unlock+0xa0/0xa0 [ 429.980858][ T8197] ? tun_get+0x1c/0x2e0 [ 429.985034][ T8197] ? __lock_acquire+0x7c50/0x7c50 [ 429.990088][ T8197] ? tun_get+0x1c/0x2e0 [ 429.994273][ T8197] tun_chr_write_iter+0x112/0x1f0 [ 429.999323][ T8197] vfs_write+0x44c/0x960 [ 430.003598][ T8197] ? file_end_write+0x250/0x250 [ 430.008497][ T8197] ? __fget_files+0x44a/0x4d0 [ 430.013217][ T8197] ? __fdget_pos+0x1d4/0x360 [ 430.017841][ T8197] ? ksys_write+0x71/0x240 [ 430.022287][ T8197] ksys_write+0x143/0x240 [ 430.026638][ T8197] ? __ia32_sys_read+0x80/0x80 [ 430.031430][ T8197] ? lockdep_hardirqs_on+0x94/0x140 [ 430.036649][ T8197] do_syscall_64+0x4c/0xa0 [ 430.041078][ T8197] ? clear_bhb_loop+0x60/0xb0 [ 430.045770][ T8197] ? clear_bhb_loop+0x60/0xb0 [ 430.050459][ T8197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.056379][ T8197] RIP: 0033:0x7ff76138e929 [ 430.060809][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.080462][ T8197] RSP: 002b:00007ff762134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.088906][ T8197] RAX: ffffffffffffffda RBX: 00007ff7615b5fa0 RCX: 00007ff76138e929 [ 430.096900][ T8197] RDX: 0000000000000fce RSI: 00002000000004c0 RDI: 0000000000000004 [ 430.104895][ T8197] RBP: 00007ff762134090 R08: 0000000000000000 R09: 0000000000000000 [ 430.112886][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.120907][ T8197] R13: 0000000000000000 R14: 00007ff7615b5fa0 R15: 00007ffed4933f98 [ 430.128913][ T8197] [ 430.268285][ T8210] delete_channel: no stack [ 430.475933][ T8219] x_tables: duplicate underflow at hook 3 [ 430.575155][ T3639] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 430.774663][ T3639] usb 6-1: Using ep0 maxpacket: 32 [ 430.801141][ T3639] usb 6-1: config 1 interface 0 has no altsetting 0 [ 430.855947][ T8230] loop7: detected capacity change from 0 to 512 [ 430.872518][ T8230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.921140][ T3639] usb 6-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40 [ 431.035753][ T3639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.134597][ T3639] usb 6-1: Product: syz [ 431.165540][ T8230] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 431.175373][ T8230] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.187482][ T3639] usb 6-1: Manufacturer: syz [ 431.228199][ T3639] usb 6-1: SerialNumber: syz [ 431.761962][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.805'. [ 431.827565][ T3639] usbhid 6-1:1.0: can't add hid device: -71 [ 431.833607][ T3639] usbhid: probe of 6-1:1.0 failed with error -71 [ 431.944494][ T8245] FAULT_INJECTION: forcing a failure. [ 431.944494][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 431.954736][ T3639] usb 6-1: USB disconnect, device number 4 [ 431.965879][ T8245] CPU: 1 PID: 8245 Comm: syz.4.813 Not tainted 6.1.141-syzkaller #0 [ 431.973904][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.983985][ T8245] Call Trace: [ 431.987280][ T8245] [ 431.990205][ T8245] dump_stack_lvl+0x168/0x22e [ 431.994888][ T8245] ? show_regs_print_info+0x12/0x12 [ 432.000081][ T8245] ? load_image+0x3b0/0x3b0 [ 432.004578][ T8245] ? __might_sleep+0xd0/0xd0 [ 432.009165][ T8245] ? __lock_acquire+0x7c50/0x7c50 [ 432.014188][ T8245] should_fail_ex+0x399/0x4d0 [ 432.018861][ T8245] should_failslab+0x5/0x20 [ 432.023358][ T8245] slab_pre_alloc_hook+0x59/0x310 [ 432.028380][ T8245] kmem_cache_alloc_node+0x5a/0x320 [ 432.033574][ T8245] ? __alloc_skb+0xfc/0x7e0 [ 432.038082][ T8245] __alloc_skb+0xfc/0x7e0 [ 432.042411][ T8245] ? netlink_autobind+0xda/0x300 [ 432.047373][ T8245] netlink_sendmsg+0x645/0xbc0 [ 432.052154][ T8245] ? netlink_getsockopt+0x540/0x540 [ 432.057348][ T8245] ? aa_sock_msg_perm+0x94/0x150 [ 432.062279][ T8245] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 432.067557][ T8245] ? security_socket_sendmsg+0x7c/0xa0 [ 432.073008][ T8245] ? netlink_getsockopt+0x540/0x540 [ 432.078201][ T8245] ____sys_sendmsg+0x59b/0x970 [ 432.082966][ T8245] ? __sys_sendmsg_sock+0x30/0x30 [ 432.087983][ T8245] ? __import_iovec+0x315/0x500 [ 432.092834][ T8245] ? import_iovec+0x6f/0xa0 [ 432.097337][ T8245] ___sys_sendmsg+0x21c/0x290 [ 432.102013][ T8245] ? __sys_sendmsg+0x270/0x270 [ 432.106785][ T8245] ? __lock_acquire+0x7c50/0x7c50 [ 432.111816][ T8245] ? __fdget+0x17c/0x200 [ 432.116054][ T8245] __se_sys_sendmsg+0x19e/0x270 [ 432.120904][ T8245] ? __x64_sys_sendmsg+0x80/0x80 [ 432.125844][ T8245] ? lockdep_hardirqs_on+0x94/0x140 [ 432.131036][ T8245] do_syscall_64+0x4c/0xa0 [ 432.135447][ T8245] ? clear_bhb_loop+0x60/0xb0 [ 432.140116][ T8245] ? clear_bhb_loop+0x60/0xb0 [ 432.144783][ T8245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.150701][ T8245] RIP: 0033:0x7f0dded8e929 [ 432.155109][ T8245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.174715][ T8245] RSP: 002b:00007f0ddfc99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.183124][ T8245] RAX: ffffffffffffffda RBX: 00007f0ddefb5fa0 RCX: 00007f0dded8e929 [ 432.191089][ T8245] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 432.199054][ T8245] RBP: 00007f0ddfc99090 R08: 0000000000000000 R09: 0000000000000000 [ 432.207016][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.215066][ T8245] R13: 0000000000000000 R14: 00007f0ddefb5fa0 R15: 00007ffeaec751a8 [ 432.223039][ T8245] [ 432.227772][ T7024] EXT4-fs (loop7): unmounting filesystem. [ 432.275582][ T8241] loop2: detected capacity change from 0 to 1024 [ 432.325478][ T8241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.332126][ T8241] ext4: Unknown parameter 'appraise_type' [ 432.623426][ T8254] loop7: detected capacity change from 0 to 512 [ 432.679812][ T8254] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 432.718024][ T8254] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 432.821171][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.817'. [ 433.688601][ T8254] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.815: corrupted in-inode xattr [ 433.702064][ T8254] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.815: couldn't read orphan inode 15 (err -117) [ 433.735220][ T8254] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 434.120994][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.820'. [ 434.616397][ T7024] EXT4-fs (loop7): unmounting filesystem. [ 434.624672][ T4304] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 434.844603][ T4304] usb 3-1: Using ep0 maxpacket: 8 [ 434.856375][ T8277] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.857014][ T4304] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 434.886633][ T4304] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.929923][ T8268] loop4: detected capacity change from 0 to 32768 [ 434.994669][ T4304] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.030319][ T8268] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 435.045892][ T4304] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.057300][ T4304] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.074157][ T4304] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.090043][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.130089][ T8268] (syz.4.818,8268,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 435.311386][ T4304] usb 3-1: usb_control_msg returned -32 [ 435.317644][ T4304] usbtmc 3-1:16.0: can't read capabilities [ 435.370619][ T4254] ocfs2: Unmounting device (7,4) on (node local) [ 435.518566][ T8294] loop5: detected capacity change from 0 to 1024 [ 435.525764][ T8296] netlink: 336 bytes leftover after parsing attributes in process `syz.4.826'. [ 435.675254][ T4304] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 435.700032][ T8301] loop6: detected capacity change from 0 to 512 [ 435.729413][ T8301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.832137][ T8301] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 435.847064][ T8301] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.964704][ T4304] usb 8-1: Using ep0 maxpacket: 16 [ 435.974228][ T4304] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.999137][ T8302] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 436.203411][ T4304] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.410593][ T4304] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.504251][ T4304] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.533997][ T4304] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.567594][ T4912] EXT4-fs (loop6): unmounting filesystem. [ 436.569212][ T4257] usb 3-1: USB disconnect, device number 6 [ 436.615578][ T4304] usb 8-1: config 0 descriptor?? [ 436.871752][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.830'. [ 437.427522][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.781148][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.151029][ T8327] loop7: detected capacity change from 0 to 1024 [ 438.158477][ T8327] EXT4-fs: Ignoring removed oldalloc option [ 438.164592][ T8327] EXT4-fs: Ignoring removed bh option [ 438.176533][ T8327] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 438.841783][ T8330] FAULT_INJECTION: forcing a failure. [ 438.841783][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.864816][ T8330] CPU: 1 PID: 8330 Comm: syz.2.834 Not tainted 6.1.141-syzkaller #0 [ 438.872877][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.882951][ T8330] Call Trace: [ 438.886245][ T8330] [ 438.889184][ T8330] dump_stack_lvl+0x168/0x22e [ 438.893883][ T8330] ? show_regs_print_info+0x12/0x12 [ 438.899204][ T8330] ? load_image+0x3b0/0x3b0 [ 438.903739][ T8330] ? __lock_acquire+0x7c50/0x7c50 [ 438.908796][ T8330] ? tomoyo_path_number_perm+0x503/0x600 [ 438.914449][ T8330] should_fail_ex+0x399/0x4d0 [ 438.919146][ T8330] _copy_from_user+0x2c/0x170 [ 438.923846][ T8330] wext_handle_ioctl+0xb7/0x1c0 [ 438.928713][ T8330] ? call_commit_handler+0xf0/0xf0 [ 438.933832][ T8330] sock_ioctl+0x145/0x6e0 [ 438.938159][ T8330] ? sock_poll+0x3f0/0x3f0 [ 438.942571][ T8330] ? bpf_lsm_file_ioctl+0x5/0x10 [ 438.947505][ T8330] ? security_file_ioctl+0x7c/0xa0 [ 438.952611][ T8330] ? sock_poll+0x3f0/0x3f0 [ 438.957019][ T8330] __se_sys_ioctl+0xfa/0x170 [ 438.961608][ T8330] do_syscall_64+0x4c/0xa0 [ 438.966016][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 438.970686][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 438.975356][ T8330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.981248][ T8330] RIP: 0033:0x7f798018e929 [ 438.985654][ T8330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.005252][ T8330] RSP: 002b:00007f79810ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.013661][ T8330] RAX: ffffffffffffffda RBX: 00007f79803b5fa0 RCX: 00007f798018e929 [ 439.021625][ T8330] RDX: 0000200000000080 RSI: 0000000000008b15 RDI: 0000000000000003 [ 439.029587][ T8330] RBP: 00007f79810ab090 R08: 0000000000000000 R09: 0000000000000000 [ 439.037548][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.045508][ T8330] R13: 0000000000000000 R14: 00007f79803b5fa0 R15: 00007fff6da43d38 [ 439.053481][ T8330] [ 439.084818][ T8327] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 439.102591][ T26] audit: type=1800 audit(1750697959.414:60): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.825" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 439.127046][ T8325] EXT4-fs error (device loop7): mb_free_blocks:1815: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 439.214607][ T4257] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 439.226450][ T8315] loop5: detected capacity change from 0 to 32768 [ 439.239530][ T8315] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.829 (8315) [ 439.262819][ T8315] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 439.273248][ T8315] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 439.291853][ T8315] BTRFS error (device loop5): unrecognized mount option 'uid<00000000004294967295' [ 439.322760][ T8315] BTRFS error (device loop5): open_ctree failed: -22 [ 439.348585][ T4304] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 439.359787][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.829'. [ 439.369598][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.381098][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.389968][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.399514][ T4257] usb 5-1: Using ep0 maxpacket: 16 [ 439.418685][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.427892][ T14] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 439.440214][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.448692][ T4257] usb 5-1: config 0 has no interfaces? [ 439.458873][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.473167][ T4257] usb 5-1: New USB device found, idVendor=413c, idProduct=81a6, bcdDevice=90.59 [ 439.482848][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.490249][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.498770][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.509698][ T4257] usb 5-1: Product: syz [ 439.513896][ T4257] usb 5-1: Manufacturer: syz [ 439.519254][ T4469] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by udevd (4469) [ 439.531479][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.548195][ T4257] usb 5-1: SerialNumber: syz [ 439.553214][ T4304] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 439.562534][ T4257] usb 5-1: config 0 descriptor?? [ 439.597877][ T4304] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0003/input/input9 [ 439.637866][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.670059][ T14] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.702823][ T4304] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 439.728559][ T14] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.750406][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.796922][ T128] usb 5-1: USB disconnect, device number 14 [ 439.817102][ T14] usb 7-1: config 0 descriptor?? [ 439.940516][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.066199][ T8357] netlink: 44 bytes leftover after parsing attributes in process `syz.5.839'. [ 440.113789][ T8357] netlink: 67 bytes leftover after parsing attributes in process `syz.5.839'. [ 440.132690][ T8359] loop2: detected capacity change from 0 to 1024 [ 440.229796][ T14] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 440.246865][ T14] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 440.438510][ T8368] loop2: detected capacity change from 0 to 512 [ 440.458130][ T8368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.514573][ T4302] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 440.519098][ T14] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 440.610187][ T8368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 440.620334][ T8368] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.045243][ T7024] EXT4-fs (loop7): unmounting filesystem. [ 441.225092][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 441.305788][ T8335] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 441.794592][ T4302] usb 6-1: device descriptor read/64, error -71 [ 441.833273][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 442.064543][ T4302] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.224533][ T4302] usb 6-1: device descriptor read/64, error -71 [ 443.143803][ T8386] loop2: detected capacity change from 0 to 262144 [ 443.160907][ T8386] F2FS-fs (loop2): Unrecognized mount option "ch" or missing value [ 443.241047][ T14] usb 7-1: USB disconnect, device number 11 [ 443.324850][ T4302] usb usb6-port1: attempt power cycle [ 443.372331][ T8391] FAULT_INJECTION: forcing a failure. [ 443.372331][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 443.395075][ T5902] usb 8-1: USB disconnect, device number 3 [ 443.417390][ T8381] fido_id[8381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 443.508107][ T8391] CPU: 0 PID: 8391 Comm: syz.7.846 Not tainted 6.1.141-syzkaller #0 [ 443.516146][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.526488][ T8391] Call Trace: [ 443.529786][ T8391] [ 443.532731][ T8391] dump_stack_lvl+0x168/0x22e [ 443.537466][ T8391] ? show_regs_print_info+0x12/0x12 [ 443.542688][ T8391] ? load_image+0x3b0/0x3b0 [ 443.547214][ T8391] ? __might_sleep+0xd0/0xd0 [ 443.551829][ T8391] ? __lock_acquire+0x7c50/0x7c50 [ 443.556885][ T8391] should_fail_ex+0x399/0x4d0 [ 443.561591][ T8391] should_failslab+0x5/0x20 [ 443.566113][ T8391] slab_pre_alloc_hook+0x59/0x310 [ 443.571164][ T8391] kmem_cache_alloc_node+0x5a/0x320 [ 443.576388][ T8391] ? __alloc_skb+0xfc/0x7e0 [ 443.580948][ T8391] __alloc_skb+0xfc/0x7e0 [ 443.585304][ T8391] ? netlink_autobind+0xda/0x300 [ 443.590269][ T8391] netlink_sendmsg+0x645/0xbc0 [ 443.595058][ T8391] ? netlink_getsockopt+0x540/0x540 [ 443.600274][ T8391] ? aa_sock_msg_perm+0x94/0x150 [ 443.605227][ T8391] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 443.610530][ T8391] ? security_socket_sendmsg+0x7c/0xa0 [ 443.616013][ T8391] ? netlink_getsockopt+0x540/0x540 [ 443.621228][ T8391] ____sys_sendmsg+0x59b/0x970 [ 443.626019][ T8391] ? __sys_sendmsg_sock+0x30/0x30 [ 443.631063][ T8391] ? __import_iovec+0x315/0x500 [ 443.635938][ T8391] ? import_iovec+0x6f/0xa0 [ 443.640460][ T8391] ___sys_sendmsg+0x21c/0x290 [ 443.645156][ T8391] ? __sys_sendmsg+0x270/0x270 [ 443.649958][ T8391] ? __lock_acquire+0x7c50/0x7c50 [ 443.655020][ T8391] ? __fdget+0x17c/0x200 [ 443.659287][ T8391] __se_sys_sendmsg+0x19e/0x270 [ 443.664164][ T8391] ? __x64_sys_sendmsg+0x80/0x80 [ 443.669135][ T8391] ? lockdep_hardirqs_on+0x94/0x140 [ 443.674352][ T8391] do_syscall_64+0x4c/0xa0 [ 443.678787][ T8391] ? clear_bhb_loop+0x60/0xb0 [ 443.683475][ T8391] ? clear_bhb_loop+0x60/0xb0 [ 443.688162][ T8391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.694077][ T8391] RIP: 0033:0x7fb9e278e929 [ 443.698504][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.718220][ T8391] RSP: 002b:00007fb9e35e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.726654][ T8391] RAX: ffffffffffffffda RBX: 00007fb9e29b5fa0 RCX: 00007fb9e278e929 [ 443.735171][ T8391] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 443.743162][ T8391] RBP: 00007fb9e35e8090 R08: 0000000000000000 R09: 0000000000000000 [ 443.751166][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.759158][ T8391] R13: 0000000000000000 R14: 00007fb9e29b5fa0 R15: 00007fff22627c68 [ 443.767162][ T8391] [ 444.171388][ T14] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 444.447604][ T14] usb 7-1: config 0 has no interfaces? [ 444.459260][ T14] usb 7-1: New USB device found, idVendor=07cf, idProduct=6802, bcdDevice=17.c1 [ 444.504148][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.541975][ T14] usb 7-1: Product: syz [ 444.561290][ T14] usb 7-1: Manufacturer: syz [ 444.581754][ T14] usb 7-1: SerialNumber: syz [ 444.617572][ T14] usb 7-1: config 0 descriptor?? [ 444.677587][ T8408] loop2: detected capacity change from 0 to 131072 [ 444.688371][ T8408] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 444.696620][ T8408] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 444.705088][ T22] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 444.713656][ T4302] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 444.721229][ T8408] F2FS-fs (loop2): invalid crc value [ 444.757663][ T8408] F2FS-fs (loop2): Found nat_bits in checkpoint [ 444.797862][ T4302] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 444.809908][ T4302] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 444.883820][ T4302] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 444.893004][ T4302] usb 6-1: config 3 has no interface number 0 [ 444.899155][ T4302] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 444.910275][ T4302] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 444.920191][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 444.927381][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.937642][ T8408] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 444.945036][ T8408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 444.972460][ T4302] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 445.006631][ T4302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.014962][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.036120][ T4302] usb 6-1: Product: syz [ 445.041867][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'. [ 445.050910][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.071816][ T4302] usb 6-1: Manufacturer: syz [ 445.077138][ T4302] usb 6-1: SerialNumber: syz [ 445.183835][ T8429] loop7: detected capacity change from 0 to 512 [ 445.271410][ T8429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 445.744507][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.988042][ T8396] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 446.019262][ T8429] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 446.295952][ T4302] usb-storage 6-1:3.20: USB Mass Storage device detected [ 446.360031][ T8429] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.476637][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.487872][ T4302] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 446.497088][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.524159][ T4302] scsi host1: usb-storage 6-1:3.20 [ 446.627529][ T22] usb 5-1: usb_control_msg returned -71 [ 446.633243][ T22] usbtmc 5-1:16.0: can't read capabilities [ 446.677770][ T4304] usb 7-1: USB disconnect, device number 12 [ 446.703713][ T22] usb 5-1: USB disconnect, device number 15 [ 447.029040][ T7024] EXT4-fs (loop7): unmounting filesystem. [ 447.044069][ T8449] FAULT_INJECTION: forcing a failure. [ 447.044069][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 447.176562][ T8452] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 447.347413][ T8449] CPU: 1 PID: 8449 Comm: syz.6.857 Not tainted 6.1.141-syzkaller #0 [ 447.355447][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.365511][ T8449] Call Trace: [ 447.368806][ T8449] [ 447.371740][ T8449] dump_stack_lvl+0x168/0x22e [ 447.376431][ T8449] ? show_regs_print_info+0x12/0x12 [ 447.381639][ T8449] ? load_image+0x3b0/0x3b0 [ 447.386145][ T8449] ? __might_sleep+0xd0/0xd0 [ 447.390751][ T8449] ? __lock_acquire+0x7c50/0x7c50 [ 447.395800][ T8449] should_fail_ex+0x399/0x4d0 [ 447.400490][ T8449] should_failslab+0x5/0x20 [ 447.405001][ T8449] slab_pre_alloc_hook+0x59/0x310 [ 447.410035][ T8449] kmem_cache_alloc_node+0x5a/0x320 [ 447.415324][ T8449] ? __alloc_skb+0xfc/0x7e0 [ 447.419844][ T8449] __alloc_skb+0xfc/0x7e0 [ 447.424195][ T8449] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 447.430436][ T8449] netlink_sendmsg+0x645/0xbc0 [ 447.435215][ T8449] ? netlink_getsockopt+0x540/0x540 [ 447.440425][ T8449] ? aa_sock_msg_perm+0x94/0x150 [ 447.445370][ T8449] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 447.450666][ T8449] ? security_socket_sendmsg+0x7c/0xa0 [ 447.456166][ T8449] ? netlink_getsockopt+0x540/0x540 [ 447.461388][ T8449] ____sys_sendmsg+0x59b/0x970 [ 447.466178][ T8449] ? __sys_sendmsg_sock+0x30/0x30 [ 447.471219][ T8449] ? __import_iovec+0x315/0x500 [ 447.476092][ T8449] ? import_iovec+0x6f/0xa0 [ 447.480614][ T8449] ___sys_sendmsg+0x21c/0x290 [ 447.485313][ T8449] ? __sys_sendmsg+0x270/0x270 [ 447.490116][ T8449] ? __lock_acquire+0x7c50/0x7c50 [ 447.495176][ T8449] ? __fdget+0x17c/0x200 [ 447.499441][ T8449] __se_sys_sendmsg+0x19e/0x270 [ 447.504330][ T8449] ? __x64_sys_sendmsg+0x80/0x80 [ 447.509296][ T8449] ? lockdep_hardirqs_on+0x94/0x140 [ 447.514509][ T8449] do_syscall_64+0x4c/0xa0 [ 447.518941][ T8449] ? clear_bhb_loop+0x60/0xb0 [ 447.523630][ T8449] ? clear_bhb_loop+0x60/0xb0 [ 447.528316][ T8449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.534212][ T8449] RIP: 0033:0x7ff76138e929 [ 447.538624][ T8449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.558223][ T8449] RSP: 002b:00007ff762134038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.566631][ T8449] RAX: ffffffffffffffda RBX: 00007ff7615b5fa0 RCX: 00007ff76138e929 [ 447.574593][ T8449] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000005 [ 447.582556][ T8449] RBP: 00007ff762134090 R08: 0000000000000000 R09: 0000000000000000 [ 447.590522][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.598487][ T8449] R13: 0000000000000000 R14: 00007ff7615b5fa0 R15: 00007ffed4933f98 [ 447.606459][ T8449] [ 447.804624][ T8441] usb 6-1: reset full-speed USB device number 7 using dummy_hcd [ 447.837252][ T8459] netlink: 'syz.7.858': attribute type 1 has an invalid length. [ 447.924374][ T8460] loop4: detected capacity change from 0 to 2048 [ 447.962267][ T8459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.016794][ T8460] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.859: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 448.090782][ T8460] EXT4-fs (loop4): get root inode failed [ 448.121185][ T8472] FAULT_INJECTION: forcing a failure. [ 448.121185][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 448.144179][ T8460] EXT4-fs (loop4): mount failed [ 448.161867][ T8462] bond1: (slave veth3): Enslaving as an active interface with a down link [ 448.185830][ T8472] CPU: 1 PID: 8472 Comm: syz.5.860 Not tainted 6.1.141-syzkaller #0 [ 448.193852][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.203917][ T8472] Call Trace: [ 448.207207][ T8472] [ 448.210159][ T8472] dump_stack_lvl+0x168/0x22e [ 448.214858][ T8472] ? show_regs_print_info+0x12/0x12 [ 448.220076][ T8472] ? load_image+0x3b0/0x3b0 [ 448.224598][ T8472] ? __might_sleep+0xd0/0xd0 [ 448.229208][ T8472] ? __lock_acquire+0x7c50/0x7c50 [ 448.234335][ T8472] should_fail_ex+0x399/0x4d0 [ 448.239046][ T8472] should_failslab+0x5/0x20 [ 448.243558][ T8472] slab_pre_alloc_hook+0x59/0x310 [ 448.248598][ T8472] kmem_cache_alloc_node+0x5a/0x320 [ 448.253894][ T8472] ? __alloc_skb+0xfc/0x7e0 [ 448.258501][ T8472] __alloc_skb+0xfc/0x7e0 [ 448.262845][ T8472] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 448.269094][ T8472] netlink_sendmsg+0x645/0xbc0 [ 448.273881][ T8472] ? netlink_getsockopt+0x540/0x540 [ 448.279096][ T8472] ? aa_sock_msg_perm+0x94/0x150 [ 448.284038][ T8472] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 448.289322][ T8472] ? security_socket_sendmsg+0x7c/0xa0 [ 448.294776][ T8472] ? netlink_getsockopt+0x540/0x540 [ 448.299968][ T8472] ____sys_sendmsg+0x59b/0x970 [ 448.304732][ T8472] ? __sys_sendmsg_sock+0x30/0x30 [ 448.309747][ T8472] ? __import_iovec+0x315/0x500 [ 448.314601][ T8472] ? import_iovec+0x6f/0xa0 [ 448.319107][ T8472] ___sys_sendmsg+0x21c/0x290 [ 448.323784][ T8472] ? __sys_sendmsg+0x270/0x270 [ 448.328555][ T8472] ? __lock_acquire+0x7c50/0x7c50 [ 448.333583][ T8472] ? __fdget+0x17c/0x200 [ 448.337821][ T8472] __se_sys_sendmsg+0x19e/0x270 [ 448.342669][ T8472] ? __x64_sys_sendmsg+0x80/0x80 [ 448.347608][ T8472] ? lockdep_hardirqs_on+0x94/0x140 [ 448.352799][ T8472] do_syscall_64+0x4c/0xa0 [ 448.357206][ T8472] ? clear_bhb_loop+0x60/0xb0 [ 448.361873][ T8472] ? clear_bhb_loop+0x60/0xb0 [ 448.366540][ T8472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.372430][ T8472] RIP: 0033:0x7fca0d58e929 [ 448.376838][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.396432][ T8472] RSP: 002b:00007fca0e389038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.404838][ T8472] RAX: ffffffffffffffda RBX: 00007fca0d7b6080 RCX: 00007fca0d58e929 [ 448.412799][ T8472] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 448.420760][ T8472] RBP: 00007fca0e389090 R08: 0000000000000000 R09: 0000000000000000 [ 448.428722][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.437065][ T8472] R13: 0000000000000001 R14: 00007fca0d7b6080 R15: 00007ffc79624138 [ 448.445067][ T8472] [ 448.673797][ T8459] device veth1 entered promiscuous mode [ 448.717064][ T8459] device veth1 left promiscuous mode [ 448.750592][ T8459] bond1: (slave vlan2): making interface the new active one [ 448.766974][ T8460] loop4: detected capacity change from 0 to 4096 [ 448.802797][ T8475] loop6: detected capacity change from 0 to 512 [ 448.805982][ T8459] device veth1 entered promiscuous mode [ 448.819927][ T8460] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 448.910426][ T22] usb 6-1: USB disconnect, device number 7 [ 448.917806][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'. [ 448.958918][ T8475] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 449.109494][ T8459] device vlan2 entered promiscuous mode [ 449.153029][ T8475] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 449.298367][ T8459] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 449.356566][ T8475] System zones: 0-2, 18-18, 34-35 [ 449.530487][ T8475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 449.746399][ T8486] loop2: detected capacity change from 0 to 24 [ 449.787123][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 449.866388][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 449.944868][ T4912] EXT4-fs (loop6): unmounting filesystem. [ 450.231160][ T8489] loop5: detected capacity change from 0 to 32768 [ 450.392457][ T8489] XFS (loop5): Mounting V5 Filesystem [ 450.448025][ T8459] syz.7.858 (8459) used greatest stack depth: 20640 bytes left [ 450.493204][ T8489] XFS (loop5): Ending clean mount [ 450.504362][ T8489] XFS (loop5): Quotacheck needed: Please wait. [ 450.735038][ T8489] XFS (loop5): Quotacheck: Done. [ 451.132098][ T26] audit: type=1800 audit(1750697971.444:61): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.866" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 451.188233][ T8513] loop6: detected capacity change from 0 to 512 [ 451.550613][ T8510] syz.5.866 (8510) used greatest stack depth: 20400 bytes left [ 451.626796][ T8513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.722106][ T8513] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 451.732766][ T8513] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.035155][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.7.869'. [ 452.117131][ T5156] XFS (loop5): Unmounting Filesystem [ 452.225650][ T4912] EXT4-fs (loop6): unmounting filesystem. [ 452.251605][ T8525] device bridge0 entered promiscuous mode [ 452.337124][ T8525] batman_adv: batadv0: Adding interface: macsec1 [ 452.353206][ T8525] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.398035][ T8525] batman_adv: batadv0: Interface activated: macsec1 [ 452.477067][ T8534] netlink: 16 bytes leftover after parsing attributes in process `syz.7.874'. [ 452.596099][ T8532] bond0: option mode: unable to set because the bond device has slaves [ 453.407336][ T8544] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 453.860578][ T8550] loop7: detected capacity change from 0 to 40427 [ 453.872161][ T8550] F2FS-fs (loop7): Unrecognized mount option "ÿÿÿÿ" or missing value [ 453.888688][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.878'. [ 454.072362][ T8564] FAULT_INJECTION: forcing a failure. [ 454.072362][ T8564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.128673][ T8564] CPU: 1 PID: 8564 Comm: syz.2.881 Not tainted 6.1.141-syzkaller #0 [ 454.136721][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.146792][ T8564] Call Trace: [ 454.150062][ T8564] [ 454.152983][ T8564] dump_stack_lvl+0x168/0x22e [ 454.157660][ T8564] ? show_regs_print_info+0x12/0x12 [ 454.162884][ T8564] ? load_image+0x3b0/0x3b0 [ 454.167379][ T8564] ? __lock_acquire+0x7c50/0x7c50 [ 454.172413][ T8564] should_fail_ex+0x399/0x4d0 [ 454.177093][ T8564] _copy_from_user+0x2c/0x170 [ 454.181760][ T8564] ___sys_recvmsg+0x12b/0x510 [ 454.186448][ T8564] ? __sys_recvmsg+0x270/0x270 [ 454.191239][ T8564] ? __lock_acquire+0x7c50/0x7c50 [ 454.196257][ T8564] ? __might_fault+0xc2/0x120 [ 454.200922][ T8564] ? __might_fault+0xa6/0x120 [ 454.205596][ T8564] do_recvmmsg+0x359/0x7d0 [ 454.210005][ T8564] ? file_end_write+0x156/0x250 [ 454.214838][ T8564] ? __sys_recvmmsg+0x280/0x280 [ 454.219674][ T8564] ? vfs_write+0x56f/0x960 [ 454.224085][ T8564] ? mutex_unlock+0x10/0x10 [ 454.228573][ T8564] ? __fget_files+0x44a/0x4d0 [ 454.233254][ T8564] __x64_sys_recvmmsg+0x18d/0x240 [ 454.238268][ T8564] ? do_recvmmsg+0x7d0/0x7d0 [ 454.242853][ T8564] ? lockdep_hardirqs_on+0x94/0x140 [ 454.248045][ T8564] do_syscall_64+0x4c/0xa0 [ 454.252471][ T8564] ? clear_bhb_loop+0x60/0xb0 [ 454.257143][ T8564] ? clear_bhb_loop+0x60/0xb0 [ 454.261804][ T8564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.267688][ T8564] RIP: 0033:0x7f798018e929 [ 454.272095][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.291690][ T8564] RSP: 002b:00007f798108a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 454.300093][ T8564] RAX: ffffffffffffffda RBX: 00007f79803b6080 RCX: 00007f798018e929 [ 454.308057][ T8564] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 454.316020][ T8564] RBP: 00007f798108a090 R08: 0000000000000000 R09: 0000000000000000 [ 454.323984][ T8564] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 454.331937][ T8564] R13: 0000000000000001 R14: 00007f79803b6080 R15: 00007fff6da43d38 [ 454.339907][ T8564] [ 454.423196][ T8560] loop5: detected capacity change from 0 to 4096 [ 454.550472][ T8572] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.990289][ T8583] loop7: detected capacity change from 0 to 512 [ 455.003323][ T8583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.934940][ T4273] Bluetooth: hci0: command 0x0411 tx timeout [ 456.077423][ T8583] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 456.087251][ T8583] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.756117][ T7024] EXT4-fs (loop7): unmounting filesystem. [ 456.973383][ T8597] loop7: detected capacity change from 0 to 64 [ 457.094688][ T128] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 457.198952][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 457.302402][ T128] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 457.353998][ T128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.563254][ T128] usb 6-1: config 0 descriptor?? [ 457.747696][ T128] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 458.288374][ T128] gp8psk: usb out operation failed. [ 458.293643][ T128] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 458.332692][ T128] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 458.411717][ T128] usb 6-1: USB disconnect, device number 8 [ 458.830208][ T8634] FAULT_INJECTION: forcing a failure. [ 458.830208][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 458.858733][ T8631] loop7: detected capacity change from 0 to 512 [ 458.917283][ T8634] CPU: 1 PID: 8634 Comm: syz.6.895 Not tainted 6.1.141-syzkaller #0 [ 458.925331][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.935412][ T8634] Call Trace: [ 458.938703][ T8634] [ 458.941633][ T8634] dump_stack_lvl+0x168/0x22e [ 458.946326][ T8634] ? show_regs_print_info+0x12/0x12 [ 458.951528][ T8634] ? load_image+0x3b0/0x3b0 [ 458.956027][ T8634] ? __might_sleep+0xd0/0xd0 [ 458.960789][ T8634] ? __lock_acquire+0x7c50/0x7c50 [ 458.965816][ T8634] should_fail_ex+0x399/0x4d0 [ 458.972679][ T8634] should_failslab+0x5/0x20 [ 458.977971][ T8634] slab_pre_alloc_hook+0x59/0x310 [ 458.983094][ T8634] kmem_cache_alloc_node+0x5a/0x320 [ 458.988378][ T8634] ? __alloc_skb+0xfc/0x7e0 [ 458.993054][ T8634] __alloc_skb+0xfc/0x7e0 [ 458.997477][ T8634] ? netlink_autobind+0xda/0x300 [ 459.002420][ T8634] netlink_sendmsg+0x645/0xbc0 [ 459.007279][ T8634] ? netlink_getsockopt+0x540/0x540 [ 459.012561][ T8634] ? aa_sock_msg_perm+0x94/0x150 [ 459.017576][ T8634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 459.022853][ T8634] ? security_socket_sendmsg+0x7c/0xa0 [ 459.028304][ T8634] ? netlink_getsockopt+0x540/0x540 [ 459.033498][ T8634] ____sys_sendmsg+0x59b/0x970 [ 459.038525][ T8634] ? __sys_sendmsg_sock+0x30/0x30 [ 459.043541][ T8634] ? __import_iovec+0x315/0x500 [ 459.048387][ T8634] ? import_iovec+0x6f/0xa0 [ 459.052899][ T8634] ___sys_sendmsg+0x21c/0x290 [ 459.057586][ T8634] ? __sys_sendmsg+0x270/0x270 [ 459.062364][ T8634] ? __lock_acquire+0x7c50/0x7c50 [ 459.067394][ T8634] ? __fdget+0x17c/0x200 [ 459.071633][ T8634] __se_sys_sendmsg+0x19e/0x270 [ 459.076498][ T8634] ? __x64_sys_sendmsg+0x80/0x80 [ 459.081440][ T8634] ? lockdep_hardirqs_on+0x94/0x140 [ 459.086632][ T8634] do_syscall_64+0x4c/0xa0 [ 459.091043][ T8634] ? clear_bhb_loop+0x60/0xb0 [ 459.095722][ T8634] ? clear_bhb_loop+0x60/0xb0 [ 459.100389][ T8634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.106280][ T8634] RIP: 0033:0x7ff76138e929 [ 459.110694][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.130387][ T8634] RSP: 002b:00007ff762134038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.138795][ T8634] RAX: ffffffffffffffda RBX: 00007ff7615b5fa0 RCX: 00007ff76138e929 [ 459.146765][ T8634] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.154728][ T8634] RBP: 00007ff762134090 R08: 0000000000000000 R09: 0000000000000000 [ 459.162693][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.170658][ T8634] R13: 0000000000000000 R14: 00007ff7615b5fa0 R15: 00007ffed4933f98 [ 459.178639][ T8634] [ 459.460794][ T8648] loop5: detected capacity change from 0 to 512 [ 459.540743][ T8648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.630635][ T8648] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 459.657588][ T128] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 459.698248][ T8648] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.824578][ T128] usb 5-1: device descriptor read/64, error -71 [ 460.094658][ T128] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 460.225039][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 460.284536][ T128] usb 5-1: device descriptor read/64, error -71 [ 460.410948][ T5156] EXT4-fs (loop5): unmounting filesystem. [ 460.418802][ T128] usb usb5-port1: attempt power cycle [ 460.589364][ T8631] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 460.710813][ T8631] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.774321][ T8672] loop5: detected capacity change from 0 to 4096 [ 460.821364][ T8672] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 460.824592][ T128] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 460.905219][ T128] usb 5-1: device descriptor read/8, error -71 [ 460.923736][ T8672] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 460.968455][ T26] audit: type=1800 audit(1750697981.284:62): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.902" name="file0" dev="loop5" ino=0 res=0 errno=0 [ 461.067283][ T8677] tty tty3: ldisc open failed (-12), clearing slot 2 [ 461.113550][ T8672] ntfs3: loop5: no free space to extend mft [ 461.154666][ T4304] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 461.192906][ T128] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 461.238743][ T128] usb 5-1: device descriptor read/8, error -71 [ 461.344641][ T4304] usb 8-1: Using ep0 maxpacket: 8 [ 461.352968][ T4304] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 461.364706][ T128] usb usb5-port1: unable to enumerate USB device [ 461.393747][ T8655] loop6: detected capacity change from 0 to 32768 [ 461.411292][ T4304] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 461.470146][ T4304] usb 8-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 461.499589][ T8655] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 461.503291][ T4304] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.562223][ T8655] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 461.586892][ T4304] usb 8-1: config 0 descriptor?? [ 461.613351][ T4304] ums-jumpshot 8-1:0.0: USB Mass Storage device detected [ 461.684683][ T8655] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 461.714053][ T4304] ums-jumpshot 8-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 461.740193][ T5902] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 461.755317][ T5902] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 461.867784][ T128] usb 8-1: USB disconnect, device number 4 [ 461.870203][ T5902] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 114ms [ 461.887523][ T4416] device vlan2 left promiscuous mode [ 461.912114][ T5902] gfs2: fsid=syz:syz.0: jid=0: Done [ 461.924806][ T8655] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 461.953758][ T8655] syz.6.900: attempt to access beyond end of device [ 461.953758][ T8655] loop6: rw=12288, sector=9007199254757616, nr_sectors = 8 limit=32768 [ 461.984564][ T8655] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 462.358576][ T8706] loop2: detected capacity change from 0 to 32768 [ 462.654683][ T4273] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 462.665492][ T4273] Bluetooth: hci0: Injecting HCI hardware error event [ 462.674912][ T4271] Bluetooth: hci0: hardware error 0x00 [ 463.082884][ T8726] blktrace: Concurrent blktraces are not allowed on sg0 [ 463.875754][ T7024] EXT4-fs (loop7): unmounting filesystem. [ 464.204604][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 464.904736][ T4271] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 465.154192][ T8750] process 'syz.4.918' launched '/dev/fd/-1' with NULL argv: empty string added [ 465.192165][ T8755] loop2: detected capacity change from 0 to 256 [ 465.221971][ T8744] loop6: detected capacity change from 0 to 4096 [ 465.264082][ T8744] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 465.290120][ T8755] xt_TCPMSS: Only works on TCP SYN packets [ 465.294793][ T8744] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096) [ 465.381813][ T8760] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 465.677214][ T8768] FAULT_INJECTION: forcing a failure. [ 465.677214][ T8768] name failslab, interval 1, probability 0, space 0, times 0 [ 465.689989][ T8768] CPU: 0 PID: 8768 Comm: syz.6.917 Not tainted 6.1.141-syzkaller #0 [ 465.697982][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.708045][ T8768] Call Trace: [ 465.711331][ T8768] [ 465.714264][ T8768] dump_stack_lvl+0x168/0x22e [ 465.718963][ T8768] ? show_regs_print_info+0x12/0x12 [ 465.724176][ T8768] ? load_image+0x3b0/0x3b0 [ 465.728694][ T8768] ? __might_sleep+0xd0/0xd0 [ 465.733297][ T8768] ? __lock_acquire+0x7c50/0x7c50 [ 465.738335][ T8768] should_fail_ex+0x399/0x4d0 [ 465.743032][ T8768] should_failslab+0x5/0x20 [ 465.747543][ T8768] slab_pre_alloc_hook+0x59/0x310 [ 465.752580][ T8768] kmem_cache_alloc+0x56/0x2f0 [ 465.757353][ T8768] ? __alloc_file+0x25/0x230 [ 465.761958][ T8768] __alloc_file+0x25/0x230 [ 465.766402][ T8768] alloc_empty_file+0x90/0x180 [ 465.771174][ T8768] path_openat+0xfc/0x2e70 [ 465.775604][ T8768] ? finish_task_switch+0x265/0x8f0 [ 465.780818][ T8768] ? lockdep_hardirqs_on+0x94/0x140 [ 465.786031][ T8768] ? finish_task_switch+0x265/0x8f0 [ 465.791243][ T8768] ? __schedule+0x10f1/0x40d0 [ 465.795936][ T8768] ? do_filp_open+0x3c0/0x3c0 [ 465.800630][ T8768] ? release_firmware_map_entry+0x18a/0x18a [ 465.806531][ T8768] ? mark_lock+0x94/0x320 [ 465.810881][ T8768] do_filp_open+0x1c1/0x3c0 [ 465.815399][ T8768] ? vfs_tmpfile+0x480/0x480 [ 465.820006][ T8768] ? preempt_schedule_common+0xa5/0xd0 [ 465.825498][ T8768] ? _raw_spin_unlock+0x36/0x40 [ 465.830365][ T8768] ? alloc_fd+0x58f/0x630 [ 465.834722][ T8768] do_sys_openat2+0x142/0x490 [ 465.839420][ T8768] ? do_sys_open+0xe0/0xe0 [ 465.843856][ T8768] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 465.849870][ T8768] ? lock_chain_count+0x20/0x20 [ 465.854769][ T8768] __x64_sys_openat+0x135/0x160 [ 465.859638][ T8768] do_syscall_64+0x4c/0xa0 [ 465.864062][ T8768] ? clear_bhb_loop+0x60/0xb0 [ 465.868764][ T8768] ? clear_bhb_loop+0x60/0xb0 [ 465.873447][ T8768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.879354][ T8768] RIP: 0033:0x7ff76138e929 [ 465.883778][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.903408][ T8768] RSP: 002b:00007ff7611ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.911840][ T8768] RAX: ffffffffffffffda RBX: 00007ff7615b6160 RCX: 00007ff76138e929 [ 465.919829][ T8768] RDX: 0000000000101042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 465.927818][ T8768] RBP: 00007ff7611ff090 R08: 0000000000000000 R09: 0000000000000000 [ 465.935824][ T8768] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 465.943813][ T8768] R13: 0000000000000000 R14: 00007ff7615b6160 R15: 00007ffed4933f98 [ 465.951795][ T8768] [ 466.073044][ T8772] loop4: detected capacity change from 0 to 64 [ 466.427748][ T8778] loop7: detected capacity change from 0 to 512 [ 466.444424][ T8778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.606440][ T8778] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 466.616691][ T8778] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.283752][ T7024] EXT4-fs (loop7): unmounting filesystem. [ 467.472060][ T8766] loop5: detected capacity change from 0 to 40427 [ 467.494693][ T8766] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 467.504317][ T8766] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 467.625659][ T8766] F2FS-fs (loop5): invalid crc value [ 467.634036][ T8795] FAULT_INJECTION: forcing a failure. [ 467.634036][ T8795] name failslab, interval 1, probability 0, space 0, times 0 [ 467.667747][ T8766] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 467.704553][ T8795] CPU: 1 PID: 8795 Comm: syz.2.925 Not tainted 6.1.141-syzkaller #0 [ 467.712598][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.722674][ T8795] Call Trace: [ 467.725975][ T8795] [ 467.728917][ T8795] dump_stack_lvl+0x168/0x22e [ 467.733621][ T8795] ? show_regs_print_info+0x12/0x12 [ 467.738842][ T8795] ? load_image+0x3b0/0x3b0 [ 467.743364][ T8795] ? __might_sleep+0xd0/0xd0 [ 467.747979][ T8795] ? __lock_acquire+0x7c50/0x7c50 [ 467.753027][ T8795] ? __se_sys_memfd_create+0xee/0x340 [ 467.758435][ T8795] should_fail_ex+0x399/0x4d0 [ 467.763137][ T8795] should_failslab+0x5/0x20 [ 467.767659][ T8795] slab_pre_alloc_hook+0x59/0x310 [ 467.772711][ T8795] kmem_cache_alloc_lru+0x49/0x2e0 [ 467.777847][ T8795] ? shmem_alloc_inode+0x24/0x40 [ 467.782813][ T8795] shmem_alloc_inode+0x24/0x40 [ 467.787631][ T8795] ? shmem_match+0x160/0x160 [ 467.792239][ T8795] new_inode_pseudo+0x5f/0x1c0 [ 467.797019][ T8795] new_inode+0x25/0x1c0 [ 467.801198][ T8795] shmem_get_inode+0x347/0xbf0 [ 467.805991][ T8795] __shmem_file_setup+0x10b/0x290 [ 467.811037][ T8795] ? shmem_file_setup+0x13/0x30 [ 467.815923][ T8795] __se_sys_memfd_create+0x1e1/0x340 [ 467.821234][ T8795] do_syscall_64+0x4c/0xa0 [ 467.825672][ T8795] ? clear_bhb_loop+0x60/0xb0 [ 467.830363][ T8795] ? clear_bhb_loop+0x60/0xb0 [ 467.835060][ T8795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.840981][ T8795] RIP: 0033:0x7f798018e929 [ 467.845417][ T8795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.865045][ T8795] RSP: 002b:00007f79810aae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 467.873488][ T8795] RAX: ffffffffffffffda RBX: 000000000001f76a RCX: 00007f798018e929 [ 467.881566][ T8795] RDX: 00007f79810aaef0 RSI: 0000000000000000 RDI: 00007f79802114cc [ 467.889555][ T8795] RBP: 000020000001f7c0 R08: 00007f79810aabb7 R09: 00007f79810aae40 [ 467.897575][ T8795] R10: 000000000000000a R11: 0000000000000202 R12: 000020000001f780 [ 467.905571][ T8795] R13: 00007f79810aaef0 R14: 00007f79810aaeb0 R15: 0000200000000000 [ 467.913603][ T8795] [ 468.103102][ T8766] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 468.125045][ T8813] loop7: detected capacity change from 0 to 256 [ 468.133963][ T8766] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 468.199843][ T8813] FAT-fs (loop7): Directory bread(block 64) failed [ 468.216772][ T8813] FAT-fs (loop7): Directory bread(block 65) failed [ 468.223432][ T8813] FAT-fs (loop7): Directory bread(block 66) failed [ 468.254629][ T8813] FAT-fs (loop7): Directory bread(block 67) failed [ 468.274704][ T8813] FAT-fs (loop7): Directory bread(block 68) failed [ 468.290994][ T8813] FAT-fs (loop7): Directory bread(block 69) failed [ 468.305957][ T26] audit: type=1326 audit(1750697988.624:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 468.309776][ T8766] syz.5.919: attempt to access beyond end of device [ 468.309776][ T8766] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 468.343140][ T8813] FAT-fs (loop7): Directory bread(block 70) failed [ 468.363617][ T8813] FAT-fs (loop7): Directory bread(block 71) failed [ 468.373715][ T26] audit: type=1326 audit(1750697988.624:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 468.398832][ T8813] FAT-fs (loop7): Directory bread(block 72) failed [ 468.417826][ T8813] FAT-fs (loop7): Directory bread(block 73) failed [ 468.454884][ T26] audit: type=1326 audit(1750697988.624:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 468.456775][ T8766] syz.5.919: attempt to access beyond end of device [ 468.456775][ T8766] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 468.531738][ T8791] loop4: detected capacity change from 0 to 32768 [ 468.566654][ T8791] (syz.4.923,8791,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 468.594920][ T26] audit: type=1326 audit(1750697988.624:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 468.648540][ T8791] (syz.4.923,8791,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 468.700633][ T26] audit: type=1326 audit(1750697988.624:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 468.770489][ T8791] JBD2: Ignoring recovery information on journal [ 468.944153][ T26] audit: type=1326 audit(1750697988.624:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 469.011264][ T8791] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 469.055139][ T26] audit: type=1326 audit(1750697988.944:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 469.321966][ T26] audit: type=1326 audit(1750697988.944:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 469.656549][ T26] audit: type=1326 audit(1750697989.104:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 469.923321][ T8834] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 469.980202][ T26] audit: type=1326 audit(1750697989.364:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0d58e929 code=0x7ffc0000 [ 470.035714][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.136880][ T8834] bond0: (slave team0): Enslaving as an active interface with an up link [ 470.256054][ T8839] loop7: detected capacity change from 0 to 4096 [ 470.340537][ T8839] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 470.404322][ T8839] ntfs3: loop7: Failed to load $Extend. [ 470.429609][ T5156] syz-executor: attempt to access beyond end of device [ 470.429609][ T5156] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 470.480607][ T8826] loop2: detected capacity change from 0 to 32768 [ 470.527185][ T4254] ocfs2: Unmounting device (7,4) on (node local) [ 470.609511][ T8826] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 470.792920][ T4253] (syz-executor,4253,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 470.861145][ T4253] ocfs2: Unmounting device (7,2) on (node local) [ 471.008374][ T8848] loop2: detected capacity change from 0 to 512 [ 471.113293][ T8848] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 471.124633][ T8848] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 471.132714][ T8848] System zones: 0-2, 18-18, 34-35 [ 471.157872][ T8848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 471.240012][ T8848] EXT4-fs (loop2): shut down requested (0) [ 471.258811][ T8857] loop6: detected capacity change from 0 to 128 [ 471.279009][ T8850] loop4: detected capacity change from 0 to 4096 [ 471.425828][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 471.432473][ T4262] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 471.657500][ T8871] netlink: 56 bytes leftover after parsing attributes in process `syz.5.938'. [ 471.737637][ T8871] device veth1_macvtap left promiscuous mode [ 471.876372][ T8872] FAULT_INJECTION: forcing a failure. [ 471.876372][ T8872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.891637][ T8872] CPU: 0 PID: 8872 Comm: syz.2.937 Not tainted 6.1.141-syzkaller #0 [ 471.899651][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.909701][ T8872] Call Trace: [ 471.912967][ T8872] [ 471.915883][ T8872] dump_stack_lvl+0x168/0x22e [ 471.920551][ T8872] ? show_regs_print_info+0x12/0x12 [ 471.925753][ T8872] ? load_image+0x3b0/0x3b0 [ 471.930261][ T8872] ? __lock_acquire+0x7c50/0x7c50 [ 471.935282][ T8872] ? snprintf+0xd7/0x120 [ 471.939507][ T8872] should_fail_ex+0x399/0x4d0 [ 471.944170][ T8872] _copy_to_user+0x2c/0x130 [ 471.948662][ T8872] simple_read_from_buffer+0xe3/0x150 [ 471.954022][ T8872] proc_fail_nth_read+0x19a/0x210 [ 471.959034][ T8872] ? proc_fault_inject_write+0x2f0/0x2f0 [ 471.964664][ T8872] ? fsnotify_perm+0x248/0x550 [ 471.969437][ T8872] ? proc_fault_inject_write+0x2f0/0x2f0 [ 471.975081][ T8872] vfs_read+0x2c0/0x920 [ 471.979314][ T8872] ? kernel_read+0x1e0/0x1e0 [ 471.983893][ T8872] ? __fget_files+0x28/0x4d0 [ 471.988470][ T8872] ? __fget_files+0x44a/0x4d0 [ 471.993134][ T8872] ? __fdget_pos+0x2ae/0x360 [ 471.997710][ T8872] ? ksys_read+0x71/0x240 [ 472.002023][ T8872] ksys_read+0x143/0x240 [ 472.006259][ T8872] ? vfs_write+0x960/0x960 [ 472.010675][ T8872] ? lockdep_hardirqs_on+0x94/0x140 [ 472.015859][ T8872] do_syscall_64+0x4c/0xa0 [ 472.020261][ T8872] ? clear_bhb_loop+0x60/0xb0 [ 472.024927][ T8872] ? clear_bhb_loop+0x60/0xb0 [ 472.029602][ T8872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.035491][ T8872] RIP: 0033:0x7f798018d33c [ 472.039890][ T8872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.059490][ T8872] RSP: 002b:00007f798108a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.067894][ T8872] RAX: ffffffffffffffda RBX: 00007f79803b6080 RCX: 00007f798018d33c [ 472.075861][ T8872] RDX: 000000000000000f RSI: 00007f798108a0a0 RDI: 0000000000000004 [ 472.083822][ T8872] RBP: 00007f798108a090 R08: 0000000000000000 R09: 0000000000000000 [ 472.091781][ T8872] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 472.099741][ T8872] R13: 0000000000000001 R14: 00007f79803b6080 R15: 00007fff6da43d38 [ 472.107708][ T8872] [ 472.162235][ T8873] device veth1_macvtap entered promiscuous mode [ 472.758262][ T8878] loop5: detected capacity change from 0 to 16 [ 472.784207][ T8878] erofs: (device loop5): mounted with root inode @ nid 36. [ 472.798995][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 472.853225][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 472.875902][ T8880] loop2: detected capacity change from 0 to 64 [ 472.879571][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 472.922301][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 472.934056][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 472.984070][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 472.996609][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 473.013401][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 473.023893][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 473.038274][ T8878] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 473.048955][ T8878] syz.5.943: attempt to access beyond end of device [ 473.048955][ T8878] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 473.067427][ T8878] syz.5.943: attempt to access beyond end of device [ 473.067427][ T8878] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 473.083271][ T8878] syz.5.943: attempt to access beyond end of device [ 473.083271][ T8878] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 473.103058][ T8878] syz.5.943: attempt to access beyond end of device [ 473.103058][ T8878] loop5: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 473.211685][ T8885] FAULT_INJECTION: forcing a failure. [ 473.211685][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 473.274766][ T8885] CPU: 1 PID: 8885 Comm: syz.4.947 Not tainted 6.1.141-syzkaller #0 [ 473.282807][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.292877][ T8885] Call Trace: [ 473.296172][ T8885] [ 473.299114][ T8885] dump_stack_lvl+0x168/0x22e [ 473.303814][ T8885] ? show_regs_print_info+0x12/0x12 [ 473.309029][ T8885] ? load_image+0x3b0/0x3b0 [ 473.313560][ T8885] ? __might_sleep+0xd0/0xd0 [ 473.318167][ T8885] ? __lock_acquire+0x7c50/0x7c50 [ 473.323223][ T8885] should_fail_ex+0x399/0x4d0 [ 473.327916][ T8885] should_failslab+0x5/0x20 [ 473.332433][ T8885] slab_pre_alloc_hook+0x59/0x310 [ 473.337480][ T8885] kmem_cache_alloc_node+0x5a/0x320 [ 473.342698][ T8885] ? __alloc_skb+0xfc/0x7e0 [ 473.347226][ T8885] __alloc_skb+0xfc/0x7e0 [ 473.351578][ T8885] ? netlink_autobind+0xda/0x300 [ 473.355637][ T8889] loop7: detected capacity change from 0 to 256 [ 473.356533][ T8885] netlink_sendmsg+0x645/0xbc0 [ 473.356568][ T8885] ? netlink_getsockopt+0x540/0x540 [ 473.372759][ T8885] ? aa_sock_msg_perm+0x94/0x150 [ 473.377717][ T8885] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 473.383019][ T8885] ? security_socket_sendmsg+0x7c/0xa0 [ 473.388494][ T8885] ? netlink_getsockopt+0x540/0x540 [ 473.393708][ T8885] ____sys_sendmsg+0x59b/0x970 [ 473.398483][ T8885] ? __sys_sendmsg_sock+0x30/0x30 [ 473.403517][ T8885] ? __import_iovec+0x315/0x500 [ 473.408368][ T8885] ? import_iovec+0x6f/0xa0 [ 473.412866][ T8885] ___sys_sendmsg+0x21c/0x290 [ 473.417542][ T8885] ? __sys_sendmsg+0x270/0x270 [ 473.422315][ T8885] ? __lock_acquire+0x7c50/0x7c50 [ 473.427344][ T8885] ? __fdget+0x17c/0x200 [ 473.431587][ T8885] __se_sys_sendmsg+0x19e/0x270 [ 473.436437][ T8885] ? __x64_sys_sendmsg+0x80/0x80 [ 473.441387][ T8885] ? lockdep_hardirqs_on+0x94/0x140 [ 473.446580][ T8885] do_syscall_64+0x4c/0xa0 [ 473.450989][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 473.455659][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 473.460328][ T8885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.466218][ T8885] RIP: 0033:0x7f0dded8e929 [ 473.470625][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.490228][ T8885] RSP: 002b:00007f0ddfc99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.498634][ T8885] RAX: ffffffffffffffda RBX: 00007f0ddefb5fa0 RCX: 00007f0dded8e929 [ 473.506594][ T8885] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 473.514555][ T8885] RBP: 00007f0ddfc99090 R08: 0000000000000000 R09: 0000000000000000 [ 473.522518][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.530485][ T8885] R13: 0000000000000000 R14: 00007f0ddefb5fa0 R15: 00007ffeaec751a8 [ 473.538462][ T8885] [ 473.628897][ T8889] FAT-fs (loop7): Directory bread(block 64) failed [ 473.647573][ T8887] loop2: detected capacity change from 0 to 4096 [ 473.664752][ T8889] FAT-fs (loop7): Directory bread(block 65) failed [ 473.671551][ T8889] FAT-fs (loop7): Directory bread(block 66) failed [ 473.701694][ T8889] FAT-fs (loop7): Directory bread(block 67) failed [ 473.735839][ T8889] FAT-fs (loop7): Directory bread(block 68) failed [ 473.742433][ T8889] FAT-fs (loop7): Directory bread(block 69) failed [ 473.765910][ T8889] FAT-fs (loop7): Directory bread(block 70) failed [ 473.777488][ T8889] FAT-fs (loop7): Directory bread(block 71) failed [ 473.784167][ T8889] FAT-fs (loop7): Directory bread(block 72) failed [ 473.824512][ T8889] FAT-fs (loop7): Directory bread(block 73) failed [ 473.921114][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.932605][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.942058][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.950534][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.960598][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 473.980826][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.070089][ T5902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 474.073086][ T8899] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 474.120183][ T8899] x_tables: duplicate underflow at hook 3 [ 474.272806][ T5902] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.302858][ T5902] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.314829][ T5902] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.325003][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.353265][ T8894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.942075][ T8910] loop5: detected capacity change from 0 to 512 [ 474.992731][ T8910] EXT4-fs: Ignoring removed nobh option [ 475.185308][ T8910] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 475.186229][ T8899] loop4: detected capacity change from 0 to 32768 [ 475.245595][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 475.542417][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.566940][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.599464][ T8895] device bridge_slave_0 entered promiscuous mode [ 475.637763][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.653437][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.675137][ T8895] device bridge_slave_1 entered promiscuous mode [ 475.684014][ T5156] EXT4-fs (loop5): unmounting filesystem. [ 475.835482][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.904120][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.984711][ T4304] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 476.018202][ T8895] team0: Port device team_slave_0 added [ 476.024889][ T4271] Bluetooth: hci3: command 0x0409 tx timeout [ 476.051816][ T8939] FAULT_INJECTION: forcing a failure. [ 476.051816][ T8939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.055668][ T8895] team0: Port device team_slave_1 added [ 476.088401][ T8939] CPU: 0 PID: 8939 Comm: syz.7.960 Not tainted 6.1.141-syzkaller #0 [ 476.096443][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.106518][ T8939] Call Trace: [ 476.109825][ T8939] [ 476.112771][ T8939] dump_stack_lvl+0x168/0x22e [ 476.117485][ T8939] ? show_regs_print_info+0x12/0x12 [ 476.122714][ T8939] ? load_image+0x3b0/0x3b0 [ 476.127242][ T8939] ? __lock_acquire+0x7c50/0x7c50 [ 476.132292][ T8939] ? snprintf+0xd7/0x120 [ 476.136561][ T8939] should_fail_ex+0x399/0x4d0 [ 476.141264][ T8939] _copy_to_user+0x2c/0x130 [ 476.145803][ T8939] simple_read_from_buffer+0xe3/0x150 [ 476.151198][ T8939] proc_fail_nth_read+0x19a/0x210 [ 476.156257][ T8939] ? proc_fault_inject_write+0x2f0/0x2f0 [ 476.161918][ T8939] ? fsnotify_perm+0x248/0x550 [ 476.166802][ T8939] ? proc_fault_inject_write+0x2f0/0x2f0 [ 476.172460][ T8939] vfs_read+0x2c0/0x920 [ 476.176655][ T8939] ? kernel_read+0x1e0/0x1e0 [ 476.181266][ T8939] ? __fget_files+0x28/0x4d0 [ 476.185876][ T8939] ? __fget_files+0x44a/0x4d0 [ 476.190599][ T8939] ? __fdget_pos+0x2ae/0x360 [ 476.195211][ T8939] ? ksys_read+0x71/0x240 [ 476.199563][ T8939] ksys_read+0x143/0x240 [ 476.203822][ T8939] ? vfs_write+0x960/0x960 [ 476.208261][ T8939] ? lockdep_hardirqs_on+0x94/0x140 [ 476.213490][ T8939] do_syscall_64+0x4c/0xa0 [ 476.217938][ T8939] ? clear_bhb_loop+0x60/0xb0 [ 476.222633][ T8939] ? clear_bhb_loop+0x60/0xb0 [ 476.227344][ T8939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.233262][ T8939] RIP: 0033:0x7fb9e278d33c [ 476.237693][ T8939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 476.257333][ T8939] RSP: 002b:00007fb9e35e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.265769][ T8939] RAX: ffffffffffffffda RBX: 00007fb9e29b5fa0 RCX: 00007fb9e278d33c [ 476.273760][ T8939] RDX: 000000000000000f RSI: 00007fb9e35e80a0 RDI: 0000000000000005 [ 476.281752][ T8939] RBP: 00007fb9e35e8090 R08: 0000000000000000 R09: 0000000000000000 [ 476.289751][ T8939] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.297736][ T8939] R13: 0000000000000000 R14: 00007fb9e29b5fa0 R15: 00007fff22627c68 [ 476.305739][ T8939] [ 476.312006][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.322457][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.324802][ T5902] usb 3-1: USB disconnect, device number 7 [ 476.354609][ T4304] usb 5-1: Using ep0 maxpacket: 32 [ 476.356224][ T4304] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 476.376270][ T4304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.390477][ T4304] usb 5-1: config 1 has no interface number 0 [ 476.400681][ T4304] usb 5-1: config 1 interface 242 altsetting 4 endpoint 0x6 has invalid wMaxPacketSize 0 [ 476.416822][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.430472][ T4304] usb 5-1: config 1 interface 242 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.451078][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.458194][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.491625][ T4304] usb 5-1: config 1 interface 242 has no altsetting 0 [ 476.516152][ T4304] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=e2.df [ 476.540299][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.564551][ T8895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.581461][ T4304] usb 5-1: Product: syz [ 476.585894][ T4304] usb 5-1: Manufacturer: syz [ 476.590507][ T4304] usb 5-1: SerialNumber: syz [ 476.612636][ T8935] loop5: detected capacity change from 0 to 32768 [ 477.497459][ T4490] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 477.513527][ T4304] aqc111: probe of 5-1:1.242 failed with error -22 [ 477.568430][ T8946] loop7: detected capacity change from 0 to 512 [ 477.581549][ T8946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 477.622865][ T8895] device hsr_slave_0 entered promiscuous mode [ 477.630783][ T8946] EXT4-fs: Invalid want_extra_isize 45683 [ 477.653296][ T8895] device hsr_slave_1 entered promiscuous mode [ 477.671401][ T8895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.691593][ T8895] Cannot create hsr debugfs directory [ 477.879855][ T5745] usb 5-1: USB disconnect, device number 20 [ 478.094732][ T4271] Bluetooth: hci3: command 0x041b tx timeout [ 478.205684][ T5902] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 478.219425][ T8895] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 478.243850][ T8895] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.260704][ T8895] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.272187][ T8895] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.391274][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.401628][ T8946] loop7: detected capacity change from 0 to 40427 [ 478.407231][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.424661][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 478.456430][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.463161][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.473097][ T8946] F2FS-fs (loop7): build fault injection attr: rate: 7, type: 0x3ffff [ 478.506531][ T5902] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 478.510047][ T8946] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x2 [ 478.518074][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 478.532808][ T5902] usb 6-1: Product: syz [ 478.537108][ T5902] usb 6-1: Manufacturer: syz [ 478.541815][ T5902] usb 6-1: SerialNumber: syz [ 478.565404][ T5902] usb 6-1: config 0 descriptor?? [ 478.570570][ T8946] F2FS-fs (loop7): invalid crc value [ 478.588833][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.597906][ T8946] F2FS-fs (loop7) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x43d1/0x6b20 [ 478.606028][ T5902] kvaser_usb 6-1:0.0: Cannot get usb endpoint(s) [ 478.628375][ T8946] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-12) [ 478.642477][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.712208][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 478.733066][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.772613][ T8955] loop2: detected capacity change from 0 to 64 [ 478.799188][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.806305][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.889145][ T8957] loop4: detected capacity change from 0 to 64 [ 478.891604][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.929350][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.955047][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.962204][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.979076][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.983661][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.012003][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.021286][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.093672][ T41] usb 6-1: USB disconnect, device number 9 [ 479.132754][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.162763][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.212380][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.239186][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.263040][ T4254] hfs: node 4:3 still has 2 user(s)! [ 479.274096][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.328015][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.358901][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.373299][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.410126][ T8895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.434147][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.562881][ T8970] loop2: detected capacity change from 0 to 128 [ 479.593717][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.619905][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.624085][ T8970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 479.650862][ T8970] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.176374][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 480.355223][ T14] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 480.544688][ T14] usb 8-1: Using ep0 maxpacket: 16 [ 480.583275][ T14] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 480.758060][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.854356][ T14] usb 8-1: Product: syz [ 480.932533][ T14] usb 8-1: Manufacturer: syz [ 480.960370][ T14] usb 8-1: SerialNumber: syz [ 481.043715][ T14] usb 8-1: config 0 descriptor?? [ 481.090396][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 481.110845][ T14] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 481.205549][ T14] usb 8-1: Detected FT-X [ 481.306722][ T14] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 481.323469][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.333295][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.353742][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.392008][ T4410] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 481.504149][ T8984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 481.596111][ T8986] loop2: detected capacity change from 0 to 40427 [ 481.630780][ T8986] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 481.638677][ T8986] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 481.670618][ T8986] F2FS-fs (loop2): invalid crc value [ 481.715174][ T4410] usb 5-1: Using ep0 maxpacket: 16 [ 481.718432][ T8986] F2FS-fs (loop2): Found nat_bits in checkpoint [ 481.722392][ T4410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.754515][ T4410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.765183][ T4410] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 481.774372][ T4410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.807812][ T4410] usb 5-1: config 0 descriptor?? [ 481.840782][ T14] ftdi_sio 8-1:0.0: GPIO initialisation failed: -5 [ 481.881555][ T14] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 481.931461][ T8986] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 481.938755][ T8986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 482.255476][ T8998] FAULT_INJECTION: forcing a failure. [ 482.255476][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 482.268757][ T8998] CPU: 0 PID: 8998 Comm: syz.2.974 Not tainted 6.1.141-syzkaller #0 [ 482.276757][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.286817][ T8998] Call Trace: [ 482.290098][ T8998] [ 482.293030][ T8998] dump_stack_lvl+0x168/0x22e [ 482.297722][ T8998] ? show_regs_print_info+0x12/0x12 [ 482.302930][ T8998] ? load_image+0x3b0/0x3b0 [ 482.307445][ T8998] ? __might_sleep+0xd0/0xd0 [ 482.312048][ T8998] ? __lock_acquire+0x7c50/0x7c50 [ 482.317086][ T8998] should_fail_ex+0x399/0x4d0 [ 482.321791][ T8998] should_failslab+0x5/0x20 [ 482.326307][ T8998] slab_pre_alloc_hook+0x59/0x310 [ 482.331347][ T8998] ? kvmalloc_node+0x6c/0x180 [ 482.336031][ T8998] __kmem_cache_alloc_node+0x4f/0x260 [ 482.341412][ T8998] ? mutex_lock_nested+0x10/0x10 [ 482.346373][ T8998] ? kvmalloc_node+0x6c/0x180 [ 482.351053][ T8998] __kmalloc_node+0xa0/0x240 [ 482.355652][ T8998] ? lock_chain_count+0x20/0x20 [ 482.360517][ T8998] kvmalloc_node+0x6c/0x180 [ 482.365031][ T8998] seq_read_iter+0x1f6/0xd50 [ 482.369632][ T8998] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 482.375291][ T8998] generic_file_splice_read+0x1a5/0x4e0 [ 482.380853][ T8998] ? aa_path_link+0x850/0x850 [ 482.385538][ T8998] ? splice_shrink_spd+0xc0/0xc0 [ 482.390536][ T8998] ? lockdep_hardirqs_on+0x94/0x140 [ 482.395751][ T8998] ? common_file_perm+0x171/0x1c0 [ 482.400786][ T8998] ? fsnotify_perm+0x248/0x550 [ 482.405562][ T8998] splice_direct_to_actor+0x3b9/0xb60 [ 482.410971][ T8998] ? direct_file_splice_eof+0xa0/0xa0 [ 482.416362][ T8998] ? pipe_to_sendpage+0x310/0x310 [ 482.421400][ T8998] ? common_file_perm+0x171/0x1c0 [ 482.426435][ T8998] ? fsnotify_perm+0x5a/0x550 [ 482.431123][ T8998] ? security_file_permission+0x75/0xa0 [ 482.436683][ T8998] do_splice_direct+0x1b0/0x2b0 [ 482.441556][ T8998] ? splice_direct_to_actor+0xb60/0xb60 [ 482.447121][ T8998] ? rcu_read_lock_any_held+0xb0/0x120 [ 482.452599][ T8998] ? do_splice_direct+0x2b0/0x2b0 [ 482.457639][ T8998] ? common_file_perm+0x171/0x1c0 [ 482.462677][ T8998] do_sendfile+0x5cc/0xeb0 [ 482.467115][ T8998] ? do_pwritev+0x340/0x340 [ 482.471628][ T8998] ? release_firmware_map_entry+0x18a/0x18a [ 482.477614][ T8998] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 482.483627][ T8998] __se_sys_sendfile64+0x13b/0x190 [ 482.484484][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 482.488744][ T8998] ? lock_chain_count+0x20/0x20 [ 482.499571][ T8998] ? __x64_sys_sendfile64+0xa0/0xa0 [ 482.504777][ T8998] ? lockdep_hardirqs_on+0x94/0x140 [ 482.509972][ T8998] do_syscall_64+0x4c/0xa0 [ 482.514383][ T8998] ? clear_bhb_loop+0x60/0xb0 [ 482.519051][ T8998] ? clear_bhb_loop+0x60/0xb0 [ 482.523721][ T8998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.529614][ T8998] RIP: 0033:0x7f798018e929 [ 482.534020][ T8998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.553621][ T8998] RSP: 002b:00007f7981069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 482.562027][ T8998] RAX: ffffffffffffffda RBX: 00007f79803b6160 RCX: 00007f798018e929 [ 482.569990][ T8998] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 482.577952][ T8998] RBP: 00007f7981069090 R08: 0000000000000000 R09: 0000000000000000 [ 482.586001][ T8998] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 482.593963][ T8998] R13: 0000000000000000 R14: 00007f79803b6160 R15: 00007fff6da43d38 [ 482.601937][ T8998] [ 482.663057][ T4410] sony 0003:054C:05C4.0005: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 482.710256][ T4410] sony 0003:054C:05C4.0005: failed to claim input [ 482.898598][ T8981] loop4: detected capacity change from 0 to 1024 [ 482.952144][ T8981] xt_TPROXY: Can be used only with -p tcp or -p udp [ 483.226604][ T8981] loop4: detected capacity change from 0 to 40427 [ 483.234420][ T8981] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 483.242289][ T8981] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 483.255383][ T8981] F2FS-fs (loop4): invalid crc value [ 483.314180][ T8981] F2FS-fs (loop4): Found nat_bits in checkpoint [ 483.352927][ T8981] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 483.360146][ T8981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 483.405728][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 483.451893][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.539563][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 483.558827][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.579317][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.597020][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.615291][ T8895] device veth0_vlan entered promiscuous mode [ 483.652230][ T8895] device veth1_vlan entered promiscuous mode [ 483.733535][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 483.746243][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 483.760699][ T14] usb 8-1: USB disconnect, device number 5 [ 483.762537][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 483.780184][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 483.800659][ T14] ftdi_sio 8-1:0.0: device disconnected [ 483.820221][ T9017] FAULT_INJECTION: forcing a failure. [ 483.820221][ T9017] name failslab, interval 1, probability 0, space 0, times 0 [ 483.822180][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.834801][ T9017] CPU: 0 PID: 9017 Comm: syz.7.978 Not tainted 6.1.141-syzkaller #0 [ 483.848973][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.859046][ T9017] Call Trace: [ 483.862346][ T9017] [ 483.865291][ T9017] dump_stack_lvl+0x168/0x22e [ 483.869994][ T9017] ? show_regs_print_info+0x12/0x12 [ 483.875211][ T9017] ? load_image+0x3b0/0x3b0 [ 483.879737][ T9017] ? __might_sleep+0xd0/0xd0 [ 483.884354][ T9017] ? __lock_acquire+0x7c50/0x7c50 [ 483.889404][ T9017] should_fail_ex+0x399/0x4d0 [ 483.894104][ T9017] should_failslab+0x5/0x20 [ 483.898621][ T9017] slab_pre_alloc_hook+0x59/0x310 [ 483.903668][ T9017] kmem_cache_alloc_node+0x5a/0x320 [ 483.908889][ T9017] ? __alloc_skb+0xfc/0x7e0 [ 483.913423][ T9017] __alloc_skb+0xfc/0x7e0 [ 483.917764][ T9017] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 483.924019][ T9017] netlink_sendmsg+0x645/0xbc0 [ 483.928811][ T9017] ? netlink_getsockopt+0x540/0x540 [ 483.934032][ T9017] ? aa_sock_msg_perm+0x94/0x150 [ 483.938980][ T9017] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 483.944261][ T9017] ? security_socket_sendmsg+0x7c/0xa0 [ 483.949714][ T9017] ? netlink_getsockopt+0x540/0x540 [ 483.954914][ T9017] ____sys_sendmsg+0x59b/0x970 [ 483.959679][ T9017] ? __sys_sendmsg_sock+0x30/0x30 [ 483.964699][ T9017] ? __import_iovec+0x315/0x500 [ 483.969549][ T9017] ? import_iovec+0x6f/0xa0 [ 483.974044][ T9017] ___sys_sendmsg+0x21c/0x290 [ 483.978722][ T9017] ? __sys_sendmsg+0x270/0x270 [ 483.983491][ T9017] ? __lock_acquire+0x7c50/0x7c50 [ 483.988520][ T9017] ? __fdget+0x17c/0x200 [ 483.992757][ T9017] __se_sys_sendmsg+0x19e/0x270 [ 483.997602][ T9017] ? __x64_sys_sendmsg+0x80/0x80 [ 484.002550][ T9017] ? lockdep_hardirqs_on+0x94/0x140 [ 484.007742][ T9017] do_syscall_64+0x4c/0xa0 [ 484.012149][ T9017] ? clear_bhb_loop+0x60/0xb0 [ 484.016812][ T9017] ? clear_bhb_loop+0x60/0xb0 [ 484.021474][ T9017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.027359][ T9017] RIP: 0033:0x7fb9e278e929 [ 484.031765][ T9017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.051361][ T9017] RSP: 002b:00007fb9e35e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.059772][ T9017] RAX: ffffffffffffffda RBX: 00007fb9e29b5fa0 RCX: 00007fb9e278e929 [ 484.067756][ T9017] RDX: 0000000024060884 RSI: 0000200000000000 RDI: 0000000000000004 [ 484.075734][ T9017] RBP: 00007fb9e35e8090 R08: 0000000000000000 R09: 0000000000000000 [ 484.083712][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.091683][ T9017] R13: 0000000000000000 R14: 00007fb9e29b5fa0 R15: 00007fff22627c68 [ 484.099661][ T9017] [ 484.113109][ T8895] device veth0_macvtap entered promiscuous mode [ 484.164011][ T8895] device veth1_macvtap entered promiscuous mode [ 484.313723][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.431151][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.443196][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.490222][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.905717][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.084569][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.134600][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.158833][ T128] usb 5-1: USB disconnect, device number 21 [ 485.190313][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.200929][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.244640][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.292842][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.328736][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.985'. [ 485.356651][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 485.372135][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 485.420423][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.468226][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.481242][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.517010][ T9036] loop5: detected capacity change from 0 to 1024 [ 485.526525][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.537066][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.551001][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.561332][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.572714][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.583374][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.594836][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.606346][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.626918][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.665068][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.695860][ T9036] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 485.698186][ T8895] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.723119][ T8895] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.786976][ T8895] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.814619][ T8895] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.020122][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.060148][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.110634][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.137608][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.174948][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.187735][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.250660][ T5156] EXT4-fs (loop5): unmounting filesystem. [ 486.706274][ T9048] loop2: detected capacity change from 0 to 1024 [ 486.826632][ T9048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 486.954850][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 486.954895][ T26] audit: type=1326 audit(1750698007.274:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.4.986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dded8e929 code=0x0 [ 487.036428][ T9059] loop4: detected capacity change from 0 to 128 [ 487.051612][ T9059] zonefs (loop4) ERROR: Not a zoned block device [ 487.140740][ T9059] loop4: detected capacity change from 0 to 512 [ 487.150070][ T9059] EXT4-fs: Ignoring removed orlov option [ 487.160722][ T9059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.219515][ T9059] EXT4-fs (loop4): orphan cleanup on readonly fs [ 487.255570][ T9059] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.986: bg 0: block 248: padding at end of block bitmap is not set [ 487.278894][ T9059] Quota error (device loop4): write_blk: dquota write failed [ 487.287390][ T9059] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 487.297697][ T9059] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.986: Failed to acquire dquot type 1 [ 487.335975][ T9059] EXT4-fs (loop4): 1 truncate cleaned up [ 487.653486][ T9059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 487.779165][ T9048] overlayfs: failed to create directory ./file1/work (errno: 117); mounting read-only [ 487.870719][ T4253] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /223/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 487.911923][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 487.921301][ T4253] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 487.994804][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 488.015153][ T4253] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /223/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 488.082825][ T9070] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 488.108447][ T9068] input: syz1 as /devices/virtual/input/input11 [ 488.110121][ T4253] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 488.163195][ T9071] FAULT_INJECTION: forcing a failure. [ 488.163195][ T9071] name failslab, interval 1, probability 0, space 0, times 0 [ 488.219948][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 488.244542][ T9071] CPU: 1 PID: 9071 Comm: syz.7.994 Not tainted 6.1.141-syzkaller #0 [ 488.252575][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.262647][ T9071] Call Trace: [ 488.265934][ T9071] [ 488.268867][ T9071] dump_stack_lvl+0x168/0x22e [ 488.273567][ T9071] ? show_regs_print_info+0x12/0x12 [ 488.276476][ T4253] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /223/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 488.278767][ T9071] ? load_image+0x3b0/0x3b0 [ 488.305171][ T9071] ? __might_sleep+0xd0/0xd0 [ 488.309941][ T9071] ? __lock_acquire+0x7c50/0x7c50 [ 488.314971][ T9071] should_fail_ex+0x399/0x4d0 [ 488.319656][ T9071] should_failslab+0x5/0x20 [ 488.324161][ T9071] slab_pre_alloc_hook+0x59/0x310 [ 488.329184][ T9071] ? io_alloc_async_data+0xb1/0x1b0 [ 488.334375][ T9071] __kmem_cache_alloc_node+0x4f/0x260 [ 488.339741][ T9071] ? __fsnotify_parent+0x614/0x6e0 [ 488.344845][ T9071] ? io_alloc_async_data+0xb1/0x1b0 [ 488.350039][ T9071] __kmalloc+0xa0/0x240 [ 488.354191][ T9071] io_alloc_async_data+0xb1/0x1b0 [ 488.359212][ T9071] io_setup_async_rw+0xb8/0x430 [ 488.364066][ T9071] ? iov_iter_restore+0x15d/0x290 [ 488.369096][ T9071] io_read+0x755/0x1800 [ 488.373266][ T9071] ? io_writev_prep_async+0x120/0x120 [ 488.378646][ T9071] ? rcu_is_watching+0x11/0xa0 [ 488.383411][ T9071] ? io_file_get_normal+0xf3/0x370 [ 488.388604][ T9071] io_issue_sqe+0x294/0xcf0 [ 488.393110][ T9071] io_submit_sqes+0xa9b/0x1d50 [ 488.397890][ T9071] __se_sys_io_uring_enter+0x2eb/0x20a0 [ 488.403439][ T9071] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 488.408979][ T9071] ? mutex_unlock+0x10/0x10 [ 488.413475][ T9071] ? __fget_files+0x44a/0x4d0 [ 488.418162][ T9071] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 488.424230][ T9071] ? lock_chain_count+0x20/0x20 [ 488.429080][ T9071] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 488.434620][ T9071] do_syscall_64+0x4c/0xa0 [ 488.439052][ T9071] ? clear_bhb_loop+0x60/0xb0 [ 488.443725][ T9071] ? clear_bhb_loop+0x60/0xb0 [ 488.448568][ T9071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.454460][ T9071] RIP: 0033:0x7fb9e278e929 [ 488.458869][ T9071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.478470][ T9071] RSP: 002b:00007fb9e35c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 488.486965][ T9071] RAX: ffffffffffffffda RBX: 00007fb9e29b6080 RCX: 00007fb9e278e929 [ 488.494937][ T9071] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 488.502898][ T9071] RBP: 00007fb9e35c7090 R08: 0000000000000000 R09: 0000000000000000 [ 488.510863][ T9071] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 488.518824][ T9071] R13: 0000000000000000 R14: 00007fb9e29b6080 R15: 00007fff22627c68 [ 488.526799][ T9071] [ 488.551807][ T4253] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 488.586739][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 488.605126][ T4253] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /223/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 488.633780][ T4253] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 488.672784][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 488.747656][ T4253] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /223/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 489.088926][ T4253] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 489.323421][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 489.445604][ T9082] overlayfs: missing 'lowerdir' [ 489.460946][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 489.514575][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 489.531343][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 489.574554][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 489.594320][ T4253] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 489.721972][ T9082] loop4: detected capacity change from 0 to 2048 [ 489.734764][ T9093] loop5: detected capacity change from 0 to 512 [ 489.767900][ T9082] UDF-fs: bad mount option "ÖØLù7íJ Ó" or missing value [ 489.797970][ T9093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 489.834124][ T9093] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.909677][ T9093] [ 489.912125][ T9093] ====================================================== [ 489.919156][ T9093] WARNING: possible circular locking dependency detected [ 489.926194][ T9093] 6.1.141-syzkaller #0 Not tainted [ 489.931312][ T9093] ------------------------------------------------------ [ 489.933186][ T9082] netlink: 324 bytes leftover after parsing attributes in process `syz.4.992'. [ 489.938321][ T9093] syz.5.1000/9093 is trying to acquire lock: [ 489.938336][ T9093] ffff8880573013e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 489.938383][ T9093] [ 489.938383][ T9093] but task is already holding lock: [ 489.938388][ T9093] ffff8880756cc8c0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x987/0x1230 [ 489.938427][ T9093] [ 489.938427][ T9093] which lock already depends on the new lock. [ 489.938427][ T9093] [ 489.938433][ T9093] [ 489.938433][ T9093] the existing dependency chain (in reverse order) is: [ 489.938439][ T9093] [ 489.938439][ T9093] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 489.938463][ T9093] down_write+0x36/0x60 [ 489.938479][ T9093] ext4_truncate+0x987/0x1230 [ 489.938494][ T9093] ext4_setattr+0x10cb/0x19f0 [ 489.938509][ T9093] notify_change+0xc74/0xf40 [ 489.938528][ T9093] do_truncate+0x197/0x220 [ 489.938544][ T9093] do_sys_ftruncate+0x312/0x3c0 [ 489.938561][ T9093] do_syscall_64+0x4c/0xa0 [ 489.938579][ T9093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.047342][ T9093] [ 490.047342][ T9093] -> #4 (jbd2_handle){++++}-{0:0}: [ 490.054635][ T9093] start_this_handle+0x1f49/0x2150 [ 490.060269][ T9093] jbd2__journal_start+0x2b7/0x5a0 [ 490.065928][ T9093] jbd2_journal_start+0x26/0x30 [ 490.071288][ T9093] ocfs2_start_trans+0x372/0x6c0 [ 490.076739][ T9093] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 490.082973][ T9093] ocfs2_dismount_volume+0x1fc/0x930 [ 490.088769][ T9093] generic_shutdown_super+0x130/0x340 [ 490.094653][ T9093] kill_block_super+0x7c/0xe0 [ 490.099852][ T9093] deactivate_locked_super+0x93/0xf0 [ 490.105648][ T9093] cleanup_mnt+0x463/0x4f0 [ 490.110573][ T9093] task_work_run+0x1ca/0x250 [ 490.115676][ T9093] exit_to_user_mode_loop+0xe6/0x110 [ 490.121476][ T9093] exit_to_user_mode_prepare+0xb1/0x140 [ 490.127534][ T9093] syscall_exit_to_user_mode+0x16/0x40 [ 490.133593][ T9093] do_syscall_64+0x58/0xa0 [ 490.138522][ T9093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.144934][ T9093] [ 490.144934][ T9093] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 490.153438][ T9093] down_read+0x42/0x2d0 [ 490.158123][ T9093] ocfs2_start_trans+0x366/0x6c0 [ 490.163585][ T9093] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 490.169827][ T9093] ocfs2_dismount_volume+0x1fc/0x930 [ 490.175639][ T9093] generic_shutdown_super+0x130/0x340 [ 490.181523][ T9093] kill_block_super+0x7c/0xe0 [ 490.186710][ T9093] deactivate_locked_super+0x93/0xf0 [ 490.192503][ T9093] cleanup_mnt+0x463/0x4f0 [ 490.197433][ T9093] task_work_run+0x1ca/0x250 [ 490.202533][ T9093] exit_to_user_mode_loop+0xe6/0x110 [ 490.208593][ T9093] exit_to_user_mode_prepare+0xb1/0x140 [ 490.214650][ T9093] syscall_exit_to_user_mode+0x16/0x40 [ 490.220619][ T9093] do_syscall_64+0x58/0xa0 [ 490.225553][ T9093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.231960][ T9093] [ 490.231960][ T9093] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 490.239427][ T9093] ocfs2_start_trans+0x267/0x6c0 [ 490.244963][ T9093] ocfs2_acquire_dquot+0x66e/0xb10 [ 490.250584][ T9093] dqget+0x778/0xeb0 [ 490.254991][ T9093] __dquot_initialize+0x3b6/0xcb0 [ 490.260523][ T9093] ocfs2_get_init_inode+0x138/0x1b0 [ 490.266231][ T9093] ocfs2_symlink+0xc09/0x2650 [ 490.271429][ T9093] vfs_symlink+0x247/0x3d0 [ 490.276356][ T9093] do_symlinkat+0x1ae/0x3f0 [ 490.281371][ T9093] __x64_sys_symlinkat+0x95/0xa0 [ 490.286827][ T9093] do_syscall_64+0x4c/0xa0 [ 490.291763][ T9093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.298173][ T9093] [ 490.298173][ T9093] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 490.307024][ T9093] down_write+0x36/0x60 [ 490.311693][ T9093] ocfs2_create_local_dquot+0x1a0/0x1790 [ 490.317838][ T9093] ocfs2_acquire_dquot+0x7ae/0xb10 [ 490.323463][ T9093] dqget+0x778/0xeb0 [ 490.327907][ T9093] __dquot_initialize+0x3b6/0xcb0 [ 490.333443][ T9093] ocfs2_get_init_inode+0x138/0x1b0 [ 490.339154][ T9093] ocfs2_symlink+0xc09/0x2650 [ 490.344347][ T9093] vfs_symlink+0x247/0x3d0 [ 490.349282][ T9093] do_symlinkat+0x1ae/0x3f0 [ 490.354303][ T9093] __x64_sys_symlinkat+0x95/0xa0 [ 490.359759][ T9093] do_syscall_64+0x4c/0xa0 [ 490.364745][ T9093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.371156][ T9093] [ 490.371156][ T9093] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 490.378801][ T9093] __lock_acquire+0x2cf8/0x7c50 [ 490.384171][ T9093] lock_acquire+0x1b4/0x490 [ 490.389274][ T9093] __mutex_lock+0x120/0xaf0 [ 490.394290][ T9093] dquot_commit+0x5a/0x410 [ 490.399277][ T9093] ext4_write_dquot+0x1f0/0x360 [ 490.404666][ T9093] mark_all_dquot_dirty+0x1e3/0x400 [ 490.410379][ T9093] __dquot_free_space+0x7ec/0xbc0 [ 490.415913][ T9093] ext4_free_blocks+0x1bab/0x2640 [ 490.421449][ T9093] ext4_ext_remove_space+0x1f0d/0x4490 [ 490.427420][ T9093] ext4_ext_truncate+0x211/0x370 [ 490.432872][ T9093] ext4_truncate+0xa0b/0x1230 [ 490.438058][ T9093] ext4_evict_inode+0xb35/0x1100 [ 490.443508][ T9093] evict+0x485/0x870 [ 490.447928][ T9093] do_unlinkat+0x377/0x560 [ 490.452858][ T9093] __x64_sys_unlinkat+0xd1/0xe0 [ 490.458220][ T9093] do_syscall_64+0x4c/0xa0 [ 490.463151][ T9093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.469562][ T9093] [ 490.469562][ T9093] other info that might help us debug this: [ 490.469562][ T9093] [ 490.479784][ T9093] Chain exists of: [ 490.479784][ T9093] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 490.479784][ T9093] [ 490.492463][ T9093] Possible unsafe locking scenario: [ 490.492463][ T9093] [ 490.499898][ T9093] CPU0 CPU1 [ 490.505281][ T9093] ---- ---- [ 490.510636][ T9093] lock(&ei->i_data_sem); [ 490.515045][ T9093] lock(jbd2_handle); [ 490.521623][ T9093] lock(&ei->i_data_sem); [ 490.528547][ T9093] lock(&dquot->dq_lock); [ 490.532953][ T9093] [ 490.532953][ T9093] *** DEADLOCK *** [ 490.532953][ T9093] [ 490.541081][ T9093] 4 locks held by syz.5.1000/9093: [ 490.546177][ T9093] #0: ffff888078a78460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 490.555320][ T9093] #1: ffff888078a78650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x436/0x1100 [ 490.564795][ T9093] #2: ffff8880756cc8c0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x987/0x1230 [ 490.574357][ T9093] #3: ffffffff8ca74d08 (dquot_srcu){....}-{0:0}, at: __dquot_free_space+0x174/0xbc0 [ 490.583837][ T9093] [ 490.583837][ T9093] stack backtrace: [ 490.589721][ T9093] CPU: 1 PID: 9093 Comm: syz.5.1000 Not tainted 6.1.141-syzkaller #0 [ 490.597775][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.607820][ T9093] Call Trace: [ 490.611093][ T9093] [ 490.614011][ T9093] dump_stack_lvl+0x168/0x22e [ 490.618689][ T9093] ? load_image+0x3b0/0x3b0 [ 490.623180][ T9093] ? show_regs_print_info+0x12/0x12 [ 490.628377][ T9093] ? print_circular_bug+0x12b/0x1a0 [ 490.633574][ T9093] check_noncircular+0x274/0x310 [ 490.638507][ T9093] ? add_chain_block+0x940/0x940 [ 490.643468][ T9093] ? lockdep_lock+0xdc/0x1e0 [ 490.648057][ T9093] ? _find_first_zero_bit+0xcf/0x100 [ 490.653339][ T9093] __lock_acquire+0x2cf8/0x7c50 [ 490.658194][ T9093] ? rcu_is_watching+0x11/0xa0 [ 490.662956][ T9093] ? verify_lock_unused+0x140/0x140 [ 490.668153][ T9093] ? mark_lock+0x94/0x320 [ 490.672479][ T9093] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 490.678456][ T9093] lock_acquire+0x1b4/0x490 [ 490.682953][ T9093] ? dquot_commit+0x5a/0x410 [ 490.687536][ T9093] ? lockdep_hardirqs_on+0x94/0x140 [ 490.692725][ T9093] ? __might_sleep+0xd0/0xd0 [ 490.697328][ T9093] ? read_lock_is_recursive+0x10/0x10 [ 490.702692][ T9093] __mutex_lock+0x120/0xaf0 [ 490.707188][ T9093] ? dquot_commit+0x5a/0x410 [ 490.711766][ T9093] ? __might_sleep+0xd0/0xd0 [ 490.716349][ T9093] ? dquot_commit+0x5a/0x410 [ 490.720928][ T9093] ? release_firmware_map_entry+0x18a/0x18a [ 490.726813][ T9093] ? mutex_lock_nested+0x10/0x10 [ 490.731744][ T9093] ? preempt_schedule+0xa7/0xb0 [ 490.736606][ T9093] ? ext4_journal_check_start+0x17e/0x240 [ 490.742345][ T9093] dquot_commit+0x5a/0x410 [ 490.746766][ T9093] ext4_write_dquot+0x1f0/0x360 [ 490.751610][ T9093] mark_all_dquot_dirty+0x1e3/0x400 [ 490.756802][ T9093] __dquot_free_space+0x7ec/0xbc0 [ 490.761829][ T9093] ? __dquot_free_space+0x174/0xbc0 [ 490.767021][ T9093] ? ext4_free_blocks+0x18a2/0x2640 [ 490.772214][ T9093] ext4_free_blocks+0x1bab/0x2640 [ 490.777247][ T9093] ? ext4_mb_discard_preallocations_should_retry+0x710/0x710 [ 490.784621][ T9093] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 490.790682][ T9093] ? ext4_inode_journal_mode+0x18f/0x460 [ 490.796307][ T9093] ext4_ext_remove_space+0x1f0d/0x4490 [ 490.801763][ T9093] ? mark_buffer_dirty+0x2d8/0x7a0 [ 490.806880][ T9093] ? ext4_da_release_space+0x133/0x5d0 [ 490.812329][ T9093] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 490.818303][ T9093] ext4_ext_truncate+0x211/0x370 [ 490.823233][ T9093] ext4_truncate+0xa0b/0x1230 [ 490.827907][ T9093] ? __ext4_mark_inode_dirty+0x770/0x770 [ 490.833530][ T9093] ext4_evict_inode+0xb35/0x1100 [ 490.838458][ T9093] ? _raw_spin_unlock+0x24/0x40 [ 490.843319][ T9093] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 490.849204][ T9093] ? do_raw_spin_unlock+0x11d/0x230 [ 490.854398][ T9093] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 490.860294][ T9093] evict+0x485/0x870 [ 490.864202][ T9093] ? __lock_acquire+0x7c50/0x7c50 [ 490.869237][ T9093] ? proc_nr_inodes+0x2f0/0x2f0 [ 490.874088][ T9093] ? do_raw_spin_unlock+0x11d/0x230 [ 490.879283][ T9093] ? _raw_spin_unlock+0x24/0x40 [ 490.884129][ T9093] ? iput+0x768/0x980 [ 490.888104][ T9093] do_unlinkat+0x377/0x560 [ 490.892523][ T9093] ? fsnotify_link_count+0xf0/0xf0 [ 490.897642][ T9093] ? getname_flags+0x206/0x500 [ 490.902429][ T9093] __x64_sys_unlinkat+0xd1/0xe0 [ 490.907287][ T9093] do_syscall_64+0x4c/0xa0 [ 490.911701][ T9093] ? clear_bhb_loop+0x60/0xb0 [ 490.916368][ T9093] ? clear_bhb_loop+0x60/0xb0 [ 490.921035][ T9093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.926924][ T9093] RIP: 0033:0x7fca0d58e929 [ 490.931329][ T9093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.950924][ T9093] RSP: 002b:00007fca0e3aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 490.959332][ T9093] RAX: ffffffffffffffda RBX: 00007fca0d7b5fa0 RCX: 00007fca0d58e929 [ 490.967293][ T9093] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 490.975254][ T9093] RBP: 00007fca0d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 490.983215][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.991177][ T9093] R13: 0000000000000000 R14: 00007fca0d7b5fa0 R15: 00007ffc79624138 [ 490.999143][ T9093] [ 491.016249][ T9093] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1000: inode #64: comm syz.5.1000: iget: illegal inode # [ 491.032811][ T9093] EXT4-fs (loop5): Remounting filesystem read-only [ 491.042049][ T9093] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1000: error while reading EA inode 64 err=-117 [ 491.056643][ T9093] EXT4-fs (loop5): Remounting filesystem read-only [ 491.063309][ T9093] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1000: inode #64: comm syz.5.1000: iget: illegal inode # [ 491.151999][ T9093] EXT4-fs (loop5): Remounting filesystem read-only [ 491.162784][ T9093] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1000: error while reading EA inode 64 err=-117 [ 491.179443][ T9093] EXT4-fs (loop5): Remounting filesystem read-only [ 491.205477][ T5156] EXT4-fs (loop5): unmounting filesystem. [ 491.416364][ T4253] EXT4-fs (loop2): unmounting filesystem.