last executing test programs: 4m24.730084688s ago: executing program 32 (id=304): socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsgid(0xee00) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000047c0)={0x2020}, 0x2020) 3m57.523156955s ago: executing program 33 (id=481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x40000, 0xc, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x6}, {0x0, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xdddd0000, 0xf, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xffff1000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14008a, 0x6, 0x0, 0xe6e70c00, [0x6, 0x401, 0x8, 0xc5]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe0, 0x9, 0x2, '\x00', 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 3m48.026906355s ago: executing program 34 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syz_tun\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000300)="640000001800010401000000000000000a400000fe030001000000001400010020010db800010000000000000000000008000400020000000600140005000000240015002000010001000000000204000000000020010db8000000000000000000000001", 0x64) sendto$inet6(r1, &(0x7f0000000a00)="01020304", 0x4, 0x0, &(0x7f0000000b00)={0xa, 0x1234, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 3m38.678688628s ago: executing program 2 (id=558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m38.278976238s ago: executing program 2 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="1200884705a6af26", 0x8) 3m37.663546637s ago: executing program 2 (id=566): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 3m37.387655911s ago: executing program 2 (id=567): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) unlink(&(0x7f0000000240)='./file1\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1801) 3m34.353746408s ago: executing program 2 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x20, 0x81, 0x2, 0xfffff034}, {0x6, 0x3, 0x0, 0x1c786f53}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 3m33.565484696s ago: executing program 2 (id=586): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) cachestat(r1, &(0x7f0000000000)={0x7ffc}, &(0x7f0000000040), 0x0) 3m33.162495176s ago: executing program 35 (id=586): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) cachestat(r1, &(0x7f0000000000)={0x7ffc}, &(0x7f0000000040), 0x0) 3m33.120172447s ago: executing program 5 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x3, 0x40, 0x4, 0x6b, 0x3, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x81ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0x3c, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xe, 0x6, 0x4}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.616369172s ago: executing program 5 (id=592): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="2e0f785c7f06660fc7b503000000f32362020f693232300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc7205fd04ee7", 0x3e}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.265973969s ago: executing program 5 (id=594): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000840)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%?u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xabL@bM\xe2N?6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x2) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000140)='log\x00') ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) 3m32.084180568s ago: executing program 5 (id=597): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000), 0x2, 0x522, &(0x7f00000006c0)="$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") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x400a, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000001dc0)={0x4, 0x84, 0x40000}, 0x20) 3m31.693849636s ago: executing program 5 (id=599): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0x8, 0x81, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5065ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696f5b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c141767b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d06358ab446853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a60406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x8, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x2ff0f) syz_fuse_handle_req(r0, &(0x7f000000a380)="0a3d78dc319597536872a6b45da672985913e63676754b42bbf7c05af89995c627cb92ac8a972d6b8c88f5f3ecd5ff5e42e034edb4b2c5bc893b50d09668ed515f62d42b3c88e1c86994d40a09a8e5b00e86b59bedfc545ef1e2e796467b3e20dfae7baffb516448de81c3ae2ce3c6a63e742ccb2f689873d5736302c01b6ee851c498ff28b03aedf0953ecf9393f0f86334951368ff352feab0675cd5e613ce9fed81787966e0299243e7396f36fb2a79d8eec5fa28d6c10c785932fcf5f70722d0bbc60b8c4005a6cc80ab33462f115ac7da57ce7ff72b2c1a1a610b2a6a7cd2e1d0b7c924122de787695bb64cafa3b2307d9237338ad67010e87d87040764a2a86ae2a9c623ee4b56ea3f29a7537ecfbdce313c45cf5147bbea4afc4a28b0f62e81c178f50e23a0406c1151c5757b648ef0b2c0fb74012b309ca940551e5e9cd5d0c8d4b758691f5212eb728aaed6f17fe54752931774b3df82f3f3b534596c317432b562f6a3f31738843223e1b80d171c24f1687838d1354bd12baea5c0260eb58a34ad07926ecdae584a32b025d45f16ae7320fb939631db28693d58af97a9412a36549ac6fa310d785020e300243626350bcc39fa21c0391800f3f51b804897df57c814d6d81b6ae535eeb6b95a5a491d5217fbd945016238a3126414dbf93e97d1ed4267e002cab9b2bf9475255b12b89c6820b7239a130a495b181c6cb45e666467d2ddb74728e1bf3fb85dc44a188b79db5b314bc3bdd39449c88126e37b3d96d81271f3e757eb5a26f7f7a4779564dcbaa375eea800efe8cbc19cd7c07049733c030a580f8d94ac62d000f221f4c25410e23e33db765b490c33b813695c17ddeae67fe65993e09a664d8e6c5268eba700a4b29ab371301ec8e909849fc4a6bb1ed305c0c72838a62a0de8a15bfc6a3dfa6a90cdbe9e45c137840f88a98a533754e865286a3ce5d04fed67364c452f268ab28ba8e1c753f38e40c3aea0e622877014187ce56f65fbc69a3390ac13c648ef3bea4a3b1e2a01a4d6087df25972ce8c04eb6f83d0f5cc930bc848700ca796061d2c18475ea0a0c58d3463a7d38c1e7c91b2fb0bd48241458591f55b79598f3b28de56107925d7b747db2e80102317bae001fdcb6ff019c45a2348003a49bc8d033e8c0e496215c4a2cad8742f5f89eee78bfc5804b63c976e73cc5553a87cfd12741b408c1498b3c672a95d049e8878fe2e941e1a9f039d8b0276e29b985cad3b2e3bd1a4902bc21643bded14e0e1b52345f206c4c3f593434e98745284a12f1ffe355d71698dc588aabd7124d02195638ae3dfa910cf6f0d758f6ef1dde64ec89c44ab5e2f9a05a85999aa7ffa911d2da5a3e165fa77d5474ddbcac4d78affa9e64dc7b79a14a187c142453647744f82a9b7f894685db1c9ab6794a1cc92c9209a1d4bac39332542a271899a43fb31cd175d25bfaec083c6b26b89dcdf585877b3733423d475366105d98c3bd021a31201fac1f6af138d70a135779e623a13942603600412037ed8361c87970b36fff5e44056c7fb22aa39c825eb2dcbc7a9a50b260f634e1155b3db282bbcb70f4fdbc9bb44214c5451118bbcc1e87d7ae3a94af152f1afe9cc1eb2e6f11f31706f1e2e1692bcfeb623babbba5352f09a842b12edf3f6ac8fb72f1b0f08bdc5c0a53a770dc2f21dcb5dc67bcbb23379e104d39665593af31d022820dfec85cec7cdcdaff6d88bf895e79414ac019526fb36d0c859151184c261decbed9f717ff55d046aae76ff5dc42289281c3eaf7342dfe04f68563d569fe1c15254f2e7d9217b2f480559307d88208c78efb7b9c1cdadbd76f82579b33d0146745251ab63506c70f399e29a1f9b106af1b2ec5383c05d8d5c3c18ebf753e995ee948fea6cef3fff03a9d355d1a50f4620a6292e2e12532b0d2c9ff767c1b0de9c6ff9774b48585ca116fa91a49397e6a937a1844bf2372d32da3569f8049c2d400bcde500375ae5a71660430b7344ef67b2203adcbf74adab3d5ff5d1c259ed9330e9b2dbde810f286bf2aa3344fe2afc7062b13ac3d31955b89ad78bd192cf6fd8cf51bcf1df3267b580f93d90a8059e027a84e27b02fb08809a68b7bbac2b5202c0e277dc1f7bc3ce1dd9071706b0773f402312ae155c39c71fe08c234dcc4799410fd109a569c32f12660dc5ac5651c146d0cd27ea1773f36389ca82317a26236eb14bdffb5361575e20f189854e213f17283563f952beba507dafc022d1ac37e934c8d342074554d18048a91d95fd83365c7c360fda1c4e560d88f6e8b2b8aa416c2960df6b8933eb4eb7eb876349254cd9cfa3c00bcfd639ce07dbf49dc0357271a6ee043928f3d0e57c86753d62b8aa302013cc80e8071b7346894b7a0bee4a2c71dbb458ee02045b177cfc22137e5db57985848d3537ce41bc88f8d952282c19c0899e9dd499dae72bdce31d8c31c04dcba09b2a24b9a62fe209af5aeb9022acf5519a31119b3c991eda7568e6a554b17dfb083269b6c5ca68be4721bf80fd05e4b7e88d6afcb93cace9eac998facdbaf0d5dc3cce1d6905830feecd353d4714989af5990e4b7f5c1fb217452728b995ad81afc3ac7669e2e35268513cc0b0961e9367630135b9ae41d24a4aeeebe75d76a7b3926f9b922720296b70eaf06a0f7df86557df767fd396a98361a26f63033ad71d5664aead9f8cb831fcb69bd1b0293c14b3a5b27059691846e64fad89f532047c607541dec839661b63d2f2a2161f5f12cf2abc5dec1956d06b20351c793fc506c1848ef96c1dc85b99910df6a8fed2e125a32fc973d5536fa110f4ac770cf8b7d1770a02d3ebc70923295a17c1852685424085fcb1a326f8160d0ccbfe6b6aff456f71900e5c78c80898d0573090ff0b309d5c60f90f66e94391213137c9b7d13e4505d3440d3eb959a1674b89acd00843f14e16a7962c158dd0b0c129909b96fe19a8b33617ccdd6948e70a3072cdfc7392ca4f70fae902df917ce4c34433f0a12a201546d28f9e91e42ffab8661c1177c182029fedcc80bc3130c03836680fd84b42ff4956c724a9841021aee2352a7eadc2ce9e291107533bcdc40613228fd36df52f20198be9f31e38e251c9740bc2b546c2277257fb18e7084e1f4c2e3a2f1e80cae6e30108891562a246d91f308ff470dcb057a52ba5bfdde6c64cbedeb1fbddfed14fcaf030d7826653661031dfc448ef7f5960056cdbd38a37d451a76e4a5cf8433befa0040458393cd91fc2ed4774cda88a589adc87f586d1b5148c41686c9d1c81083f3c6bbe3bf2c06854a6d81fecfe21f15b468b62b4172947fa2cfd987ef8b14587001df25cb77b2acca89a5541d2118d34c30f9c99872c7bff66295895b72e410bc15f8e81c87a2dc05a9de45dc12fbc58368bb2eaeb8e4258df942b8785afdb9ab6f9784558d32c011d24ca9f1ffc6d0d4bd13ea6cf2f92f9d6f416a5b2f091624314ec63e29a7a85900927a371f263d6d8de059659f97c067b5e476ee250ddc7e6095117cc17b28619a59d5360906663aaf97965dc1df675943ea110686989a1e140908d0f02617283636c3668ea95b040dd60789858e371a720a21128e574c4d75f7eeaa997e720d22ba84811990b5bc13a21d27801e0e0477b41e0ea70e5f22bea7e9e84a3973a2f7132df7270f1a95030183647eb7739ccb0daf2d8c62b1485a0a2233a3daf8a3bb1f949221faa5b950de9f0c7217b703c1a2a649e4ada96cc9367cc298637ab9dc28a51a41e18859ce391c54b804c6b066070286b00e916f99ed73b96bb9686492eabd31db1c4696a67bba2d5f36a2b1ac6d700b6ebd9d75533dc6e199c2c068ba04487a09bf370f4bff8afa8168a1bb0b01f6d750091f5bb07d9befc750af4c8fd60e75bafd199f916c98a4e34278bd15ca5e7a927b40fe8bb1a284812487523570d40397a70dcddae0497a1329235df78928d4ff4d388cf79bfb2420c64a627eee2ca837fe18dace0ad9d36d8d1163f53f58e2b13a2957124dc68ab97326fd5b858f1388f9c8bb109d044eb438148360c6f032e3d602181d3966c9d581d56fd159f5a4c39cc97f0582adaf78be51ed498a93d8511c0af60ed4625cae6e469b8b0e7d3eff6e4b61dc21938823e127913095fa7d3ac5e54f15b1f8386b3d5f243254d6f4a5c5c30a15c53ee65deb6c383e1ada3846238c5865cc3731effc012c57008aa12441f9de7f1cc639b949b922fe435fcb5e1a6b4d08241c12ad5d6e5b8940ee19d3158c8806df2c44d3fcdea89f485e59637498893715b225e7a3644af9cfbc4e3173400e12662e957db0b1e6a39fdbf30cbddb4f0c911e7311bb8223e071b0480b3caac66d50f18acbf13df046f5cc41a6047c796fef77ab5e95eeabbdda7551f92764d8eea8ab886a20dc6ad77c9c15ac1317dcb4197e0464cb504aca343d7edc3eea1fee14c2fc480cac477a026c840c0fea4f66e42d471deacb8497ce1bbd7916d81e982c0be27aac72ce4f991d244d5e810a09b609edc1a7942ea45e8d217c456ae850a92666efdeca2a21e1825367570e1d0447f8d2c1568f2747d2bd0c22ebecdd26f4d8b949970fd2df0d5a6f5ecdaec314ebef6ead33f3855ba35da1acd67439861488d417641dc4529bd79e18647526657a9897fe3c5161834c7a3975aa0b3ef4e143016c8a6510b879cb2afbdef8a33bd957b8684e197bfaec19d5a233cd174e879bafdbc3769d35d74900411a886b440930c8eb6b3dcdd6456b873ecfa40de608846afdc74304761c4517dd3a25f09a812d2cbce17301ebbb7033bcb9d0e2bd0d93813d982957d3f3092cbc14cbd1abe948e3b2926f2b35a6aa947214eaa84a40c79ac43f5ec0b3f0b0dce7926dea6c5ea6b5659199de43debc962e0609a1a71df4ce25e62af4f5a49171078e6d7821c772fbf8b54eab74179645f020d613afb1e771911333c8a1ebab0e183dd1fbb18951772790228ad14c3c49ddaa3f7af4b874134fc4c5342b46209877822589fb7e5ce4017688402929808d53db7e9aeb9450f6736a649f8c6d84c05d0202710b3c13230d7db6bc21331aff6cf5ad67b0021300f2217117bf5ab767e01d80c53b5aaa38fd3a2f0fee13f12c25dd929f3a604e04b5ba13cd0634aecf0bd748db13a83e6c0e62123cc4325a768b2d483866b926aadd6ec816a1b7ae8ce197f8ed83db70b54cbfbc19c9843b046966db39229d7404d4f082b61101e850a8ee9e5a87c1fc2630b2eb1c9b2952a9f45c7b4c8307e700e6420c714aefe468a945d2bdcb252269997630f53923237dafe19e5b9ce4b3cb08950cc8add0ab9255da604cf7ccf8f55c5c97db96bd991414e04c7a17bd7bcc13aa5e7223ee7089985ea449310e9635bad3f36992a877acedd27a763311e54cb2cb90aa31bb8ce7d461f872d2d477224cf281bc623969b7ac49ef2975d3e56cca1d4085b97ba269cd1bc8b253af60b044f5a6ccbb1cfc644e645716e9c43eb1ad0b0e819bc5a20990aaf40809c2f84c41172ba709706e247907063dcc66b9aaf66372daa69f6d565583c07411be619ef8e6eac302bb8d50b0aeaf37751f7b4c88b35cf1f112947c2ef1c21f3263665f7012be68fb7c8927104cfc84631c2cf9fd73b75128d0312fe41a4d05ddb02493e26943e83ccb13a1128a389fbb5ea65ff1b2de04e8325fef827bb34a34d5d8665d67c0326f48752db74082ba8dcf67bd24bb1d5bcc578a80b682dab8d8ce72e16dbd78a240d074ae8f92005b6735ccbc2be5d8e91e24197f2b4b4aac3da60dde02016704c1c7f17d08aa759834ca46084580bb23980d4781e58e35a0b2d75b1cfcfc9811c1f5c57003fc86cd6ad7b2b0850a39c212ebb563f673ee428546a83028255b37bb1c4305e50f45efac6ab96ba6b5a6a8049e30cb267b881179ef89c718ad2f940dc19eda5bf2fb808624cf63b06a0e9a1dca236d6e4173ea921f587886a7b33b05e23eca59c1810c8f70781c1983efc4adaa4b850e6928002c91883b5c0fa08b838356cc5d3c52a3bf046b0202ba8ff59fdb47f5391b67bc7b3c13f31fbdcca7892346b9466da4d5e7b8eabd66e02dd13457a91e0c559b1a7c89e598700fc7a8751f017eed21df6db0cfcf69236a3ec38235392de4625fcb7089af56325cdb020c31a1c950c996e780e16106730eca14e57d5a575778e77d652dcfa264ed6c51e131216c7222085d6e2e937eb74b6ecc00427f5ddeb845c7cc011d7d947873cc7a9a88934660ea21546a835b0bc8df8ce348041767dd7228c4138d065e386208e17e45ed0515a4fde55f5c53d46922d91fa02b5be614b54f3fe6d504696736c9b71a2e71c1b5585daec0c0f58385395ef0b7ebdf654dc98acf77ccc933352af9451bceb49c04a6e476e63c7eaeceea572ae0d9ac401da06462209353f8ed8d92a11d2c08a3e852dcdbf6789ca66cafcdca2daf75ab188cd7494e086ac02559294dcd8ec95af8d9fe269973e31c2760f088b64ef5993a27ad1de553b1c267426b8e95d65ba81d021b2a26d9a1191051c3445c1134351403dbcd6957be7e3341296d6a9b1197ea23753ccceaf46d823928b96bc1d7ef4cdad11bd100012c2fedbf9c84e10effdf13acfd98cd39536d5181f09409b3de810d27c75248856c62cda154d4c51cb1ed65b6e31a1bc287196c0a1628f02b7b4ab657c5406c49407c8af4ded5103f487cd22016e2a76a0e933949a56c7e14e5b007ed945700f92adebcf47b33cdd0deab3d75f588e3737ed9ed3f8785d6f520242610d3f0ad551bce62e818b9cb25af4bae3699218443cdf7879b5cd48a9a4a17d2f4ec347eff446997b5a008e7f9372c150c57b16a21eeafe9f6c399528d227309069faec4dff2bcb2f473df729c21ebedd6b178e7667c425ce246c69b1f771fd97d473e19e95ee5b7eae69b156791e9f9eb84b816be9e9c1485710678976722f4a00f22655b04253aae47baeaaef9beaa9b90eb3a237b6ae37fe4d5a2d5615f9a8426acff0f863e7f5dc3a25d6a7d75789e093868cb942687b31ebf2c1c95a95acad4a2bc80afe37b4d4b4795724d7398148668bf1394bf388b374e32fef79e34ae3124603bd2826fa3e42dffb485dfd15c4827a20cb20a6b903c8f4b25ae50c3f189828f41abe0e2deadcd62ec1ad5120b70205471ce3ea782984405a14a548ade2d7e35fdaaf4b14eb57b465c5fa27581c5bd39f2847dc8887d9bd84d4700b6e484147a9d6719992f02924dfe91d9677fecdc1d63aedd13dde54d8bc2b9d250400754dce04409d50dff72df4ef7c9fca573cfcac0560ea372089600b0702eb133399d12e6e3e7b56252ffcfd39041211b39730571826515b35496a083d9116bc870f49d0c9acdd66205cb215af2637ac4bb004e081fd801c3b9d4d6928e8141360760e6e6fee54fe51da9c0b3f6b91e9797cfa72a02e91c24b90d1f74cf2854a3f58679db43826ed510284d32ce0b3b3236fe6db3a924146037fde1de459307a8be90bd1e7f8fabc074f19c0d030407a70ba545165b17fb0907ade8ee26c12ce75bdc7994ee49237667b8835e1e2c84a1c0c4d84490d44e66ab33803c1c578019d8c6b654d1417233cc3b6ca6f87476bc7d6797f967444910a4e9977e12b7ea3b708a31293211c53c87a0732b0e5808e9719b989ae7dba521d28a0d2956cacee8e9e2cf1f39edb4437af08f47ec953b08f493bf0196cdee88fba57cf256a947b0ca0e53083e45698992d732c26fb6f82d41685b195ef7a01d38a0da987acbe0c1f2d4f99cfdc7c2f85ecf3c787c787cc5ee1e2f8573037ac0eb964137e6fb691db9fd2aab4f3d9763df93ac093379c3e58f3fb9e54626f253aac30dbe92689f61df25fde3f22881d80295585f43ce2100d1275c4134f742ba7fa11e21a66ddedc59c825f509d65536409d103661cee5a3500af00e4416d45ab4aaa77aec42dab5d620f0aac6f0883294aaf8060bedb3d8318ac3786f3ce1aeb317610af7bc76003efcb943ea5a22f6ee17c5a24334c35a6bd50bff67d9945d708d41cd7f89362657a789439fa91a5aad28d66ccbdc4c84a613d5539d027631ef434dc648a389bf2d6f21161b2ffcf12b39a41ecbbe29349ce771f1d542134ed71e99eca4c006ff721e48af1334059f8017efd26267716481cd954fab9149cb8e5f8fbc973dbbb6630105037d3875cdc0ab79e1790816a290cf7ebd1064e0fbfa8017852aaf3234ea2c3c54a31c99081edc1df0120d2d5a621d3e0dcbf3ec3bacd937e6e085043871c80e5b3684dc5064406514eac4f566abf0e238ee15fb1e435011ef6eb662eb39c9e63390b2fbe48301dd7586177501a433e4a9cedb60c02076794d9903966268ee9943080b0d66905f14741eff6371b58413145bd5532a94c705fc73601c1f36d569ea388b400c1603db5ffa043af6eb2fec1a27ee0fc58e2d54e2c45be6155b6c78b6a50f36326d4bfa364acf5ff726c568986a6440a1dab2b7b6c6a5f9a9cece10a4039a8e9aef5a399844ada9788b1aa9207ab855d8299d31469d21505b4750dcdf2d5fe4c4cc0d977c51c246a04a12029bd16bc161734d9dc09ac0c8d0a0e3c7acf279fe73c32d52874c22cc739d35459b4c4329d1a8f97498bc02cf202f5bba2bd58eec3afae941b45f6d5ae256914d816ea145b7f6a5785c0043d2af63d6ac31667589dab1ff69455922abf21af3bf2c6a830696a780b06fde15895437a227d6c250a3636588d5cd0bca146799c53fce3a4ac57d07ae80cad1eddbcd39eb791ceab11ba3b7b4fd77bb69137c1a36e3be010ce604a6cd8eb7a2c4ba1117ebdab31ab0109460763360d0782427902ed4d7e386adf959de56e1f2b0df8ef3d00942e28d5b3ec9a064fafb8a00657ecabd788da7f80f283127b9217ad40120145e48d995130300fffa0d12e9b5f67f2ca469d1a381c41809d3e01fdb81741f7b381dcbde5cec9b175c598eb3f565c822e5acff05b8d5925d19f74743123e91e5e468cf51e2b9e988cbe7003d7750edc49b55cd1f5a6a9a7a95e8f20b13bde35ba4cab9d47f16636096e16416f6737ee283bc965761846ad97493e49b57862e57485238f39b2572c570d27d0b6feb6175bfe3caae8c504c9d6fb6420ff2962f9810664306ab29cd7cc36b8fc75477ce2c146732e5cf5ef3c9945c3e2e444d45f06a8460fce16906743304df27c66e44fc85999e7b70311ae9b3dc7466ea9d063961dce2f0fd4e586e4265d16632850306e4652845a7eff5df9cd86b0799474ae8b4e5f3dda40e03038111bd5c71bf211c2e8626d95a913065d2ce69090f0152e7d3496917e5ff1002302ebf7fc2a8397803a2721c8027af52de130f886dc423d8d6e9378da0a83fcbe55ea4f0cbad494b165f21253a0c472adf69085088ceb1ba93c8a5b1d4267831e6e7ab38bb5ddff5e786268b35e253f13121a22cf79757469f763694db24b1bd50b0b6a11ef4cb63e294a562d5441ef75e3cd53c2b9f471ba18572b6e987398e51bf23acf259377d197f1798be91df35c8c3bf6276c84e7a5d8adcbcb0714e6d1efd7eda106f40f52cc517779388f9b6e4112a587c0e106cd347fa41eee5b9e0a6cfa698de746245f79c17a86df4fcd9392453bd237c608c13df1633e96fa4f34758318e83a37e3e96c5f2e9d24adb81cb23d6776d89aafbcf4946377dbb0763c6b3368d20af2037cfc6d017113fdd66e432df9f0eb68832caf62fcd4b49c8044dc99d1feddc9ed14154813f8cd8d9578516d978f1fbb1a783eff434283b0c4137e242be5707eb5614756c3785ec205c2206b32cbccad91803b3548367d109a05abfe5a782bfca4ce39e8bff6a6d81cbb4a803d8dfa0daafcca1e6981cbedceade5e7a4c9d0953d2617ea4dd117401df6743ca476ae5a4ec47d35386af120266272cdaa5d5f5aad236f3e23e312b5ac2f0f388d6604eb6994755c8a29d164e7a89511c9a43dd83c0509df676922b8319a6f8cfa93f0e1c72ac4a92b2d23b61b034c8fba824f19884e346b4e592ed39494f757685dbc9a3d8b2f7c2d442e8cf0e86aa5bacd5b28620955db4c6788894cb404b2a212a36d88204a2c7cd5569ae1fccc599021411bd7c97e33bd7bd311964ecb8d1265738c553c74532353d8fdc6a6932634b382307e03daac94ec55890ef0f90eb51bfa9ffceaf8d8d423695fe607ae18685d4e642dcba85cfd4ab1723e7b36a38437bb68891262b1c3c979a39772a5998df7628ebf10efdc7209463e9ac43d6bef30b4eb3e79b172088f399b5f8b7128c75a53adb9c627e5e8978f3133397c949c24d3d3c3a586d88cd62e2d8ab83a7a4a7db3ba2a92dfcc89de6bc0daca76e9d38298af92555d344d00ddba9d4d8ca95b1f2668b25f1c3e35154b1612a73f42b6260736bf60fcff37566e15a4836ce5f96e51cbec0adca6f566d3c9fb31fb102c7aaf62f59788f9f93ac22794b8af6e3f8958c7cc01e2c5b35c24232d7441072cc8e84adc14bbe172537623460cd1e3754d9c5675c19ca2f04701911a79e4fb9d0d4d32ed73973e236f9dccc6792462e0bf0dfe1bf958f949e8203fcd2935a70854c5d290dc2ea530b2e731b71b1407a26200a97d9f5b75a991570f1be8df3d28acb37c07fd0f321ff5b90b5118e9695060af6a4d86d075ea67513e5d7ff7a4f39407e52df4fc6f1c66a82a37de37d70dc82077a2fc8e45ce33af4be8d5397808448b5eb7f5b1484e55cb396dc0b11bb3a317d6d6a93fab066540fab11289301f0a79742c309455a8273572788575eaa01681b5592e9e20e3490b1a44b4bcfa4cfe5aba60626667d0c7cbba729142c4b46a52eb68ff76f0631bf2f4c10345a901306a20f291aa0ef3d61340277903fc8a7be17098117f093aa1270ab73d633a4032e8dae1a53dcae71fd4f27a841e9ec8f935b03b434ee3a5acf9ea80cb2bc674842c961e6625d4ce9f82023c9a82c6c949709c9c0e10eb2104c47e7f82a8276c15ee56e5f1f27ec9828f1db6af0f14f1abdd327fe1a9a41f747fc7fb4a279e854bffac55455ea59954c637450b985f0142f834b0d650fabaced8e6a56d82bb0ec930aa8a04ae510f48d646bd8e6fc66f6ad34a6fa6d22351949365feab2ba14c688f564f881c473a3f019f85233b518a73b7323b54167dec385969abf51a120e74e9455adf062af6127696d37f2e0677ffb8844d3f2ff0463b87a585e97b164600a980a8c534c4f040d690414eada1c928981d7f0ecfe0243eec26e766bcba2392b2a0d19510b660a9b6cb8d24225da891fdd5e4be4c3330bbe8cf2375944a19785b2b47c43d481d68d38ea32f396b50cd4bf997012bd831f3c3af767ea1ae8eb1934cb058f0833f97270a8a51661e75096b64178294e3c6ca14a9969aaaad213eddcaa51720cd13bc40464120ac085e93491aa6ad3ea88dba9394617ab3a0b4c7158811de7b81aca1ff8f02ba74241d0f72ad4ae57958e36757f22f9dcc987323e7da477ed9f1190b9fe47ee7157c02fcd2dcdc20fe06af8c7d5e1f7dc72fe69158e52737c332e395629047e2cc27da2fec8c41e825d55ea55d5f6b0cf7364b025d7079", 0x2000, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x10, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) 3m31.116630665s ago: executing program 5 (id=603): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0xd18, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) 3m30.820067829s ago: executing program 36 (id=603): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0xd18, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) 2m45.672292926s ago: executing program 8 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x81, 0x2, 0x182, 0x1, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x200, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x6, 0x6, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0xfc, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x4, 0xeeee0000, 0x8, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x6, 0x81, 0x7f, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x91}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.1635055s ago: executing program 8 (id=825): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m44.665885954s ago: executing program 8 (id=827): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x410400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 2m44.184865608s ago: executing program 8 (id=830): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0xa01f, 0x100000110) 2m43.554328028s ago: executing program 8 (id=833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000800)="01", 0xfdef, 0x2d, 0x0, 0x0) 2m42.879662201s ago: executing program 8 (id=835): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000"], 0x8) close(0x3) 2m42.251276441s ago: executing program 37 (id=835): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000"], 0x8) close(0x3) 2m18.622612826s ago: executing program 9 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) 2m17.475723251s ago: executing program 9 (id=957): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x5, 0xa, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) close(0x3) 2m17.255732392s ago: executing program 9 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x41, 0x107, 0x70bd28, 0xfffffff6, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\n\x00'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic='v']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto$inet(r2, 0x0, 0x0, 0x2000076d, &(0x7f00000001c0)={0x2, 0xfeff, @broadcast}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r8) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x164, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) tee(r4, r1, 0x7, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)='!', 0x1, 0x448c4, 0x0, 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/239, 0xef}, 0x10001}], 0x1, 0x2101, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r10, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) 2m16.723086648s ago: executing program 7 (id=965): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) pipe2$9p(0x0, 0x4000) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 2m16.649966961s ago: executing program 9 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m16.247326891s ago: executing program 9 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x20) 2m15.770327414s ago: executing program 7 (id=974): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$MEMERASE(r0, 0x40084d02, &(0x7f00000001c0)={0x6, 0xdf}) unshare(0xe060400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m15.505178527s ago: executing program 7 (id=976): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 2m15.367896183s ago: executing program 7 (id=979): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000) fallocate(r2, 0x0, 0x80000, 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x80, 0x86) copy_file_range(r4, 0x0, r3, &(0x7f00000000c0)=0x8010000, 0x400000, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 2m15.278255358s ago: executing program 9 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000400)=""/70, 0x46, 0x40014143, 0x0, 0x0) 2m13.955751332s ago: executing program 7 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x20) 2m12.782092278s ago: executing program 7 (id=1000): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595d, 0x10000, 0x0, 0x4f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m59.907343072s ago: executing program 38 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000400)=""/70, 0x46, 0x40014143, 0x0, 0x0) 1m57.581540735s ago: executing program 39 (id=1000): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595d, 0x10000, 0x0, 0x4f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m18.532776826s ago: executing program 6 (id=1193): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6772e870", @ANYBLOB="671f29bd7000fedbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x46010}, 0x40000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 1m17.900293677s ago: executing program 6 (id=1198): syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m16.845824758s ago: executing program 6 (id=1206): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64=r3], 0xb2) 1m15.77942539s ago: executing program 6 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1m15.205988427s ago: executing program 6 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) unshare(0x22020600) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 1m14.971806679s ago: executing program 6 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r3, 0x0, 0x0) stat(&(0x7f000000aa40)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)) 59.746576206s ago: executing program 40 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r3, 0x0, 0x0) stat(&(0x7f000000aa40)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)) 19.060893186s ago: executing program 4 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 16.71808002s ago: executing program 4 (id=1370): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, r0, 0x10ada85e65c25349, 0x70bd2a, 0x25dfdbfc, {{0x67}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x18}}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x0) mlockall(0x3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12.762972012s ago: executing program 4 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f0000010800)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCu\n\xd8;\x0e%\x99\x9fk\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0&\x1dMTo\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}EY\x95&\x03\xf5U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xb1\xd8\xe1\xda\xcb\x14\xb8K\x12\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96au\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\xa0wwG=\x7f\xd3\xc5S!\xff\xd2\xcaX\xcb%\xfdg\x9f\x1fC\xedY\xb6q*\xd8\x1f\x1a\xe7LX\x7fXX\xa5\x9b*&b\x85\xady\xfd\xf6\xe3,\x82d\xcd2;?\xb4\xdb\xd0O\xb6-7I1\"\xd8\x1e\xacPp\xf7PnB\xdb\x93\x8e\x1b\xad\xf5t\nq\x161X\xcc,\x89i\xc7\xb9\x03\\\x89 \xd2\xaa\xf96\xad\x93\xe6!\r\xbdjue\xb4\v\xc0\x04\xf0f1q\x16\xcfh\'\xbd\xae\xa7u\xb6\x82Q\xd5V&;\x86zOf\xccQ:>Nq\xf5)^\x10\xae\xad\xc8\xb8\xc0\xed|W{*\xce}v!x\xbf\xe1P\xd9\x9fXf\x84\xca\xac`\xca\xa7\xbc\x9f#\xd7{V\x1b\xa3\vp', 0x2) fallocate(r4, 0x0, 0x0, 0x400001) 12.514771534s ago: executing program 3 (id=1387): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 12.072090285s ago: executing program 3 (id=1389): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file1\x00', 0x200800, &(0x7f0000000140)={[{@filestreams}, {@uqnoenforce}, {@noikeep}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@quota}]}, 0xc2, 0x96c1, &(0x7f0000009680)="$eJzs2gm8pnMBsP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUtGKkkJFRHv2LVtZQtlaSfYWSgiVLJEW2zD/zzFnGOOienvfv3Jd1+dzzv0893M/9/k9v++9nMNsMmmDiYPBHINpjRvM3DlXT54y5sp1bzti8/mPXubku/Z75IaLjh9ZThhZThwMBqNGXh6atm7s4JRTRw1mfXD9w80951xD8w4Gy448HdnPYMVpi3kvm77d1JmaeaBDD3/ba9rXg803/COGHxy63x6HDQaDMTO8f2gwGNr1UR9U2iYTJk962Ooht2Gr0SOPZ/yabdrXvBcOBvOePuDjY8Zth56AjzT8M3d90dmj130Cfvb/XJtMmLzWTP7D5+IsI+tWHD7HZz4Hjc18nN+y2KYrj0zhg8fbYDB8iXvEufI/0SYTJq09eOzr/OCIVc7fa+q06+bsg2k3ijkHg8FcI9fXeZ5ol/rPmjBxuQfv2dOfj7BPP5Z3pePiuLee+MDwTXowGCwwGIxdc/q9oKqqqv43mjBxudXg/j/H493/Tzpp4dO7/1dVVf3vttaEicsN3+tnuv/P83j3/x0XvmD3af/tf/yK0971wBP7IaqqqurfatJaeP8f83j3/xVXu2Tt7v9VVVX/u62/zoP3/3lmuv8v+Hj3/zeduMoiI9tN/73h/hl2OTTD/0+4b4b1s8yw/t4Z1o+eYT8zbj/bDOvvnmH97MOvwfbjBoOx0/+94JSHV48dN/zayPp7Zlg//uF/p7Po6jOsnzDD+kkzrJ84Mtbh9ZNnWD95hu3XfJyprqqq+q9p/eUmrTaY4d/Zj6xeaPrrdP8/74xrlnyixltVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX/mz1w25lnDwaDocFgMGowmDIYeTzjcjB16tSpw89POvfSS5+wgf53NHTO1ZOnjLly3duO2Hz+o5c5+a79Hp6l/9n+9z9B/ScN+89x7LjBYPuNnuih1BNQ57+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe+C2M88eOQZGDQZTBiOPd52+PGPfN755ZNOVNz75jgMffuei47cZeXTO1ZOnbPMEjP0JaGj4s465ct3bjth8/qOXOfmu/Z4EZ8///ieo/6QH/bcZGgxGzu8xw+fyuhPW33CJwWBw4B0nb7zC4KHXVhp+bZWxswxmefCtSzz4fY1Fece7rjltOX7424IP7eOkB/e/1tRDZhmaaRAz9Ipzrj/iHZvctfzMy8Uf+3OMmv7gsGtPu3Pq1KlTH7FypDke483T9z/9s8x8no+MfYnhsS+103bvXuq9u3xwyW2222zrLbfecvtllltp+RWWXWaFlV+21FbbbLvl0tO+P8acjXvw+2r/ypzNM/Oc3TZhxjmb+bM91pyNe/w5e3CPUz44tOH0OZv135yz1R5/zsZtM/KDFh0/erDpg1MzNBgsuvrowc7DT5aZfTBYdI2RbRca3nbVsaMGg30f/qDDj2Z/6Bgc2nV4m00mbTDx4ZE9+hM+6jr9iA0XHT+ynDCynDhtiOMGDx+KYwennDpqeC4eMc1zzznX0LyDwbIjT0f2M1h55NWDp283daZmHujQw9/2mvb1YPMN72T4wTuXPvOq4XNxpvf/v+j/6Pr/KK+Vhh6aqKGRr5FtpnlNmLzWwz/rwWkYnrtZRtatOGwy85z93+xR4x0362DM44x30loTlxtePdP8T38LHl+3L3b+h6YdW+NXnPauB/6PUWi88zzOeNeagOOd5/HGe+yHLz512q7+r413pmvd2g9+H/+vXOsGj3+tm4V2sOVFi8x8rXvNYw/xEefx9DmafaaNHutat/NBy+46vP/xj3+tW3t47KMfca0bNRgsutr0a93whW/S6MG+w0+WHX4yefTg6OEnyz34ZM7BucNPXvr2HbbdYnjFmtPnZOnh/Y4fO/Sg+/kr3rz41P2nTl19ZCzjxz5yrCPHx7gZ7+cTxk6bzOnvnb7f4U2n7/emp097bdLIfif8G/ud/l4a7x3zTXtt8sh+J86039GPs9/p733U+bDE0EMXrse43kya6Xoz8jfO9B/3iK/Zpn3Ne+FgMO/p5DvTtv/0mknn7xyPM94JE5dbbXh8M52/Dx2OdP5ePPnK4XvFvIPBYIHBYOya08f+bzb0WOOd9fHHOxHGO+vjjffyY7Zb5//CeAczjPcRx9km6087VtYcOc4m/xvH7/T3znwdG/3gq9Mu+2v+K9excY+6ju02y6iZJnuGHut3ti1g+2mPF3r499yrTzhq+tyPnmm//+x3thk+yxBcx8bM9Pf8qDWvGwzRnO967KqXDB3w+HM+evDIvy2mz/n09z7enE/+V+b8WY8/5//q78lLPH/a66NnGv+Mc77ePs/ce/qczzbTfv/ZnE9+/HvHo+d8/GA0zfnS906bt8e7nj7WnE9/7/Q5H/6Iq4yddbDG8D1rZM4n/StzvtD/neN8Lth+2uMtH1p11hEnv376nM88x/9szif9u3M+7qHjfNEHX3veqMFssw123mynnXZcZtr36U+Xnfadr0V3Xz1tnh/vXvpYRtPf+3jnxer/itGYf8lo6J8ZLTzrYxk9fGodvsOOT/s/vRat/u8aDUbhnF951LR5e7zfix5rzqe/l+6DC87w/pn/Dl1/nQd/755npvvg9LfgffCsM9bec/ouR952/0zDnH5fvW+G9bPMsP7eGdaPnmE/M24/2wzr755h/fBHmG2G7aezjhv+m3dk/ZSHNx87/MvTuJH198ywfvzD71109RnWT5hh/aQZ1k98+NBYdPIM6yfPsP2ag3+z6f9NepuZL/L1r9Z//3WXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvbth/6nxP9Cjqiarz313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3EP3Hbm2SPHwKjBYMpg2uOhkeVg16H1bn3V8HIwGIxe8fip6z3R432CGzrn6slTxly57m1HbD7/0cucfNd+T4Kz53//E9R/0oP+2wwNBiPn95htBoPBuhPW33CJwWCw3tTjVxw1eOi1hYZfW3XsqMFg36FH7GD2h7YZ2nV4m00mbTBxMJhjZItxj/qhjzqPHrHhouNHlhNGlhOnXZ/GDR4+XscOTjl11GDWB9c/3NxzzjU072Cw7MjTkf0MVpy2mPey6dtNnamZBzr08Le9pn092HzDP2L4wc5bT3728FzN9P7/mqZfq7cZ9U837fx3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u/v3/Dtanmwl6i5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3wG1nnj1yDIwaDKYMpj0e2nVkORg68ZQXjhwio3e54shDnujxPsENnXP15Cljrlz3tiM2n//oZU6+a78nwdnzv/8J6j/pQf9thgaDkfN7zDaDwWDdCetvuMRgMDjkyCt2GTV46LWFhl9bdeyowWDfoUfsYPaHthnadXibTSZtMHEwmGNki3GP+qGPOo8eseGi40eWE0aWE6ddn8Y9MHVag8Fg7OCUU0cNZn1w/cPNPedcQ/MOBsuOPB3Zz2DFaYt5L5u+3dSZmnmgQw9/22va14PNN/wjhh/sMc/VJw7P1Uzv/69p+rV6m1H/dNPOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3wG1nnj1yDIwaDKYMpj0eNbIc2vXGGz664fBy+Pn8a+559RM93ie4oXOunjxlzJXr3nbE5vMfvczJd+33JDh7/vc/Qf0nDfvPcey4wWD7jZ7oodQTUOe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vgtjPPHnk46uG1o3btuMCGzrl68pQxV6572xGbz3/0Mifftd8TPaD/tMfw3y1/zOK/e/6Yxf/j+WMW/0/kj1n898gfs/h/Mn/M4r9n/pjF/1P5Yxb/T+ePWfz3yh+z+O+dP2bx3yd/zOL/mfwxi/9n88cs/p/LH7P475s/ZvHfL3/M4v/5/DGL//75Yxb/A/LHLP5fyB+z+B+YP2bxPyh/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfnPSSst/t/MH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv9v5Y9Z/L+dP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/7+SPWfxPzx+z+J+RP2bxPzN/zOL/3fwxi//38scs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/M/PH7P4X5A/ZvH/af6Yxf/C/DGL/8/yxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/K/PHLP5X5Y9Z/H+dP2bx/03+mMX/6vwxi/9v88cs/tfkj1n8r80fs/hflz9m8f9d/pjF//r8MYv/DfljFv8b88cs/r/PH7P4/yF/zOL/x/wxi/9N+WMW/z/lj1n8b84fs/jfkj9m8b81f8zif1v+mMX/z/ljFv/b88cs/nfkj1n8/5I/ZvG/M3/M4v/X/DGL/9/yxyz+f88fs/j/I3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8p+SPWfzvzx+z+D+QP2bxn5o/JvGfZZA/ZvEfyh+z+I/KH7P4z5I/ZvGfNX/M4j86f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/lPwxi/98+WMW/zH5Yxb/+fPHLP5j88cs/gvkj1n8F8wfs/g/NX/M4v+0/DGL/9Pzxyz+C+WPWfyfkT9m8V84f8zi/8z8MYv/s/LHLP6L5I9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+fl/6hmHVka/J+fP2Y5/xfNH7P4L5Y/ZvF/Qf6YxX/x/DGL/xL5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/JfPHLP4vzR+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4vyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/8vzxyz+q+SPWfxXzR+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+s8p/lX97S4r+myv9fz+K/Vv6Yxf/V+WMW/9fkj1n8184fs/ivkz9m8V83f8zi/9r8MYv/evljFv/X5Y9Z/NfPH7P4b5A/ZvHfcPizzvdEDeq/N4v/Rp3/mMX/9fljFv+N88cs/pvkj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/03zxyz+m+WPWfw3zx+z+L89f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78gfs/hvkz9m8X9n/pjF/135Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/d/6Yxf89+WMW/x3zxyz+780fs/jvlD9m8X9f/pjF//35Yxb/D+SPWfx3zh+z+O+SP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv9d88cs/rvlj1n8d88fs/h/PH/M4v+J/DGL/x75Yxb/T+aPWfz3zB+z+H8qf8zi/+n8MYv/XvljFv+988cs/vvkj1n8P5M/ZvH/bP6Yxf9z+WMW/33zxyz+++WPWfw/nz9m8d8/f8zif0D+mMX/C/ljFv8D88cs/gflj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOL/zfwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bx/1b+mMX/2/ljFv+T88cs/qfkj1n8T80fs/iflj9m8f9O/pjF//T8MYv/GfljFv8z88cs/t/NH7P4fy9/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX//Pwxi/8F+WMW/5/mj1n8L8wfs/j/LH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b8yf8zif1X+mMX/1/ljFv/f5I9Z/K/OH7P4/zZ/zOJ/Tf6Yxf/a/DGL/3X5Yxb/3+WPWfyvzx+z+N+QP2bxvzF/zOL/+/wxi/8f8scs/n/MH7P435Q/ZvH/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/P+cP2bxvz1/zOJ/R/6Yxf8v+WMW/zvzxyz+f80fs/j/LX/M4v/3/DGL/z/yxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6YxX9K/pjF//78MYv/A/ljFv+p+WMS/1kH+WMW/6H8MYv/qPwxi/8s+WMW/1nzxyz+o/PHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/k/JH7P4z5c/ZvEfkz9m8Z8/f8ziPzZ/zOK/QP6YxX/B/DGL/1Pzxyz+T8sfs/g/PX/M4r9Q/pjF/xn5Yxb/hfPHLP7PzB+z+D8rf8ziv0j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/0Xzxyz+i+WPWfxfkD9m8V88f8ziv0T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/yfwxi/9L88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//L8scs/ivkj1n8V8wfs/ivlD9m8V85f8zi//L8MYv/KvljFv9V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/9q+WMW/9Xzxyz+a+SPWfwn5Y9Z/Cfnj1n818wfs/ivlT9m8X91/pjF/zX5Yxb/tfPHLP7r5I9Z/NfNH7P4vzZ/zOK/Xv6Yxf91g0vzhyz+63f+Yxb/DfLHLP4b5o9Z/DfKH7P4vz5/zOK/cf6YxX+T/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r9p/pjFf7P8MYv/5vljFv+3549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/x35Yxb/bfLHLP7vzB+z+L8rf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+784fs/i/J3/M4r9j/pjF/735Yxb/nfLHLP7vyx+z+L8/f8zi/4H8MYv/zvljFv9d8scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOK/a/6YxX+3/DGL/+75Yxb/j+ePWfw/kT9m8d8jf8zi/8n8MYv/nvljFv9P5Y9Z/D+dP2bx3yt/zOK/d/6YxX+f/DGL/2fyxyz+n80fs/h/Ln/M4r9v/pjFf7/8MYv/5/PHLP77549Z/A/IH7P4fyF/zOJ/YP6Yxf+g/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8v5k/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/t/KH7P4fzt/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP7fyR+z+J+eP2bxPyN/zOJ/Zv6Yxf+7+WMW/+/lj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n58/ZvG/IH/M4v/T/DGL/4X5Yxb/n+WPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5o9Z/K/KH7P4/zp/zOL/m/wxi//V+WMW/9/mj1n8r8kfs/hfmz9m8b8uf8zi/7v8MYv/9fljFv8b8scs/jfmj1n8f58/ZvH/Q/6Yxf+P+WMW/5vyxyz+f8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi/+f88cs/rfnj1n878gfs/j/JX/M4n9n/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/hPyR+z+N+fP2bxfyB/zOI/NX9M4j96kD9m8R/KH7P4j8ofs/jPkj9m8Z81f8ziPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v+U/DGL/3z5Yxb/MfljFv/588cs/mPzxyz+C+SPWfwXzB+z+D81f8zi/7T8MYv/0/PHLP4L5Y9Z/J+RP2bxXzh/zOL/zPwxi/+z8scs/ovkj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V80f8ziv1j+mMX/BfljFv/F88cs/kvkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8l8wfs/i/NH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/PH7P4r5I/ZvFfNX/M4v+K/DGL/yvzxyz+r8ofs/iPzx+z+E/IH7P4T8wfs/ivlj9m8V89f8ziv0b+mMV/Uv6YxX9y/pjFf838MYv/WvljFv9X549Z/F+TP2bxXzt/zOK/Tv6YxX/d/DGL/2vzxyz+6+WPWfxflz9m8V8/f8ziv0H+mMV/Q6P/rP98E4v/Rkb/fyGL/+vzxyz+G+ePWfw3yR+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+L8lf8zi/9b8MYv/2/LHLP6b5o9Z/DfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+78MYv/e/LHLP475o9Z/N+bP2bx3yl/zOL/vvwxi//788cs/h/IH7P475w/ZvHfJX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+u+aPWfx3yx+z+O+eP2bx/3j+mMX/E/ljFv898scs/p/MH7P475k/ZvH/VP6Yxf/T+WMW/73yxyz+e+ePWfz3yR+z+H8mf8zi/9n8MYv/5/LHLP775o9Z/PfLH7P4fz5/zOK/f/6Yxf+A/DGL/xfyxyz+B+aPWfwPyh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+t/DGL/7fzxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOL/nfwxi//p+WMW/zPyxyz+Z+aPWfy/mz9m8f9e/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zi/6f8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/OX/M4n97/pjF/478MYv/X/LHLP535o9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv/lPwxi//9+WMW/wfyxyz+U/PHJP6zDfLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/TOA/evpL+T86gf9ws43NH7P4L5A/ZvFfMH/M4v/U/DGL/9Pyxyz+T88fs/gvlD9m8X9G/pjFf+H8MYv/M/PHLP7Pyh+z+C+SP2bxf3b+mMX/OfljFv9x+WMW/+fmj1n8n5c/ZvF/fv6YxX/R/DGL/2L5Yxb/F+SPWfwXzx+z+C+RP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxXzJ/zOL/0vwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOL/svwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+L88f8ziv0r+mMV/1fwxi/8r8scs/q/MH3vy+U996OGM/q/KH3vy+fP5Pz5/zOI/IX/M4j8xf8ziv1r+mMV/9fwxi/8a+WMW/0n5Yxb/yfljFv8188cs/mvlj1n8X50/ZvF/Tf6YxX/t/DGL/zr5Yxb/dfPHLP6vzR+z+K+XP2bxf13+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfxfnz9m8d84f8ziv0n+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bx3zR/zOK/Wf6YxX/z/DGL/9vzxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOL/jvwxi/82+WMW/3fmj1n835U/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv93549Z/N+TP2bx3zF/zOL/3vwxi/9O+WMW//flj1n8358/ZvH/QP6YxX/n/DGL/y75Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8d81f8ziv1v+mMV/9/wxi//H88cs/p/IH7P475E/ZvH/ZP6YxX/P/DGL/6fyxyz+n84fs/jvlT9m8d87f8ziv0/+mMX/M/ljFv/P5o9Z/D+XP2bx3zd/zOK/X/6Yxf/z+WMW//3zxyz+B+SPWfy/kD9m8T8wf8zif1D+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/7EnrP8cj1s52VP7Yk9Z/pvP/6Pwxi/8x+WMW/2Pzxyz+38wfs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/2/lj1n8v50/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/v5I9Z/E/PH7P4n5E/ZvE/M3/M4v/d/DGL//fyxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z88fs/hfkD9m8f9p/pjF/8L8MYv/z/LHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8r88cs/lflj1n8f50/ZvH/Tf6Yxf/q/DGL/2/zxyz+1+SPWfyvzR+z+F+XP2bx/13+mMX/+vwxi/8N+WMW/xvzxyz+v88fs/j/IX/M4v/H/DGL/035Yxb/P+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/P+WMW/9vzxyz+d+SPWfz/kj9m8b8zf8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zif1f+mMX/7vyHm2XmFRb/e/LHLP735o9Z/O/LH7P4T8kfs/jfnz9m8X8gf8ziPzV/TOI/+yB/zOI/lD9m8R+VP2bxnyV/zOI/a/6YxX90/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMX/KfljFv/58scs/mPyxyz+8+ePWfzH5o9Z/BfIH7P4L5g/ZvF/av6Yxf9p+WMW/6fnj1n8F8ofs/g/I3/M4r9w/pjF/5n5Yxb/Z+WPWfwXyR+z+D87f8zi/5z8MYv/uPwxi/9z88cs/s/LH7P4Pz9/zOK/aP6YxX+x/DGL/wvyxyz+i+ePWfyXyB+z+L8wf8zi/6L8MYv/i/PHLP4vyR+z+C+ZP2bxf2n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf1n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfnj9m8V8lf8ziv2r+mMX/FfljFv9X5o9Z/F+VP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/5Pwxi/+a+WMW/7Xyxyz+r84fs/i/Jn/M4r92/pjFf538MYv/uvljFv/X5o9Z/NfLH7P4vy5/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP6vzx+z+G+cP2bx3yR/zOL/hvwxi/8b88cs/m/KH7P4vzl/zOL/lvwxi/9b88cs/m/LH7P4b5o/ZvHfLH/M4r95/pjF/+35Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/R/6YxX+b/B/RnCNLi/8788cs/u/KH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/u/PHLP7vyR+z+O+YP2bxf2/+mMV/p/wxi//78scs/u/PH7P4fyB/zOK/c/6YxX+X/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/jvmj9m8d8tf8ziv3v+mMX/4/ljFv9P5I9Z/PfIH7P4fzJ/zOK/Z/6Yxf9T+WMW/0/nj1n898ofs/jvnT9m8d8nf8zi/5n8MYv/Z/PHLP6fyx+z+O+bP2bx3y9/zOL/+fwxi//++WMW/wPyxyz+X8gfs/gfmD9m8T8of8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+ePWfwvyB+z+P80f8zif2H+mMX/Z/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+V+WMW/6vyxyz+v84fs/j/Jn/M4n91/pjF/7f5Yxb/a/LHLP7X5o9Z/K/LH7P4/y5/zOJ/ff6Yxf+G/DGL/435Yxb/3+ePWfz/kD9m8f9j/pjF/6b8MYv/n/LHLP43549Z/G/JH7P435o/ZvG/LX/M4v/n/DGL/+35Yxb/O/LHLP5/yR+z+N+ZP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP5T8scs/vfnj1n8H8gfs/hPzR+T+M8xyB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9K/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+aP2bxf1r+mMX/6fljFv+F8scs/s/IH7P4L5w/ZvF/Zv6Yxf9Z+WMW/0Xyxyz+z84fs/g/J3/M4j8uf8zi/9z8MYv/8/LHLP7Pzx+z+C+aP2bxXyx/zOL/gvwxi//i+WMW/yXyxyz+L8wfs/i/KH/M4v/i/DGL/0vyxyz+S+aPWfxfmj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxflj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/5fnj1n8V8kfs/ivmj9m8X9F/pjF/5X5Yxb/V+WPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/+r88cs/q/JH7P4r50/ZvFfJ3/M4r9u/pjF/7X5Yxb/9fLHLP6vyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/+vzxyz+G+ePWfw3yR+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+L8lf8zi/9b8MYv/2/LHLP6b5o9Z/DfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+78MYv/e/LHLP475o9Z/N+bP2bx3yl/zOL/vvwxi//788cs/h/IH7P475w/ZvHfJX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+u+aPWfx3yx+z+O+eP2bx/3j+mMX/E/ljFv898scs/p/MH7P475k/ZvH/VP6Yxf/T+WMW/73yxyz+e+ePWfz3yR+z+H8mf8zi/9n8MYv/5/LHLP775o9Z/PfLH7P4fz5/zOK/f/6Yxf+A/DGL/xfyxyz+B+aPWfwPyh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+t/DGL/7fzxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOL/nfwxi//p+WMW/zPyxyz+Z+aPWfy/mz9m8f9e/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zi/6f8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/OX/M4n97/pjF/478MYv/X/LHLP535o9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv/lPwxi//9+WMW/wfyxyz+U/PHJP5zDvLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/zOI/f/6YxX9s/pjFf4H8MYv/gvljFv+n5o9Z/J+WP2bxf3r+mMV/ofwxi/8z8scs/gvnj1n8n5k/ZvF/Vv6YxX+R/DGL/7Pzxyz+z8kfs/iPyx+z+D83f8zi/7z8MYv/8/PHLP6L5o9Z/BfLH7P4vyB/zOK/eP6YxX+J/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/5L5Yxb/l+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/l+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf/l+WMW/1Xyxyz+q+aPWfxfkT9m8X9l/pjF/1X5Yxb/8fljFv8J+WMW/4n5Yxb/1fLHLP6r549Z/NfIH7P4T8ofs/hPzh+z+K+ZP2bxXyt/zOL/6vwxi/9r8scs/mvnj1n818kfs/ivmz9m8X9t/pjFf738MYv/6/LHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v/6/DGL/8b5Yxb/TfLHLP5vyB+z+L8xf8zi/6b8MYv/m/PHLP5vyR+z+L81f8zi/7b8MYv/pvljFv/N8scs/pvnj1n8354/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv935I9Z/LfJH7P4vzN/zOL/rvwxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+L87f8zi/578MYv/jvljFv/35o9Z/HfKH7P4vy9/zOL//vwxi/8H8scs/jvnj1n8d8kfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/675Yxb/3fLHLP67549Z/D+eP2bx/0T+mMV/j/wxi/8n88cs/nvmj1n8P5U/ZvH/dP6YxX+v/DGL/975Yxb/ffLHLP6fyR+z+H82f8zi/7n8MYv/vvljFv/98scs/p/PH7P4758/ZvE/IH/M4v+F/DGL/4H5Yxb/g/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8f9m/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/h/K3/M4v/t/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4fyd/zOJ/ev6Yxf+M/DGL/5n5Yxb/7+aPWfy/lz9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9+/pjF/4L8MYv/T/PHLP4X5o9Z/H+WP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5k/ZvG/Kn/M4v/r/DGL/2/yxyz+V+ePWfx/mz/2SP/RT/Rw/vMew/+a/DHL+X9t/pjF/7r8MYv/7/LHLP7X549Z/G/IH7P435g/ZvH/ff6Yxf8P+WMW/z/mj1n8b8ofs/j/KX/M4n9z/pjF/5b8sUf4D+36pPW/NX/Mcv7flj9m8f9z/pjF//b8MYv/HfljFv+/5I9Z/O/MH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv8p+WMW//vzxyz+D+SPWfyn5o9J/Oca5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WNPfv85Hnop/0f35Pd/sLnmyR+z+M+bP2bxf0r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n5o/ZvF/Wv6Yxf/p+WMW/4Xyxyz+z8gfs/gvnD9m8X9m/pjF/1n5Yxb/RfLHLP7Pzh+z+D8nf8ziPy5/zOL/3Pwxi//z8scs/s/PH7P4L5o/ZvFfLH/M4v+C/DGL/+L5Yxb/JfLHLP4vzB+z+L8of8zi/+L8MYv/S/LHLP5L5o9Z/F+aP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/l+ePWfxXyR+z+K+aP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/6vzxyz+r8kfs/ivnT9m8V8nf8ziv27+mMX/tfljFv/18scs/q/LH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/6/PHLP4b549Z/DfJH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvmj1n8N8sfs/hvnj9m8X97/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835E/ZvHfJn/M4v/O/DGL/7vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/7vwxi/978scs/jvmj1n835s/ZvHfKX/M4v++/DGL//vzxyz+H8gfs/jvnD9m8d8lf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP675o9Z/HfLH7P4754/ZvH/eP6Yxf8T+WMW/z3yxyz+n8wfs/jvmT9m8f9U/pjF/9P5Yxb/vfLHLP57549Z/PfJH7P4fyZ/zOL/2fwxi//n8scs/vvmj1n898sfs/h/Pn/M4r9//pjF/4D8MYv/F/LHLP4H5o9Z/A/KH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/m/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/638MYv/t/PHLP4n549Z/E/JH7P4n5o/ZvE/7V/yn+X/3bj+S7P4f6fzH7P4n54/ZvE/I3/M4n9m/pjF/7v5Yxb/7+WPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/ifnz9m8b8gf8zi/9P8MYv/hfljFv+f5Y9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/lfmj1n8r8ofs/j/On/M4v+b/DGL/9X5Yxb/3+aPWfyvyR+z+F+bP2bxvy5/zOL/u/wxi//1+WMW/xvyxyz+N+aPWfx/nz9m8f9D/pjF/4/5Yxb/m/LHLP5/yh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/5/zxyz+t+ePWfzvyB+z+P8lf8zif2f+mMX/r/ljFv+/5Y9Z/P+eP2bx/0f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+E/JH7P4358/ZvF/IH/M4j81f0ziP/cgf8ziP5Q/ZvEflT9m8Z8lf8ziP2v+mMV/dP6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjF/yn5Yxb/+fLHLP5j8scs/vPnj1n8x+aPWfwXyB+z+C+YP2bxf2r+mMX/afljFv+n549Z/BfKH7P4PyN/zOK/cP6Yxf+Z+WMW/2flj1n8F8kfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv2j+mMV/sfwxi/8L/rn/bP9Px/VfmsV/8c5/zOK/RP6Yxf+F+WMW/xflj1n8X5w/ZvF/Sf6YxX/J/DGL/0vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/8vyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/8vwxi/8q+WMW/1Xzxyz+r8gfs/i/Mn/M4v+q/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1fPHLP5r5I9Z/Cflj1n8J+ePWfzXzB+z+K+VP2bxf3X+mMX/NfljFv+188cs/uvkj1n8180fs/i/Nn/M4r9e/pjF/3X5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/ff6YxX/j/DGL/yb5Yxb/N+SPWfzfmD9m8X9T/pjF/835Yxb/t+SPWfzfmj9m8X9b/tiT2n/8Q2vn3jR/7Ent//DauTfLH7P4b54/ZvF/e/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+RP2bx3yZ/zOL/zvwxi/+78scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+78MYv/e/LHLP475o9Z/N+bP2bx3yl/zOL/vvwxi//788cs/h/IH7P475w/ZvHfJX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+u+aPWfx3yx+z+O+eP2bx/3j+mMX/E/ljFv898scs/p/MH7P475k/ZvH/VP6Yxf/T+WMW/73yxyz+e+ePWfz3yR+z+H8mf8zi/9n8MYv/5/LHLP775o9Z/PfLH7P4fz5/zOK/f/6Yxf+A/DGL/xfyxyz+B+aPWfwPyh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/5v5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v+t/DGL/7fzxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOL/nfwxi//p+WMW/zPyxyz+Z+aPWfy/mz9m8f9e/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zi/6f8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/OX/M4n97/pjF/478MYv/X/LHLP535o9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv/lPwxi//9+WMW/wfyxyz+U/PHJP7zDPLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/zOI/f/6YxX9s/pjFf4H8MYv/gvljFv+n5o9Z/J+WP2bxf3r+mMV/ofwxi/8z8scs/gvnj1n8n5k/ZvF/Vv6YxX+R/DGL/7Pzxyz+z8kfs/iPyx+z+D83f8zi/7z8MYv/8/PHLP6L5o9Z/BfLH7P4vyB/zOK/eP6YxX+J/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/5L5Yxb/l+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/l+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf/l+WMW/1Xyxyz+q+aPWfxfkT9m8X9l/pjF/1X5Yxb/8fljFv8J+WMW/4n5Yxb/1fLHLP6r549Z/NfIH7P4T8ofs/hPzh+z+K+ZP2bxXyt/zOL/6vwxi/9r8scs/mvnj1n818kfs/ivmz9m8X9t/pjFf738MYv/6/LHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v/6/DGL/8b5Yxb/TfLHLP5vyB+z+L8xf8zi/6b8MYv/m/PHLP5vyR+z+L81f8zi/7b8MYv/pvljFv/N8scs/pvnj1n8354/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv935I9Z/LfJH7P4vzN/zOL/rvwxi/+2+WMW/+3yxyz+2+ePWfx3yB97yH+rE5/U/u/OH7Oc/+/JH7P475g/ZvF/b/6YxX+n/DGL//vyxyz+788fs/h/IH/M4r9z/pjFf5f8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+O+aP2bx3y1/zOK/e/6Yxf/j+WMW/0/kj1n898gfs/h/Mn/M4r9n/pjF/1P5Yxb/T+ePWfz3yh+z+O+dP2bx3yd/zOL/mfwxi/9n88cs/p/LH7P475s/ZvHfL3/M4v/5/DGL//75Yxb/A/LHLP5fyB+z+B+YP2bxPyh/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv9v5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/t/LHLP7fzh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/3fyxyz+p+ePWfzPyB+z+J+ZP2bx/27+mMX/e/ljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP7n549Z/C/IH7P4/zR/zOJ/Yf6Yxf9n+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/5X5Yxb/q/LHLP6/zh+z+P8mf8zif3X+mMX/t/ljFv9r8scs/tfmj1n8r8sfs/j/Ln/M4n99/pjF/4b8MYv/jfljFv/f549Z/P+QP2bx/2P+mMX/pvwxi/+f8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zi/+f8MYv/7fljFv878scs/n/JH7P435k/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/lPyxyz+9+ePWfwfyB+z+E/NH5P4zzvIH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf0r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n5o/ZvF/Wv6Yxf/p+WMW/4Xyxyz+z8gfs/gvnD9m8X9m/pjF/1n5Yxb/RfLHLP7Pzh+z+D8nf8ziPy5/zOL/3Pwxi//z8scs/s/PH7P4L5o/ZvFfLH/M4v+C/DGL/+L5Yxb/JfLHLP4vzB+z+L8of8zi/+L8MYv/S/LHLP5L5o9Z/F+aP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/l+ePWfxXyR+z+K+aP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/6vzxyz+r8kfs/ivnT9m8V8nf8ziv27+mMX/tfljFv/18scs/q/LH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/6/PHLP4b549Z/DfJH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvmj1n8N8sfs/hvnj9m8X97/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835E/ZvHfJn/M4v/O/DGL/7vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/7vwxi/978scs/jvmj1n835s/ZvHfKX/M4v++/DGL//vzxyz+H8gfs/jvnD9m8d8lf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP675o9Z/HfLH7P4754/ZvH/eP6Yxf8T+WMW/z3yxyz+n8wfs/jvmT9m8f9U/pjF/9P5Yxb/vfLHLP57549Z/PfJH7P4fyZ/zOL/2fwxi//n8scs/vvmj1n898sfs/h/Pn/M4r9//pjF/4D8MYv/F/LHLP4H5o9Z/A/KH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/m/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/638MYv/t/PHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4v+d/DGL/+n5Yxb/M/LHLP5n5o9Z/L+bP2bx/17+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/+fljFv8L8scs/j/NH7P4X5g/ZvH/Wf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9l/pjF/6r8MYv/r/PHLP6/yR+z+F+dP2bx/23+mMX/mvwxi/+1+WMW/+vyxyz+v8sfs/hfnz9m8b8hf8zif2P+mMX/9/ljFv8/5I9Z/P+YP2bxvyl/zOL/p/wxi//N+WMW/1vyxyz+t+aPWfxvyx+z+P85f8zif3v+mMX/jvwxi/9f8scs/nfmj1n8/5o/ZvH/W/6Yxf/v+WMW/3/kj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi/+U/DGL//35Yxb/B/LHLP5T88ck/k8Z5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8lf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/NH7P4Py1/zOL/9Pwxi/9C+WMW/2fkj1n8F84fs/g/M3/M4v+s/DGL/yL5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n549Z/BfNH7P4L5Y/ZvF/Qf6YxX/x/DGL/xL5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/JfPHLP4vzR+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4vyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/8vzxyz+q+SPWfxXzR+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FcX+c/xb2xr8V9D5P/vZPGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf/V+WMW/9fkj1n8184fs/ivkz9m8V83f8zi/9r8MYv/evljFv/X5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF//X5Yxb/jfPHLP6b5I9Z/N/wmP5z/v8zrv/SLP5v7PzHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+aP2bx3yx/zOK/ef6Yxf/t+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bxf0f+mMV/m/wxi/8788cs/u/KH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/u/PHLP7vyR+z+O+YP2bxf2/+mMV/p/wxi//78scs/u/PH7P4fyB/zOK/c/6YxX+X/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/jvmj9m8d8tf8ziv3v+mMX/4/ljFv9P5I9Z/PfIH7P4fzJ/zOK/Z/6Yxf9T+WMW/0/nj1n898ofs/jvnT9m8d8nf8zi/5n8MYv/Z/PHLP6fyx+z+O+bP2bx3y9/zOL/+fwxi//++WMW/wPyxyz+X8gfs/gfmD9m8T8of8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+ePWfwvyB+z+P80f8zif2H+mMX/Z/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+V+WMW/6vyxyz+v84fs/j/Jn/M4n91/pjF/7f5Yxb/a/LHLP7X5o9Z/K/LH7P4/y5/zOJ/ff6Yxf+G/DGL/435Yxb/3+ePWfz/kD9m8f9j/pjF/6b8MYv/n/LHLP43549Z/G/JH7P435o/ZvG/LX/M4v/n/DGL/+35Yxb/O/LHLP5/yR+z+N+ZP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP5T8scs/vfnj1n8H8gfs/hPzR+T+M83yB+z+A/lj1n8R+WPWfxnyR+z+M+a/yOaZWRp8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Sv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfmj9m8X9a/pjF/+n5Yxb/hfLHLP7PyB+z+C+cP2bxf2b+mMX/WfljFv9F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvmj9m8V8sf8zi/4L8MYv/4vljFv8l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvmj1n8X5o/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5Y/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv+X549Z/FfJH7P4r5o/ZvF/Rf6Yxf+V+WMW/1flj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/q/PHLP6vyR+z+K+dP2bxXyd/zOK/bv6Yxf+1+WMW//Xyxyz+r8sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//r88cs/hvnj1n8N8kfs/i/IX/M4v/G/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+m+aPWfw3yx+z+G+eP2bxf3v+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzfkT9m8d8mf8zi/878MYv/u/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/u/DGL/3vyxyz+O+aPWfzfmz9m8d8pf8zi/778MYv/+/PHLP4fyB+z+O+c///HPj1zAWIoQBh9NvYZsW3btm3bWMe2bdu2bdu2nZx0KeYX7NzbTf2diVr6D9Q/auk/SP+opf9g/aOW/kP0j1r6D9U/auk/TP+opf9w/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176Ry3999Y/aum/j/5RS/999Y9a+u+nf9TSf3/9o5b+B+gftfQ/UP+opf9B+kct/Q/WP2rpf4j+UUv/Q/WPWvofpn/U0v9w/aOW/kfoH7X0P1L/qKX/UfpHLf2P1j9q6X+M/lFL/2P1j1r6H6d/1NL/eP2jlv4n6B+19D9R/6il/0n6Ry39T9Y/aul/iv5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/hfoH7X0v1D/qKX/RfpHLf0v1j9q6X+J/lFL/0v1j1r6X6Z/1NL/cv2jlv5X6B+19L9S/6il/1X6Ry39r9Y/aul/jf5RS/9r9Y9a+l+nf9TS/3r9o5b+N+gftfS/Uf+opf9N+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v92/aOW/nfoH7X0v1P/qKX/XfpHLf3v1j9q6X+P/lFL/3v1j1r636d/1NL/fv2jlv4P6B+19H9Q/6il/0P6Ry39H9Y/aun/iP5RS/9H9Y9a+j+mf9TS/3H9o5b+T+gftfR/Uv+opf9T+kct/Z/WP2rp/4z+UUv/Z/WPWvo/p3/U0v95/aOW/i/oH7X0f1H/qKX/S/pHLf1f1j9q6f+K/lFL/1f1j1r6v6Z/1NL/df2jlv5v6B+19H9T/6il/1v6Ry3939Y/aun/jv5RS/939Y9+0v/HOcL2f0//qOX/7+sftfT/QP+opf+H+kct/T/SP2rp/7H+UUv/T/SPWvp/qn/U0v8z/aOW/p/rH7X0/0L/qKX/l/pHLf2/0j9q6f+1/lFL/2/0j1r6f6t/1NL/O/2jlv7f6x+V9B/wM/2jlv4/1z9q6f8L/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv6/1T9q6f87/aOW/r/XP2rp/wf9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/n/VP2rpP0D/qKX/3/SPWvr/Xf+opf8/9I9a+v9T/6il/7/0j1r6/1v/qKX/f/SPWvr/V/+opf//9I9a+v9f/6il/0j6Ry39R9Y/auk/iv5RS/9R9Y9a+o+mf9TSf3T9o5b+Y+gftfQfU/+opf9Y+kct/cfWP2rpP47+UUv/cfWPWvqPp3/U0n98/aOW/hPoH7X0n1D/qKX/RPpHLf0n1j9q6T+J/lFL/0n1j1r6T6Z/1NJ/cv2jlv5T6B+19J9S/6il/1T6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TSf3r9o5b+M+gftfSfUf+opf9M+kct/WfWP2rpP4v+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf3n1j9q6T+P/lFL/3n1j1r6z6d/1NJ/fv2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aum/iP5RS/9F9Y9a+i+mf9TSf3H9o5b+S+gftfRfUv+opf9S+kct/ZfWP2rpv4z+UUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0X1H/qKX/SvpHLf1X1j9q6b+K/lFL/1X1j1r6r6Z/1NJ/df2jlv5r6B+19F9T/6il/1r6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TSf339o5b+G+gftfTfUP+opf9G+kct/TfWP2rpv4n+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv4D9Y9a+g/SP2rpP1j/qKX/EP2jlv5D9Y9a+g/TP2rpP1z/aITrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzA3t3G1lkWfhy/u61j7M8/GXHBZWiyyYVCIsx2DxkvCJuMbXXQjecxwLGHbmys2+w67Aq4hxeTCOFBkkmWKFG2DCXMhEZiIFhBRIMuaqLBB0AUomicCEG3xMWa056W9tieeK56XYvy+bzoOffd/u5tTb677wYIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+9mprnHx1bN+TU2MEHHzzS0vs669jymw/+tvvC/tfyp5cMc8kxgw96enp6Zj03c2f58JSiKEq/2q7y8YTKcen6uxq/0NF3FOZ1v7ToxKSfNx89uPr0Rxq6jt1f33u2vrhp3YZNLR8bUxTh4vqio3TQUFcUYWF9cV/poLF0sKi+eKR0MLP34NTi26WD89ds2bS2dGJx9PcM/lc0Ne8qxg4pthjyt8Hg/nc1fuvO/tcql+y/2rii3P8Vnd9/q+Jz/Ubov//6YX5l/zX/AYER1db/C/P6X6tc8l/u/xOfWvHKcJ8buf/+64eP6x/SGeb5f0ijlc/9Fc//04a55MD+qrrOE6X+L73t2enlU+P+nef/d68fLq7sf8yQ5//Sc/yC/uf/U4oiXDLKbwe8pzQ17z5a7f5fvf9xUys2dYP7P6Nty4FS/48v+t4T5VP1Nfa/oMr9f8ziit8rUJum5i/3VNz/a+i/+Mgwlxzo/+0nfv1wqf/Hfv/AmYM+V0v/l1T2P6O9deuMbTs6z9vQump9y/qWzQ0z586a09gw54LZM3ofCfo+jvK7Au8No7v/FxMrNnVF0TKwv6br4NOl/mc/+OCs8qkJNfa/sOr9f5r7PwzrQ2OK8eOLjlXt7W0NfR/7Dxv7PvZ92TD91/Dz/1nnlL+svvxaVxRTBvZ3nXn3slL/7xx+dk/51Pga+19Utf95A78uEGGU9/+1FZsh/R86/FLv8/+Sew+dUT5V68//i6v2/6r7P4xGU3PFv/DzH1bqf3dxWWSnock//4N0cvT/2Ds3dMetwyf0D+nk6P93nzt2btw6LNE/pJOj/3EbH3g+bh0u1T+kk6P/pZPnLotbh8v0D+nk6H/Nq+f+OW4dmvUP6eTo/5wv7emIW4el+od0cvT/UNus7XHrsEz/kE6O/n962kOvxa3D5fqHdHL0f/z4PTfGrcMV+od0cvTftffsH8Stw5X6h3Ry9H/5uvkhbh2u0j+kk6P/qVP++HjcOlytf0gnR/9z/vT30+LW4Rr9Qzo5+r/j88v2x63DtfqHdHL0P/b6V16MW4fl+od0cvS/+Ozt8+PW4Tr9Qzo5+l/7k7U9ceuwQv+QTo7+Z3z9Rxvi1uF6/UM6Ofo/svTRvSN/xc4q63CD/iGdHP3vbSgmxa3DjfqHdHL0/7Xvnn44bh0+qX9IJ0f/v3nqyblx67BS/5BOjv6f+8Dt34hbh5v0D+nk6P/e1S+eFbcOq/QP6eTo/+F9z38xbh1W6x/SydH/G2+0/l/cOqzRP6STo/+JE059PW4d1uof0snR//xbv9IWtw4t+od0cvTfuqfrh3HrsE7/kE6O/j98YsqKuHVYr39IJ0f/y2fve3/cOtysf0gnR//vW3Lh7rh12KB/SCdH/xd1f/SiuHXYqH9IJ0f/7c989qtx63CL/iGdHP3vm/7awrh12KR/SCdH/y+vXPzjuHVo1T+kk6P/tx69bnPcOmzWP6STo/8nf/b28bh12KJ/SCdH//9/wYK/xq3DVv1DOjn6X7jozTVx6/Ap/UM6Ofrf2PWPl+PWoU3/kE6O/qcfuXpJ3Dps0z+kk6P/75zXcCBuHdr1D+nk6P/OK/c3xq3Ddv1DOjn6P3Dorrvj1uFW/UM6Ofp/8xfTpsatw6f1D+nk6P/+SYevjVuHDv1DOjn6/+Xm+mfi1mGH/iGdHP3/bf/kav+T3ypCp/4hnRz9P/169x/i1uE2/UM6OfpfOe5X4+PW4Xb9Qzo5+p/cufW+uHW4Q/+QTo7+596z6vy4dfiM/iGdHP1v+8sL34xbh536h3S27ei8ZdWmTS1t3njjjTcDb07230xAau9Gf7J/JwAAAAAAAAAAAAAAwEhy/OdEJ/vPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rIHo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AoAAP//Yjnm1A==") r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c3) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x1000000000000000) 9.229929693s ago: executing program 0 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e25, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x8, 0x0, r2, 0x0}]) 8.484653619s ago: executing program 1 (id=1394): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet(r1, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="ad63", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002200)="1039c5c6413e67a9a4154a09e5961b001b6d116a9f4540ee1bfe036148cb6d8ecc7c0071560bc9471f8330e2eb78e653bde79cd8da639b29c2d89bc19d0eb570b0fc277f1196e0928034fa4f16ec94844c5d7c7263e004eee443285e3b6d93cd2bd557cd6f0c296cf1d7c406f328f305404444b3132b0b99f4c71b77296eec51a958dc985b99ac0938d660ef3ec20fe88d5053c260ede20b9dd065", 0x9b}, {0x0}], 0x2}}], 0x2, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0)=0x7, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 8.45909706s ago: executing program 4 (id=1395): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x50004) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x9, 0x8d], 0x100000, 0x240046}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x5, r0, 'id1\x00'}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.348800485s ago: executing program 1 (id=1396): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './sys/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}, {@access_client}, {@loose}, {@version_L}], [], 0x6b}}) 7.908517267s ago: executing program 0 (id=1397): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x7, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x7, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) 7.607039521s ago: executing program 3 (id=1398): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create1(0x80000) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a', @ANYRESDEC], 0x0) 7.367535343s ago: executing program 1 (id=1399): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 7.186606721s ago: executing program 0 (id=1400): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x80000}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x168) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$sndpcmc(0x0, 0x9, 0x2000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 6.730848574s ago: executing program 3 (id=1401): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 6.331218323s ago: executing program 0 (id=1402): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000390400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0dfdffff03010200600012800b00010062726964676500005000028008001b00d7ab000008001b00080000000c002300010000000100000008001c00b00000000c002e00000000000000000006000600830000"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_delrule={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x2}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044004}, 0x20044884) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 5.15038065s ago: executing program 1 (id=1403): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) 4.072494903s ago: executing program 1 (id=1404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) 2.244349111s ago: executing program 3 (id=1405): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2815\x00', [0x294, 0x8, 0x1, 0x6, 0x2f, 0x2006, 0xf5, 0xe, 0x80ffa, 0x2, 0x0, 0x10000007, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x1, 0x7ffd]}) 1.362278544s ago: executing program 3 (id=1406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xd, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)='z', 0x14}], 0x1}, 0x4011) 1.250738269s ago: executing program 0 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.250226869s ago: executing program 1 (id=1408): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x193, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='none\x00', 0x13d) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/Loopback.0\x00') 980.495832ms ago: executing program 4 (id=1409): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x8, 0x3, {{0x5, 0x4, 0x1, 0x14, 0x14, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 898.052037ms ago: executing program 0 (id=1410): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 0s ago: executing program 4 (id=1411): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@nodioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@noinit_itable}, {@journal_checksum}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80014) kernel console output (not intermixed with test programs): ve_0) entered forwarding state [ 190.034633][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.041860][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.058699][ T51] Bluetooth: hci2: command tx timeout [ 190.066267][ T51] Bluetooth: hci3: command tx timeout [ 190.274732][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.350742][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.376486][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.383699][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.419617][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.426838][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.451610][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 190.703123][ T8191] loop6: detected capacity change from 0 to 512 [ 190.771111][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.924478][ T8194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.627'. [ 191.121335][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.329262][ T51] Bluetooth: hci0: hcon ffff888030894000 sent 1 < count 1025 [ 191.336731][ T51] Bluetooth: hci0: hcon ffff8880305be000 sent 0 < count 21178 [ 191.515896][ T8069] veth0_vlan: entered promiscuous mode [ 191.565405][ T8069] veth1_vlan: entered promiscuous mode [ 191.760903][ T8069] veth0_macvtap: entered promiscuous mode [ 191.785813][ T8069] veth1_macvtap: entered promiscuous mode [ 191.859617][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.871352][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.887278][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.927007][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.946988][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.974471][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.984830][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.007801][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.020748][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.053109][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.087164][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.109406][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.121680][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.131933][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.142702][ T51] Bluetooth: hci2: command tx timeout [ 192.147712][ T51] Bluetooth: hci3: command tx timeout [ 192.149536][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.169999][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.180889][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.195975][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.250588][ T8069] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.260077][ T8069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.270023][ T8069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.278912][ T8069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.371052][ T8116] veth0_vlan: entered promiscuous mode [ 192.441678][ T8116] veth1_vlan: entered promiscuous mode [ 192.565680][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.596453][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.686224][ T8116] veth0_macvtap: entered promiscuous mode [ 192.727866][ T8116] veth1_macvtap: entered promiscuous mode [ 192.746746][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.766770][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.777206][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.811912][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.847607][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.866996][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.898325][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.916973][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.942345][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.962968][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.972963][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.989736][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.009068][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.055169][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.082749][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.102994][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.115798][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.126222][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.145159][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.164114][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.179019][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.189246][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.199815][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.212347][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.229196][ T8261] netlink: 140 bytes leftover after parsing attributes in process `syz.0.637'. [ 193.250086][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.637'. [ 193.292270][ T8116] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.317035][ T8116] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.336077][ T8116] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.359243][ T8116] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.748554][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.756439][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.885153][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.921964][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.051072][ T8242] IPVS: starting estimator thread 0... [ 194.267387][ T8288] IPVS: using max 17 ests per chain, 40800 per kthread [ 194.315373][ T51] Bluetooth: hci3: command tx timeout [ 194.663778][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687466][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.101095][ T28] audit: type=1800 audit(1789192074.957:16): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.646" name="syzkaller0" dev="sda1" ino=2054 res=0 errno=0 [ 195.133034][ T8303] netlink: 'syz.8.647': attribute type 1 has an invalid length. [ 195.164381][ T8303] netlink: 'syz.8.647': attribute type 2 has an invalid length. [ 195.164960][ T8305] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 195.251660][ T8305] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.273445][ T8305] bond0: (slave team0): Enslaving as an active interface with an up link [ 195.284395][ T8303] tipc: Started in network mode [ 195.290239][ T8303] tipc: Node identity ac14140f, cluster identity 4711 [ 195.297552][ T8303] tipc: New replicast peer: 255.255.255.255 [ 195.304345][ T8303] tipc: Enabled bearer , priority 10 [ 195.357906][ T8310] netlink: 132 bytes leftover after parsing attributes in process `syz.6.649'. [ 195.750608][ T8323] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.651'. [ 196.188893][ T8339] jffs2: notice: (8339) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 196.417052][ T5766] tipc: Node number set to 2886997007 [ 196.557587][ T970] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 196.794620][ T970] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.804650][ T970] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 196.814484][ T970] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 196.824923][ T970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.856421][ T970] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 196.856431][ T8361] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.944199][ T970] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 197.327833][ T8345] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 197.353352][ T8345] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 197.372838][ T8345] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 197.883659][ T8345] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 198.327495][ T5814] usb 9-1: USB disconnect, device number 2 [ 198.365531][ T5814] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 198.404539][ T5814] spcp8x5 9-1:1.0: device disconnected [ 198.493263][ T28] audit: type=1800 audit(1789192078.357:17): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.669" name=8006 dev="sda1" ino=2055 res=0 errno=0 [ 198.519302][ T8389] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 199.052407][ T8406] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 199.482156][ T3532] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 199.574178][ T28] audit: type=1800 audit(1789192079.437:18): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.677" name="syzkaller0" dev="sda1" ino=2054 res=0 errno=0 [ 199.938013][ T8432] overlayfs: failed to clone upperpath [ 200.332338][ T8446] syzkaller1: entered promiscuous mode [ 200.347050][ T8446] syzkaller1: entered allmulticast mode [ 200.778048][ T8464] syzkaller0: entered promiscuous mode [ 200.783590][ T8464] syzkaller0: entered allmulticast mode [ 200.835441][ T8464] tipc: Started in network mode [ 200.847289][ T8464] tipc: Node identity c65ed9f1b63f, cluster identity 4711 [ 200.854766][ T8464] tipc: Enabled bearer , priority 0 [ 200.906814][ T8462] tipc: Resetting bearer [ 200.974440][ T8462] tipc: Disabling bearer [ 201.567058][ T5766] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 201.657593][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 201.787251][ T5766] usb 7-1: Using ep0 maxpacket: 32 [ 201.816741][ T5766] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 201.862906][ T5766] usb 7-1: config 0 has no interface number 0 [ 201.911922][ T5766] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 201.962047][ T5766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.017869][ T5766] usb 7-1: Product: syz [ 202.033904][ T5766] usb 7-1: Manufacturer: syz [ 202.069991][ T5766] usb 7-1: SerialNumber: syz [ 202.158338][ T5766] usb 7-1: config 0 descriptor?? [ 202.195000][ T5766] smsc95xx v2.0.0 [ 202.390621][ T8499] netlink: 'syz.7.696': attribute type 13 has an invalid length. [ 202.648972][ T5766] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 202.703543][ T5766] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 203.004171][ T5766] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 203.029723][ T5766] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 203.067925][ T5766] usb 7-1: USB disconnect, device number 2 [ 204.077030][ T5863] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 204.205288][ T8558] lo: Caught tx_queue_len zero misconfig [ 204.212192][ T8558] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 204.285797][ T5863] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.307030][ T5863] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 204.321158][ T5863] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 204.337142][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.366820][ T5863] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 204.375998][ T5863] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 204.771965][ T8542] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 204.797072][ T8542] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 204.822934][ T8542] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 204.988818][ T8542] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 204.997279][ T5766] usb 7-1: USB disconnect, device number 3 [ 205.022533][ T5766] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 205.075191][ T5766] spcp8x5 7-1:1.0: device disconnected [ 205.262164][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.7.711'. [ 205.292273][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.7.711'. [ 205.328381][ T8584] overlayfs: failed to clone upperpath [ 205.789383][ T8600] loop6: detected capacity change from 0 to 1024 [ 205.826443][ T8597] loop7: detected capacity change from 0 to 2048 [ 205.912414][ T8597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.952539][ T8600] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 205.962304][ T8600] hfsplus: xattr search failed [ 205.994020][ T8605] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 206.043734][ T8605] hfsplus: xattr searching failed [ 206.098278][ T3532] hfsplus: b-tree write err: -5, ino 25 [ 206.104006][ T3532] hfsplus: b-tree write err: -5, ino 4 [ 206.124207][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.127439][ T3532] hfsplus: b-tree write err: -5, ino 2 [ 206.175543][ T3532] hfsplus: b-tree write err: -5, ino 28 [ 206.187041][ T3532] hfsplus: b-tree write err: -5, ino 29 [ 206.891089][ T8627] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 206.911976][ T8627] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 206.927830][ T8627] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 206.938923][ T8636] netlink: 'syz.0.725': attribute type 2 has an invalid length. [ 206.957077][ T8627] kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 206.962170][ T8630] binder: 8629:8630 unknown command 0 [ 206.970852][ T8636] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.725'. [ 206.980198][ T8630] binder: 8629:8630 ioctl c0306201 2000000004c0 returned -22 [ 206.987915][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 207.781871][ T8660] binder: 8659:8660 ioctl c0306201 200000000080 returned -14 [ 207.821283][ T8660] binder: 8659:8660 ioctl c0306201 2000000003c0 returned -14 [ 207.868102][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.878340][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.765461][ T8679] loop7: detected capacity change from 0 to 512 [ 211.835772][ T8679] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 211.892794][ T8679] EXT4-fs error (device loop7): ext4_init_orphan_info:621: comm syz.7.740: orphan file block 0: bad magic [ 211.914278][ T8679] EXT4-fs (loop7): Remounting filesystem read-only [ 211.927460][ T8679] EXT4-fs (loop7): mount failed [ 212.165667][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.241922][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.275456][ T8686] kvm: pic: non byte write [ 213.696579][ T8701] FAULT_INJECTION: forcing a failure. [ 213.696579][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 213.710203][ T8701] CPU: 1 PID: 8701 Comm: syz.8.746 Not tainted syzkaller #0 [ 213.717538][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.727604][ T8701] Call Trace: [ 213.730902][ T8701] [ 213.733847][ T8701] dump_stack_lvl+0x18c/0x250 [ 213.738520][ T8701] ? show_regs_print_info+0x20/0x20 [ 213.743711][ T8701] ? load_image+0x420/0x420 [ 213.748207][ T8701] ? __might_sleep+0xe0/0xe0 [ 213.752812][ T8701] ? __lock_acquire+0x7d80/0x7d80 [ 213.757831][ T8701] should_fail_ex+0x394/0x4c0 [ 213.762516][ T8701] should_failslab+0x9/0x20 [ 213.767022][ T8701] slab_pre_alloc_hook+0x59/0x300 [ 213.772077][ T8701] ? __io_uring_add_tctx_node+0x145/0x500 [ 213.777823][ T8701] __kmem_cache_alloc_node+0x53/0x250 [ 213.783193][ T8701] ? xa_load+0x2b7/0x2e0 [ 213.787428][ T8701] ? __io_uring_add_tctx_node+0x145/0x500 [ 213.793141][ T8701] kmalloc_trace+0x2a/0xe0 [ 213.797552][ T8701] __io_uring_add_tctx_node+0x145/0x500 [ 213.803092][ T8701] ? __io_uring_free+0x200/0x200 [ 213.808020][ T8701] ? __might_fault+0xaa/0x120 [ 213.812688][ T8701] ? __anon_inode_getfile+0x16c/0x200 [ 213.818076][ T8701] io_uring_create+0xc03/0x1330 [ 213.822963][ T8701] __se_sys_io_uring_setup+0x29f/0x2b0 [ 213.828441][ T8701] ? __x64_sys_io_uring_setup+0x60/0x60 [ 213.833989][ T8701] ? lockdep_hardirqs_on+0x98/0x150 [ 213.839210][ T8701] do_syscall_64+0x55/0xb0 [ 213.843628][ T8701] ? clear_bhb_loop+0x40/0x90 [ 213.848297][ T8701] ? clear_bhb_loop+0x40/0x90 [ 213.852981][ T8701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.858898][ T8701] RIP: 0033:0x7f88ba39e159 [ 213.863317][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.882922][ T8701] RSP: 002b:00007f88bb201fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 213.891333][ T8701] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f88ba39e159 [ 213.899296][ T8701] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000020 [ 213.907258][ T8701] RBP: 00007f88ba43503b R08: 0000000000000000 R09: 0000000000000000 [ 213.915224][ T8701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.923197][ T8701] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffb269cca8 [ 213.931215][ T8701] [ 213.944585][ T8644] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.964992][ T8644] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.993166][ T8644] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.011882][ T8644] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.505021][ T8718] loop8: detected capacity change from 0 to 1024 [ 214.532506][ T8718] EXT4-fs: Ignoring removed bh option [ 214.542900][ T8718] EXT4-fs: Ignoring removed bh option [ 214.620639][ T8718] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.688333][ T8718] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.965073][ T8116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.017558][ T6326] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 215.209680][ T6326] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 215.244288][ T6326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.268210][ T6326] usb 8-1: Product: syz [ 215.272426][ T6326] usb 8-1: Manufacturer: syz [ 215.285678][ T6326] usb 8-1: SerialNumber: syz [ 215.299950][ T6326] usb 8-1: config 0 descriptor?? [ 215.313290][ T6326] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 216.342102][ T8778] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 216.351048][ T8778] netlink: 'syz.0.766': attribute type 2 has an invalid length. [ 216.365616][ T8778] tipc: Enabling of bearer rejected, already enabled [ 216.611611][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 216.620820][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 216.638108][ T8787] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.647022][ T8787] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.655245][ T8787] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.663513][ T8787] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.671861][ T8787] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.680395][ T8787] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.689645][ T8787] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.698170][ T8787] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.706380][ T8787] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.714688][ T8787] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.723233][ T8787] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.731758][ T8787] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.774861][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 216.805645][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 217.337849][ T6326] gspca_stk1135: reg_w 0x203 err -71 [ 217.344257][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.378385][ T6326] gspca_stk1135: Sensor write failed [ 217.383759][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.400978][ T6326] gspca_stk1135: Sensor write failed [ 217.406653][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.432682][ T6326] gspca_stk1135: Sensor read failed [ 217.452321][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.469606][ T6326] gspca_stk1135: Sensor read failed [ 217.474862][ T6326] gspca_stk1135: Detected sensor type unknown (0x0) [ 217.517712][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.524111][ T6326] gspca_stk1135: Sensor read failed [ 217.576119][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.601629][ T6326] gspca_stk1135: Sensor read failed [ 217.619005][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.631072][ T6326] gspca_stk1135: Sensor write failed [ 217.636502][ T6326] gspca_stk1135: serial bus timeout: status=0x00 [ 217.678111][ T6326] gspca_stk1135: Sensor write failed [ 217.683550][ T6326] stk1135: probe of 8-1:0.0 failed with error -71 [ 217.729236][ T6326] usb 8-1: USB disconnect, device number 2 [ 217.935604][ T8821] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 217.967109][ T8821] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 218.025708][ T8821] tipc: Enabling of bearer rejected, already enabled [ 218.427322][ T8242] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 218.617029][ T8242] usb 9-1: Using ep0 maxpacket: 32 [ 218.689974][ T8242] usb 9-1: unable to get BOS descriptor or descriptor too short [ 218.708441][ T8242] usb 9-1: no configurations [ 218.714889][ T8242] usb 9-1: can't read configurations, error -22 [ 219.436054][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026261000: rx timeout, send abort [ 219.936196][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f11bc00: rx timeout, send abort [ 219.944726][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026261000: abort rx timeout. Force session deactivation [ 220.040772][ T8873] tipc: Enabling of bearer rejected, already enabled [ 220.444546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f11bc00: abort rx timeout. Force session deactivation [ 220.798586][ T2923] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 221.126978][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 221.341420][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 221.365311][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.376438][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.389643][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.417466][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.445949][ T9] usb 8-1: Product: syz [ 221.454388][ T9] usb 8-1: Manufacturer: syz [ 221.468407][ T9] usb 8-1: SerialNumber: syz [ 221.700999][ T9] usb 8-1: 0:2 : does not exist [ 221.761146][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 221.841594][ T9] usb 8-1: USB disconnect, device number 3 [ 221.943595][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.481038][ T8923] syzkaller0: entered promiscuous mode [ 222.486569][ T8923] syzkaller0: entered allmulticast mode [ 222.778042][ T8931] FAULT_INJECTION: forcing a failure. [ 222.778042][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 222.815645][ T8931] CPU: 0 PID: 8931 Comm: syz.7.798 Not tainted syzkaller #0 [ 222.823003][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.833056][ T8931] Call Trace: [ 222.836331][ T8931] [ 222.839264][ T8931] dump_stack_lvl+0x18c/0x250 [ 222.843942][ T8931] ? show_regs_print_info+0x20/0x20 [ 222.849163][ T8931] ? load_image+0x420/0x420 [ 222.853656][ T8931] ? __might_sleep+0xe0/0xe0 [ 222.858259][ T8931] ? __lock_acquire+0x7d80/0x7d80 [ 222.863278][ T8931] should_fail_ex+0x394/0x4c0 [ 222.867953][ T8931] should_failslab+0x9/0x20 [ 222.872451][ T8931] slab_pre_alloc_hook+0x59/0x300 [ 222.877493][ T8931] ? blk_mq_alloc_tag_set+0x4e4/0x1020 [ 222.882938][ T8931] ? blk_mq_alloc_tag_set+0x4e4/0x1020 [ 222.888386][ T8931] __kmem_cache_alloc_node+0x53/0x250 [ 222.893757][ T8931] ? blk_mq_alloc_tag_set+0x4e4/0x1020 [ 222.899212][ T8931] __kmalloc_node+0xa6/0x240 [ 222.903794][ T8931] ? mutex_unlock+0x10/0x10 [ 222.908291][ T8931] blk_mq_alloc_tag_set+0x4e4/0x1020 [ 222.913569][ T8931] loop_add+0x2eb/0x990 [ 222.917718][ T8931] loop_control_ioctl+0x128/0x590 [ 222.922735][ T8931] ? loop_set_hw_queue_depth+0x110/0x110 [ 222.928365][ T8931] ? bpf_lsm_file_ioctl+0x9/0x10 [ 222.933296][ T8931] ? security_file_ioctl+0x80/0xa0 [ 222.938407][ T8931] ? loop_set_hw_queue_depth+0x110/0x110 [ 222.944026][ T8931] __se_sys_ioctl+0xfd/0x170 [ 222.948608][ T8931] do_syscall_64+0x55/0xb0 [ 222.953038][ T8931] ? clear_bhb_loop+0x40/0x90 [ 222.957706][ T8931] ? clear_bhb_loop+0x40/0x90 [ 222.962370][ T8931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.968252][ T8931] RIP: 0033:0x7f33f079e159 [ 222.972665][ T8931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.992266][ T8931] RSP: 002b:00007f33f16d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.000678][ T8931] RAX: ffffffffffffffda RBX: 00007f33f0a25fa0 RCX: 00007f33f079e159 [ 223.008664][ T8931] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 223.016622][ T8931] RBP: 00007f33f083503b R08: 0000000000000000 R09: 0000000000000000 [ 223.024585][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.032559][ T8931] R13: 00007f33f0a26038 R14: 00007f33f0a25fa0 R15: 00007ffe52d23208 [ 223.040551][ T8931] [ 225.140237][ T8971] kvm: pic: single mode not supported [ 225.140260][ T8971] kvm: pic: level sensitive irq not supported [ 225.158018][ T8971] kvm: pic: single mode not supported [ 225.164630][ T8971] kvm: pic: single mode not supported [ 225.170130][ T8971] kvm: pic: level sensitive irq not supported [ 225.227352][ T8971] kvm: pic: single mode not supported [ 225.234295][ T8971] kvm: pic: level sensitive irq not supported [ 225.256462][ T8971] kvm: pic: single mode not supported [ 225.262935][ T8971] kvm: pic: level sensitive irq not supported [ 225.670476][ T8983] loop6: detected capacity change from 0 to 128 [ 225.744308][ T8983] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.784029][ T8983] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.942654][ T8983] EXT4-fs (loop6): shut down requested (2) [ 225.963647][ T8983] syz.6.809 (pid 8983) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 226.047969][ T7744] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.255347][ T8992] loop6: detected capacity change from 0 to 512 [ 226.274013][ T8992] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.308200][ T8992] EXT4-fs error (device loop6): ext4_iget_extra_inode:4740: inode #15: comm syz.6.810: corrupted in-inode xattr: invalid ea_ino [ 226.353241][ T8992] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.810: couldn't read orphan inode 15 (err -117) [ 226.371797][ T8992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.851113][ T7744] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.437015][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.444638][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.470602][ T9042] bridge0: entered allmulticast mode [ 230.480887][ T9043] bridge_slave_1: left allmulticast mode [ 230.504029][ T9043] bridge_slave_1: left promiscuous mode [ 230.520413][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.522463][ T2923] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 230.557626][ T9043] bridge_slave_0: left allmulticast mode [ 230.563510][ T9043] bridge_slave_0: left promiscuous mode [ 230.576911][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.591613][ T9045] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 230.604882][ T9045] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 230.617876][ T9045] kvm: requested 20952 ns i8254 timer period limited to 200000 ns [ 230.630437][ T9045] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 230.638783][ T9045] kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 230.647602][ T9045] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 230.656549][ T9045] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 230.668430][ T9045] kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 230.677780][ T9045] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 230.687573][ T9045] kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 231.115598][ T9054] FAULT_INJECTION: forcing a failure. [ 231.115598][ T9054] name failslab, interval 1, probability 0, space 0, times 0 [ 231.137162][ T9054] CPU: 0 PID: 9054 Comm: syz.8.825 Not tainted syzkaller #0 [ 231.144528][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.154609][ T9054] Call Trace: [ 231.157906][ T9054] [ 231.160849][ T9054] dump_stack_lvl+0x18c/0x250 [ 231.165538][ T9054] ? show_regs_print_info+0x20/0x20 [ 231.170741][ T9054] ? load_image+0x420/0x420 [ 231.175247][ T9054] ? __might_sleep+0xe0/0xe0 [ 231.179842][ T9054] ? __lock_acquire+0x7d80/0x7d80 [ 231.184875][ T9054] should_fail_ex+0x394/0x4c0 [ 231.189559][ T9054] should_failslab+0x9/0x20 [ 231.194065][ T9054] slab_pre_alloc_hook+0x59/0x300 [ 231.199099][ T9054] ? __might_fault+0xaa/0x120 [ 231.203776][ T9054] ? kvmalloc_node+0x70/0x180 [ 231.208456][ T9054] ? kvmalloc_node+0x70/0x180 [ 231.213134][ T9054] __kmem_cache_alloc_node+0x53/0x250 [ 231.218535][ T9054] ? kvmalloc_node+0x70/0x180 [ 231.223214][ T9054] __kmalloc_node+0xa6/0x240 [ 231.227814][ T9054] kvmalloc_node+0x70/0x180 [ 231.232326][ T9054] __se_sys_add_key+0x27f/0x410 [ 231.237186][ T9054] ? __x64_sys_add_key+0xc0/0xc0 [ 231.242129][ T9054] ? lockdep_hardirqs_on+0x98/0x150 [ 231.247333][ T9054] ? __x64_sys_add_key+0x20/0xc0 [ 231.252275][ T9054] do_syscall_64+0x55/0xb0 [ 231.256690][ T9054] ? clear_bhb_loop+0x40/0x90 [ 231.261366][ T9054] ? clear_bhb_loop+0x40/0x90 [ 231.266045][ T9054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.271940][ T9054] RIP: 0033:0x7f88ba39e159 [ 231.276351][ T9054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.295958][ T9054] RSP: 002b:00007f88bb202028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 231.304377][ T9054] RAX: ffffffffffffffda RBX: 00007f88ba625fa0 RCX: 00007f88ba39e159 [ 231.312347][ T9054] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 231.320315][ T9054] RBP: 00007f88ba43503b R08: fffffffffffffffe R09: 0000000000000000 [ 231.328285][ T9054] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000000 [ 231.336252][ T9054] R13: 00007f88ba626038 R14: 00007f88ba625fa0 R15: 00007fffb269cca8 [ 231.344236][ T9054] [ 231.638323][ T9065] loop6: detected capacity change from 0 to 512 [ 232.047365][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.065035][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.074405][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.125156][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.159184][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.168366][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.217487][ T9080] netlink: 'syz.6.831': attribute type 1 has an invalid length. [ 232.226287][ T9080] netlink: 'syz.6.831': attribute type 2 has an invalid length. [ 232.306748][ T9080] tipc: New replicast peer: 255.255.255.255 [ 232.318036][ T9080] tipc: Enabled bearer , priority 10 [ 232.333612][ T9078] loop8: detected capacity change from 0 to 8192 [ 232.704920][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 233.210596][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.217977][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.225246][ T9075] bridge_slave_0: entered allmulticast mode [ 233.234307][ T9075] bridge_slave_0: entered promiscuous mode [ 233.243197][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.250555][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.262324][ T9075] bridge_slave_1: entered allmulticast mode [ 233.269775][ T9075] bridge_slave_1: entered promiscuous mode [ 233.303988][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.349785][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.446313][ T970] tipc: Node number set to 1885460977 [ 233.498247][ T9075] team0: Port device team_slave_0 added [ 233.528922][ T9075] team0: Port device team_slave_1 added [ 233.624805][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.636513][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.668863][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.689130][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.696367][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.734658][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.886247][ T9075] hsr_slave_0: entered promiscuous mode [ 233.909537][ T9075] hsr_slave_1: entered promiscuous mode [ 233.939740][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.956946][ T9075] Cannot create hsr debugfs directory [ 234.217412][ T5778] Bluetooth: hci2: command tx timeout [ 234.249450][ T9124] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 234.257362][ T9124] netlink: 'syz.0.839': attribute type 2 has an invalid length. [ 234.351710][ T9124] tipc: Enabling of bearer rejected, already enabled [ 234.555921][ T9130] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 234.577283][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 234.621284][ T9134] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 234.642747][ T9075] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.698339][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.707735][ T9130] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 234.726510][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.737113][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.764734][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.774385][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.786070][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.807330][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 234.815918][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 234.873830][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.978700][ T9075] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.992963][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 235.185087][ T9075] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.371255][ T9075] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.666089][ T9135] chnl_net:caif_netlink_parms(): no params data found [ 235.831533][ T9075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 235.891235][ T9075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.938944][ T9075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 235.977992][ T9075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.250397][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.297072][ T51] Bluetooth: hci2: command tx timeout [ 236.324440][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.357741][ T9135] bridge_slave_0: entered allmulticast mode [ 236.389623][ T9135] bridge_slave_0: entered promiscuous mode [ 236.422658][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.433594][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.446000][ T9135] bridge_slave_1: entered allmulticast mode [ 236.465336][ T9135] bridge_slave_1: entered promiscuous mode [ 236.615801][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.693172][ T9135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.739266][ T9135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.859301][ T51] Bluetooth: hci3: command tx timeout [ 236.872937][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.014692][ T9135] team0: Port device team_slave_0 added [ 237.053397][ T9135] team0: Port device team_slave_1 added [ 237.070379][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.077612][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.340100][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.347315][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.370849][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.380374][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.409594][ T9135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.432367][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.439552][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.495593][ T9135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.742795][ T9135] hsr_slave_0: entered promiscuous mode [ 237.756150][ T9135] hsr_slave_1: entered promiscuous mode [ 237.765219][ T9135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.774461][ T9135] Cannot create hsr debugfs directory [ 238.080443][ T9214] loop6: detected capacity change from 0 to 8192 [ 238.378245][ T51] Bluetooth: hci2: command tx timeout [ 238.459060][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.541775][ T9135] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 238.579927][ T9135] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 238.626454][ T9135] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 238.651504][ T9135] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 238.938012][ T51] Bluetooth: hci3: command tx timeout [ 238.974147][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.044313][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.101080][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.108299][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.171588][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.178796][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.449097][ T9234] loop6: detected capacity change from 0 to 32768 [ 239.477901][ T9234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.856 (9234) [ 239.520430][ T9075] veth0_vlan: entered promiscuous mode [ 239.542409][ T9234] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.573578][ T9234] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 239.591174][ T9075] veth1_vlan: entered promiscuous mode [ 239.620320][ T9234] BTRFS info (device loop6): using free space tree [ 239.684763][ T9075] veth0_macvtap: entered promiscuous mode [ 239.708670][ T9256] 9pnet_fd: Insufficient options for proto=fd [ 239.741941][ T9075] veth1_macvtap: entered promiscuous mode [ 239.776070][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.789450][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.799800][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.810793][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.821875][ T9234] BTRFS info (device loop6): enabling ssd optimizations [ 239.831415][ T9234] BTRFS info (device loop6): auto enabling async discard [ 239.839601][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.858908][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.871273][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.891353][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.916915][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.940320][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.978125][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.041905][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.083133][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.106989][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.148601][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.179017][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.210127][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.240885][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.271872][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.301026][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.311886][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.324143][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.346459][ T9075] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.376235][ T9075] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.396640][ T9075] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.436946][ T9075] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.457827][ T51] Bluetooth: hci2: command tx timeout [ 240.631914][ T9135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.990365][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.022191][ T51] Bluetooth: hci3: command tx timeout [ 241.057895][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.160850][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.210842][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.757685][ T9135] veth0_vlan: entered promiscuous mode [ 241.801181][ T9135] veth1_vlan: entered promiscuous mode [ 241.923338][ T9135] veth0_macvtap: entered promiscuous mode [ 241.960196][ T9135] veth1_macvtap: entered promiscuous mode [ 242.054322][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.098881][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.154498][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.187359][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.214864][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.242407][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.252770][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.274295][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.289103][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.315045][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.325427][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.344944][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.380077][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.433904][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.454208][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.505048][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.516186][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.527120][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.554300][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.575764][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.593951][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.605302][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.616292][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.630094][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.640944][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.658657][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.730214][ T9135] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.757720][ T9135] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.785254][ T9135] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.810176][ T9135] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.097725][ T51] Bluetooth: hci3: command tx timeout [ 243.118297][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.154541][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.291394][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.320735][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.455444][ T7744] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.625307][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.9.836'. [ 243.660287][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 243.670426][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 243.677839][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.687918][ T51] Workqueue: hci2 hci_rx_work [ 243.692644][ T51] Call Trace: [ 243.695946][ T51] [ 243.698902][ T51] dump_stack_lvl+0x18c/0x250 [ 243.703633][ T51] ? show_regs_print_info+0x20/0x20 [ 243.708868][ T51] ? load_image+0x420/0x420 [ 243.713419][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 243.718565][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 243.723628][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 243.728320][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 243.733553][ T51] kobject_add_internal+0x617/0xc90 [ 243.738791][ T51] kobject_add+0x164/0x240 [ 243.743253][ T51] ? kobject_init+0x1d0/0x1d0 [ 243.747971][ T51] ? get_device_parent+0x366/0x390 [ 243.753116][ T51] device_add+0x3fa/0xc40 [ 243.757481][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 243.762466][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 243.767798][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 243.774083][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 243.779761][ T51] ? mutex_unlock+0x10/0x10 [ 243.784292][ T51] ? skb_pull_data+0xf0/0x1f0 [ 243.789005][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 243.794936][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 243.801388][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 243.807491][ T51] hci_event_packet+0x7b4/0x1280 [ 243.812467][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 243.817527][ T51] ? lock_chain_count+0x20/0x20 [ 243.822410][ T51] ? bis_list+0x290/0x290 [ 243.826764][ T51] ? kcov_remote_start+0x513/0x810 [ 243.831924][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 243.837153][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 243.842348][ T51] hci_rx_work+0x43a/0xd60 [ 243.846767][ T51] ? process_scheduled_works+0x975/0x1600 [ 243.852491][ T51] process_scheduled_works+0xa60/0x1600 [ 243.858049][ T51] ? worker_attach_to_pool+0x370/0x370 [ 243.863509][ T51] ? assign_work+0x3cc/0x5d0 [ 243.868099][ T51] worker_thread+0xa5e/0xfe0 [ 243.872708][ T51] kthread+0x2fa/0x390 [ 243.876765][ T51] ? pr_cont_work+0x550/0x550 [ 243.881460][ T51] ? kthread_blkcg+0xd0/0xd0 [ 243.886065][ T51] ret_from_fork+0x48/0x80 [ 243.890478][ T51] ? kthread_blkcg+0xd0/0xd0 [ 243.895059][ T51] ret_from_fork_asm+0x11/0x20 [ 243.899826][ T51] [ 243.913281][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 243.928553][ T51] Bluetooth: hci2: failed to register connection device [ 243.947267][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 244.215279][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 244.264720][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 244.307628][ T9] usb 8-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 244.327547][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.375060][ T9] usb 8-1: config 0 descriptor?? [ 244.384991][ T9357] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 245.016485][ T9] lenovo 0003:17EF:6062.0007: unknown main item tag 0x2 [ 245.024308][ T9] lenovo 0003:17EF:6062.0007: unknown main item tag 0x3 [ 245.031956][ T9] lenovo 0003:17EF:6062.0007: unknown main item tag 0x1 [ 245.039331][ T9] lenovo 0003:17EF:6062.0007: unknown main item tag 0x2 [ 245.056303][ T9] lenovo 0003:17EF:6062.0007: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.7-1/input0 [ 245.248984][ T9] usb 8-1: USB disconnect, device number 4 [ 245.496696][ T9401] EXT4-fs warning (device sda1): ext4_group_extend:1876: need to use ext2online to resize further [ 246.070759][ T9419] syzkaller0: entered promiscuous mode [ 246.081059][ T9425] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 246.086952][ T9419] syzkaller0: entered allmulticast mode [ 246.118362][ T9425] syz_tun: entered allmulticast mode [ 246.323055][ T9432] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 246.335998][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 246.344099][ T9432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 246.559400][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 246.576630][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 246.588501][ T9433] loop7: detected capacity change from 0 to 8192 [ 246.615384][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.675442][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.703428][ T9433] loop7: p1 < > p3 p4 < > [ 246.717351][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.753833][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.760216][ T9433] loop7: p3 start 50659072 is beyond EOD, [ 246.784402][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.820353][ T9433] truncated [ 246.851892][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.158862][ T9450] loop6: detected capacity change from 0 to 32768 [ 247.159816][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 247.202718][ T9450] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 247.211539][ T9450] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 247.216494][ T9] usbtmc 10-1:16.0: can't read capabilities [ 247.246060][ T9450] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 247.329764][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 247.338630][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 247.446522][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 247.499941][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 247.508605][ T9450] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 247.692805][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 247.792060][ T173] usb 10-1: USB disconnect, device number 2 [ 247.806012][ T9450] gfs2: fsid=syz:syz.0: found 1 quota changes [ 248.107070][ T7744] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 248.107070][ T7744] inode = 11 2339 [ 248.107070][ T7744] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 248.127936][ T7744] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 248.137521][ T7744] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7744 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 248.149158][ T7744] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 248.157557][ T7744] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 248.175721][ T7744] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 248.194528][ T7744] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 248.207584][ T7744] gfs2: fsid=syz:syz.0: File system withdrawn [ 248.214068][ T7744] CPU: 1 PID: 7744 Comm: syz-executor Not tainted syzkaller #0 [ 248.221658][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.231733][ T7744] Call Trace: [ 248.235036][ T7744] [ 248.237986][ T7744] dump_stack_lvl+0x18c/0x250 [ 248.242692][ T7744] ? show_regs_print_info+0x20/0x20 [ 248.247921][ T7744] ? load_image+0x420/0x420 [ 248.252453][ T7744] ? kobject_uevent_env+0x368/0x890 [ 248.257685][ T7744] gfs2_withdraw+0xe16/0x1400 [ 248.262402][ T7744] ? gfs2_lm+0x240/0x240 [ 248.266684][ T7744] ? gfs2_consist_inode_i+0xf5/0x110 [ 248.271997][ T7744] gfs2_inode_refresh+0xb3c/0x11a0 [ 248.277138][ T7744] ? gfs2_inode_metasync+0xf0/0xf0 [ 248.282271][ T7744] ? gfs2_glock_nq+0xe2e/0x1440 [ 248.287140][ T7744] gfs2_instantiate+0x162/0x220 [ 248.291983][ T7744] gfs2_glock_wait+0x1d4/0x2a0 [ 248.296753][ T7744] do_sync+0x4b8/0xd90 [ 248.300848][ T7744] ? gfs2_quota_sync+0x411/0x5a0 [ 248.305818][ T7744] ? bh_get+0x760/0x760 [ 248.309994][ T7744] ? gfs2_quota_sync+0x318/0x5a0 [ 248.314973][ T7744] ? gfs2_quota_sync+0x411/0x5a0 [ 248.319950][ T7744] ? do_raw_spin_unlock+0x121/0x230 [ 248.325173][ T7744] gfs2_quota_sync+0x411/0x5a0 [ 248.329977][ T7744] gfs2_sync_fs+0x4c/0xb0 [ 248.334328][ T7744] sync_filesystem+0xea/0x220 [ 248.339029][ T7744] generic_shutdown_super+0x6f/0x2b0 [ 248.344338][ T7744] kill_block_super+0x44/0x90 [ 248.349033][ T7744] deactivate_locked_super+0x97/0x100 [ 248.354428][ T7744] cleanup_mnt+0x3d7/0x460 [ 248.358870][ T7744] task_work_run+0x1d4/0x260 [ 248.363483][ T7744] ? task_work_cancel+0x220/0x220 [ 248.368537][ T7744] ? exit_to_user_mode_loop+0x3b/0x110 [ 248.374020][ T7744] exit_to_user_mode_loop+0xe6/0x110 [ 248.379329][ T7744] exit_to_user_mode_prepare+0xee/0x180 [ 248.384900][ T7744] syscall_exit_to_user_mode+0x1a/0x50 [ 248.390390][ T7744] do_syscall_64+0x61/0xb0 [ 248.394825][ T7744] ? clear_bhb_loop+0x40/0x90 [ 248.399522][ T7744] ? clear_bhb_loop+0x40/0x90 [ 248.404221][ T7744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.410135][ T7744] RIP: 0033:0x7f8300d9f397 [ 248.414570][ T7744] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 248.434212][ T7744] RSP: 002b:00007ffc80a6cf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 248.442662][ T7744] RAX: 0000000000000000 RBX: 00007f8300e3448b RCX: 00007f8300d9f397 [ 248.450665][ T7744] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc80a6d040 [ 248.458667][ T7744] RBP: 00007ffc80a6d040 R08: 00007ffc80a6e040 R09: 00000000ffffffff [ 248.466668][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc80a6e0d0 [ 248.474663][ T7744] R13: 00007f8300e3448b R14: 000000000003c838 R15: 00007ffc80a6e110 [ 248.482674][ T7744] [ 249.141672][ T9504] loop6: detected capacity change from 0 to 128 [ 249.166976][ T5766] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 249.248010][ T5778] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 249.396536][ T5766] usb 10-1: Using ep0 maxpacket: 8 [ 249.536268][ T5766] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 249.661147][ T5766] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 249.858152][ T5766] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 250.031278][ T5766] usb 10-1: config 250 has no interface number 0 [ 250.127025][ T5766] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 250.171627][ T5766] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 250.240417][ T5766] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.292645][ T5766] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 250.330994][ T5766] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 250.361308][ T5766] usb 10-1: config 250 interface 228 has no altsetting 0 [ 250.377996][ T5766] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 250.398761][ T5766] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 250.445116][ T5766] usb 10-1: Product: syz [ 250.463154][ T5766] usb 10-1: SerialNumber: syz [ 250.482673][ T5766] hub 10-1:250.228: bad descriptor, ignoring hub [ 250.510599][ T5766] hub: probe of 10-1:250.228 failed with error -5 [ 250.713144][ T5766] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 251.097738][ T5766] usb 10-1: USB disconnect, device number 3 [ 251.112716][ T5766] usblp0: removed [ 251.911946][ T2943] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.227550][ T28] audit: type=1326 audit(1789192132.097:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300d9e159 code=0x7fc00000 [ 252.290216][ T28] audit: type=1326 audit(1789192132.157:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8300d9e159 code=0x7fc00000 [ 252.305264][ T9556] loop7: detected capacity change from 0 to 32768 [ 252.496359][ T9556] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 252.714549][ T28] audit: type=1326 audit(1789192132.587:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300d9e159 code=0x7fc00000 [ 252.822053][ T9556] XFS (loop7): Ending clean mount [ 253.819158][ T9075] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 254.347168][ T27] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 254.473779][ T9641] loop7: detected capacity change from 0 to 512 [ 254.494731][ T9641] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.512241][ T9641] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 254.556674][ T27] usb 10-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 254.568762][ T9641] EXT4-fs (loop7): 1 truncate cleaned up [ 254.577500][ T27] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.588839][ T9641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.601030][ T27] usb 10-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 254.624602][ T27] usb 10-1: config 0 interface 0 has no altsetting 0 [ 254.637411][ T27] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 254.646713][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.678917][ T27] usb 10-1: config 0 descriptor?? [ 254.757925][ T9641] EXT4-fs error (device loop7): swap_inode_boot_loader:384: comm syz.7.927: inode #5: comm syz.7.927: iget: illegal inode # [ 254.819932][ T9641] EXT4-fs (loop7): Remounting filesystem read-only [ 254.909316][ T9075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.107359][ T9660] loop7: detected capacity change from 0 to 512 [ 255.143190][ T27] steelseries 0003:1038:1410.0008: item fetching failed at offset 5/16 [ 255.171858][ T9660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.184851][ T27] steelseries 0003:1038:1410.0008: parse failed [ 255.194531][ T27] steelseries: probe of 0003:1038:1410.0008 failed with error -22 [ 255.202564][ T9660] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.425108][ T970] usb 10-1: USB disconnect, device number 4 [ 255.507557][ T9075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.905695][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.912229][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.580809][ T9712] netlink: 'syz.9.945': attribute type 10 has an invalid length. [ 256.590543][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.598285][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.627872][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.635057][ T9712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.644318][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.651534][ T9712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.668542][ T9712] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.704982][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.9.945'. [ 256.714437][ T9712] bridge_slave_1: left allmulticast mode [ 256.720715][ T9712] bridge_slave_1: left promiscuous mode [ 256.728506][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.742966][ T9712] bridge_slave_0: left allmulticast mode [ 256.755474][ T9712] bridge_slave_0: left promiscuous mode [ 256.766734][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.833006][ T9712] bond0: (slave bridge0): Releasing backup interface [ 256.976387][ T9715] netlink: 240 bytes leftover after parsing attributes in process `syz.0.954'. [ 258.793117][ T9741] input: syz1 as /devices/virtual/input/input6 [ 259.222466][ T9752] netlink: 'syz.9.959': attribute type 1 has an invalid length. [ 259.236116][ T9752] netlink: 'syz.9.959': attribute type 2 has an invalid length. [ 259.299043][ T9752] tipc: Started in network mode [ 259.303978][ T9752] tipc: Node identity ac14140f, cluster identity 4711 [ 259.357502][ T9752] tipc: New replicast peer: 255.255.255.255 [ 259.386056][ T9752] tipc: Enabled bearer , priority 10 [ 260.089215][ T9785] loop6: detected capacity change from 0 to 128 [ 260.497035][ T27] tipc: Node number set to 2886997007 [ 261.428027][ T9805] loop7: detected capacity change from 0 to 32768 [ 261.514190][ T9805] JBD2: Ignoring recovery information on journal [ 261.641929][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.678234][ T9805] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 261.754420][ T28] audit: type=1800 audit(1789192141.617:22): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.979" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 262.295702][ T9075] ocfs2: Unmounting device (7,7) on (node local) [ 262.449258][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.991'. [ 262.805561][ T9843] kvm: vcpu 0: requested 131080 ns lapic timer period limited to 200000 ns [ 266.194875][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.339580][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.398875][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.481237][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.761406][ T9874] loop6: detected capacity change from 0 to 4096 [ 267.167759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 267.577391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 267.987031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 268.406828][ T59] netdevsim netdevsim4 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.476420][ T59] netdevsim netdevsim4 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.492450][ T59] netdevsim netdevsim4 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.516094][ T59] netdevsim netdevsim4 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.559560][ T59] tipc: Disabling bearer [ 268.582979][ T59] tipc: Left network mode [ 268.786240][ T9881] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.274611][ T59] hsr_slave_0: left promiscuous mode [ 270.288221][ T59] hsr_slave_1: left promiscuous mode [ 270.296490][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.316516][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.325155][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.333142][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.343725][ T59] bridge_slave_1: left allmulticast mode [ 270.351206][ T59] bridge_slave_1: left promiscuous mode [ 270.361235][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.375487][ T59] bridge_slave_0: left allmulticast mode [ 270.385966][ T59] bridge_slave_0: left promiscuous mode [ 270.391888][ T5834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 270.401308][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.442456][ T59] veth1_macvtap: left promiscuous mode [ 270.451139][ T59] veth0_macvtap: left promiscuous mode [ 270.456984][ T59] veth1_vlan: left promiscuous mode [ 270.477037][ T59] veth0_vlan: left promiscuous mode [ 270.587194][ T5834] usb 7-1: Using ep0 maxpacket: 8 [ 270.618115][ T5834] usb 7-1: config 5 has an invalid interface number: 207 but max is 0 [ 270.626354][ T5834] usb 7-1: config 5 has no interface number 0 [ 270.668271][ T5834] usb 7-1: config 5 interface 207 has no altsetting 0 [ 270.680090][ T5834] usb 7-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 270.711483][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.731690][ T5834] usb 7-1: Product: syz [ 270.735997][ T5834] usb 7-1: Manufacturer: syz [ 270.746923][ T5834] usb 7-1: SerialNumber: syz [ 271.039104][ T5834] hub 7-1:5.207: bad descriptor, ignoring hub [ 271.045252][ T5834] hub: probe of 7-1:5.207 failed with error -5 [ 271.052331][ T5834] ftdi_sio 7-1:5.207: FTDI USB Serial Device converter detected [ 271.066347][ T5834] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 271.098477][ T5834] usb 7-1: USB disconnect, device number 4 [ 271.113162][ T5834] ftdi_sio 7-1:5.207: device disconnected [ 271.586028][ T59] team0 (unregistering): Port device team_slave_1 removed [ 271.691450][ T59] team0 (unregistering): Port device team_slave_0 removed [ 271.778129][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.853857][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.396623][ T59] bond0 (unregistering): Released all slaves [ 272.708343][ T9945] binder: 9942:9945 ioctl c0306201 2000000007c0 returned -14 [ 274.030709][ T9972] syzkaller0: entered promiscuous mode [ 274.049400][ T9972] syzkaller0: entered allmulticast mode [ 275.951808][T10004] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 275.966964][T10004] netlink: 'syz.0.1032': attribute type 2 has an invalid length. [ 276.008888][T10004] tipc: Enabling of bearer rejected, already enabled [ 277.116253][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.131287][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.140865][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.149118][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.157047][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.166052][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.479629][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 277.507084][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 277.667539][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.805796][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.832059][T10032] chnl_net:caif_netlink_parms(): no params data found [ 277.947344][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.068413][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.166132][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.191866][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.204856][T10032] bridge_slave_0: entered allmulticast mode [ 278.212945][T10032] bridge_slave_0: entered promiscuous mode [ 278.232477][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.247098][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.264635][T10032] bridge_slave_1: entered allmulticast mode [ 278.281148][T10032] bridge_slave_1: entered promiscuous mode [ 278.383301][T10069] loop6: detected capacity change from 0 to 512 [ 278.394582][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.453866][T10069] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.1046: bg 0: block 5: invalid block bitmap [ 278.467962][ T49] netdevsim netdevsim9 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.483095][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.509034][T10069] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 278.557078][T10069] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1046: invalid indirect mapped block 3 (level 2) [ 278.579924][ T49] netdevsim netdevsim9 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.639417][T10069] EXT4-fs (loop6): 1 orphan inode deleted [ 278.645212][T10069] EXT4-fs (loop6): 1 truncate cleaned up [ 278.679918][ T49] netdevsim netdevsim9 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.689819][T10069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.814373][T10032] team0: Port device team_slave_0 added [ 278.916196][ T49] netdevsim netdevsim9 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.993309][T10032] team0: Port device team_slave_1 added [ 279.118485][ T49] tipc: Disabling bearer [ 279.125174][ T49] tipc: Left network mode [ 279.131803][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.166932][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.208539][ T7744] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.257405][ T5778] Bluetooth: hci4: command tx timeout [ 279.272977][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.333481][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.388991][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.476725][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.784926][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.799976][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.812676][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1050'. [ 279.817067][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.835162][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.843533][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1050'. [ 279.853838][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.861836][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.058394][T10032] hsr_slave_0: entered promiscuous mode [ 280.065269][T10032] hsr_slave_1: entered promiscuous mode [ 280.076338][T10032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.086157][T10032] Cannot create hsr debugfs directory [ 280.566574][T10032] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.869324][T10032] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.974448][T10128] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 280.984165][T10128] netlink: 'syz.0.1059': attribute type 2 has an invalid length. [ 281.051200][T10032] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.138220][T10128] tipc: Enabling of bearer rejected, already enabled [ 281.337054][ T51] Bluetooth: hci4: command tx timeout [ 281.358890][T10032] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.679927][T10105] chnl_net:caif_netlink_parms(): no params data found [ 281.774218][ T49] hsr_slave_0: left promiscuous mode [ 281.782024][ T49] hsr_slave_1: left promiscuous mode [ 281.790851][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.806647][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.822997][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.831010][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.884968][ T49] veth1_macvtap: left promiscuous mode [ 281.890912][ T49] veth0_macvtap: left promiscuous mode [ 281.907155][ T49] veth1_vlan: left promiscuous mode [ 281.927183][ T49] veth0_vlan: left promiscuous mode [ 281.984382][ T51] Bluetooth: hci2: command tx timeout [ 283.039901][ T3491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.264178][ T49] team0 (unregistering): Port device team_slave_1 removed [ 283.330187][ T49] team0 (unregistering): Port device team_slave_0 removed [ 283.384851][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.419526][ T51] Bluetooth: hci4: command tx timeout [ 283.453475][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.986534][ T49] bond0 (unregistering): Released all slaves [ 284.058622][ T51] Bluetooth: hci2: command tx timeout [ 284.351491][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.359092][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.366336][T10105] bridge_slave_0: entered allmulticast mode [ 284.376815][T10105] bridge_slave_0: entered promiscuous mode [ 284.385653][T10032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.406421][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.413742][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.422213][T10105] bridge_slave_1: entered allmulticast mode [ 284.430125][T10105] bridge_slave_1: entered promiscuous mode [ 284.467116][T10032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.480956][T10032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 284.495190][T10032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 284.532481][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.558893][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.672238][T10105] team0: Port device team_slave_0 added [ 284.735110][T10105] team0: Port device team_slave_1 added [ 284.820662][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.838216][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.915653][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.972242][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.987020][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.068435][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.497269][ T51] Bluetooth: hci4: command tx timeout [ 285.880412][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.108672][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.139594][ T51] Bluetooth: hci2: command tx timeout [ 286.171385][T10105] hsr_slave_0: entered promiscuous mode [ 286.182884][T10105] hsr_slave_1: entered promiscuous mode [ 286.189554][T10105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.197352][T10105] Cannot create hsr debugfs directory [ 286.249641][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.414709][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.626503][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.812324][ T49] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.846232][ T49] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.868785][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.023886][T10105] netdevsim netdevsim4 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.081651][ T49] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.108285][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.115509][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.171826][ T49] netdevsim netdevsim7 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.338945][T10105] netdevsim netdevsim4 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.533021][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.540287][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.236817][ T51] Bluetooth: hci2: command tx timeout [ 288.474324][T10105] netdevsim netdevsim4 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.591427][T10032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.626524][T10032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.669227][T10237] loop6: detected capacity change from 0 to 8 [ 289.693895][T10237] SQUASHFS error: zlib decompression failed, data probably corrupt [ 289.717392][T10105] netdevsim netdevsim4 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.724748][T10237] SQUASHFS error: Failed to read block 0x9b: -5 [ 289.733917][T10237] SQUASHFS error: Unable to read metadata cache entry [99] [ 289.751717][T10237] SQUASHFS error: Unable to read inode 0x127 [ 289.798170][T10247] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1079'. [ 290.373480][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.536143][T10105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.580932][T10105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.661298][T10105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.674177][T10262] overlayfs: failed to clone upperpath [ 290.750097][T10105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.941435][T10265] tipc: Enabling of bearer rejected, failed to enable media [ 291.032484][T10032] veth0_vlan: entered promiscuous mode [ 291.214997][T10032] veth1_vlan: entered promiscuous mode [ 291.362292][ T49] hsr_slave_0: left promiscuous mode [ 291.415473][ T49] hsr_slave_1: left promiscuous mode [ 291.436575][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.477226][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.498131][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.505587][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.551715][ T49] bridge_slave_1: left allmulticast mode [ 291.568115][ T49] bridge_slave_1: left promiscuous mode [ 291.573928][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.732676][ T49] bridge_slave_0: left allmulticast mode [ 291.804713][ T49] bridge_slave_0: left promiscuous mode [ 291.883331][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.667422][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.678385][ T49] veth1_macvtap: left promiscuous mode [ 292.739167][ T49] veth0_macvtap: left promiscuous mode [ 292.744881][ T49] veth1_vlan: left promiscuous mode [ 292.790708][ T49] veth0_vlan: left promiscuous mode [ 293.186706][T10301] loop6: detected capacity change from 0 to 32768 [ 293.233363][T10301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1088 (10301) [ 293.262380][T10301] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.273076][T10301] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 293.283853][T10301] BTRFS info (device loop6): using free space tree [ 293.469232][T10301] BTRFS info (device loop6): enabling ssd optimizations [ 293.476231][T10301] BTRFS info (device loop6): auto enabling async discard [ 293.831093][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 293.920766][ T2943] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 294.372125][T10301] fs-verity: sha256 using implementation "sha256-avx2" [ 294.663246][ T49] team0 (unregistering): Port device team_slave_1 removed [ 294.745115][ T49] team0 (unregistering): Port device team_slave_0 removed [ 294.750592][ T7744] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.822801][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.006681][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.782471][ T49] bond0 (unregistering): Released all slaves [ 296.047235][T10335] syzkaller0: entered promiscuous mode [ 296.052785][T10335] syzkaller0: entered allmulticast mode [ 296.315080][T10032] veth0_macvtap: entered promiscuous mode [ 296.361404][T10032] veth1_macvtap: entered promiscuous mode [ 296.378610][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.447885][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.474625][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.497155][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.514083][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.533167][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.556335][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.595673][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.639527][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.660602][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.746007][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.792069][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.799330][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.820186][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.905901][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.942192][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.994170][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.023570][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.034196][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.044584][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.055287][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.078712][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.099716][T10032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.444980][T10032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.623367][T10032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.690988][T10032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.807208][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.814388][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.120989][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1097'. [ 298.179676][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.201338][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.239246][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1097'. [ 298.437592][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.445465][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.739576][ T8] ath9k 0000:00:01.0: PCI memory region reserve error [ 298.799362][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.011612][T10398] syzkaller0: entered promiscuous mode [ 299.037697][T10398] syzkaller0: entered allmulticast mode [ 300.249955][T10105] veth0_vlan: entered promiscuous mode [ 300.301659][T10105] veth1_vlan: entered promiscuous mode [ 300.546693][T10105] veth0_macvtap: entered promiscuous mode [ 301.089212][T10105] veth1_macvtap: entered promiscuous mode [ 301.638834][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.721634][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.787790][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.840783][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.895746][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.955837][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.013618][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.075507][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.150537][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.196877][ C1] sched: RT throttling activated [ 302.212077][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.300120][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.381068][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.473230][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.554769][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.656402][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.687460][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.729700][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.770318][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.827098][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.884076][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.976958][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.038646][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.058897][T10440] erspan0: entered promiscuous mode [ 303.092213][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 303.140335][T10434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.425479][T10434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.586157][T10105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.636043][T10105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.687929][T10105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.725308][T10105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.097519][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.105373][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.205182][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.277288][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.085797][T10467] loop4: detected capacity change from 0 to 1024 [ 305.938293][ T42] hfsplus: bad catalog file entry [ 307.704017][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 307.807169][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 308.631589][T10515] syz_tun: entered allmulticast mode [ 309.958610][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 310.266990][ T5834] usb 5-1: config 0 has no interfaces? [ 310.272655][ T5834] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 310.305543][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.355865][ T5834] usb 5-1: config 0 descriptor?? [ 310.725294][ T5834] usb 5-1: USB disconnect, device number 2 [ 311.461860][T10575] raw_sendmsg: syz.0.1153 forgot to set AF_INET. Fix it! [ 312.445796][T10613] overlayfs: failed to clone upperpath [ 313.213839][T10620] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 313.335859][T10620] 8021q: VLANs not supported on wg2 [ 314.074973][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.603947][T10673] loop4: detected capacity change from 0 to 256 [ 317.073559][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 317.368887][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.375246][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.923439][T10719] loop1: detected capacity change from 0 to 32768 [ 318.537669][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'. [ 318.573621][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'. [ 318.655639][T10766] ip6gretap0: entered promiscuous mode [ 318.685709][T10766] syz_tun: entered promiscuous mode [ 319.009562][T10773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.396140][T10807] loop4: detected capacity change from 0 to 512 [ 321.504907][T10807] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 321.618388][T10807] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 322.281976][T10807] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1208: bg 0: block 248: padding at end of block bitmap is not set [ 322.487436][T10807] Quota error (device loop4): write_blk: dquota write failed [ 322.584054][T10807] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 322.617748][T10807] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1208: Failed to acquire dquot type 1 [ 322.685846][T10807] EXT4-fs (loop4): 1 truncate cleaned up [ 322.705776][T10807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 322.747324][T10854] syz_tun: entered allmulticast mode [ 323.599390][ T173] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 323.662449][T10105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 323.693892][ T2943] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 323.817075][ T173] usb 2-1: Using ep0 maxpacket: 8 [ 323.845637][ T173] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 323.892101][ T173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.967149][ T173] usb 2-1: Product: syz [ 323.971390][ T173] usb 2-1: Manufacturer: syz [ 324.676944][ T173] usb 2-1: SerialNumber: syz [ 324.789741][ T173] usb 2-1: config 0 descriptor?? [ 324.797987][T10878] loop4: detected capacity change from 0 to 512 [ 324.900361][T10878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.027194][ T173] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 325.082771][T10105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.273273][ T173] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 326.423748][ T173] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 326.525977][ T173] usb 2-1: media controller created [ 326.668992][ T173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.801451][ T42] hsr_slave_0: left promiscuous mode [ 326.840477][ T42] hsr_slave_1: left promiscuous mode [ 326.927196][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.934765][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.961914][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.985462][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.995558][ T173] i2c i2c-1: Added multiplexed i2c bus 2 [ 327.030001][ T173] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 327.091418][ T42] bridge_slave_1: left allmulticast mode [ 327.108887][ T42] bridge_slave_1: left promiscuous mode [ 327.193551][ T173] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 327.208965][ T173] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 327.242163][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.260395][ T42] bridge_slave_0: left allmulticast mode [ 327.818497][ T42] bridge_slave_0: left promiscuous mode [ 327.990103][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.009360][ T173] DVB: Unable to find symbol mxl5005s_attach() [ 328.117066][ T42] veth1_macvtap: left promiscuous mode [ 328.122659][ T42] veth0_macvtap: left promiscuous mode [ 328.167108][ T42] veth1_vlan: left promiscuous mode [ 328.172496][ T42] veth0_vlan: left promiscuous mode [ 328.297826][ T173] usb 2-1: USB disconnect, device number 3 [ 328.311618][T10929] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 7 (only 8 groups) [ 329.807403][T10957] loop4: detected capacity change from 0 to 256 [ 329.846009][T10957] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 330.010795][ T28] audit: type=1800 audit(1789192209.877:23): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1235" name="file1" dev="loop4" ino=1048676 res=0 errno=0 [ 330.124574][T10957] bio_check_eod: 213 callbacks suppressed [ 330.124593][T10957] syz.4.1235: attempt to access beyond end of device [ 330.124593][T10957] loop4: rw=0, sector=184, nr_sectors = 4101 limit=256 [ 330.485985][ T42] team0 (unregistering): Port device team_slave_1 removed [ 330.662902][ T42] team0 (unregistering): Port device team_slave_0 removed [ 330.835375][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.936213][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.436148][ T42] bond0 (unregistering): Released all slaves [ 331.591998][T10935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1233'. [ 331.627343][T10935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1233'. [ 331.648426][T10935] bridge0: entered promiscuous mode [ 331.655287][T10935] bridge0: left promiscuous mode [ 334.136976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 338.107707][T11062] syzkaller0: entered promiscuous mode [ 338.113250][T11062] syzkaller0: entered allmulticast mode [ 338.283965][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.301276][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.326190][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.344004][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.389647][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.408740][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.590680][T11076] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 339.652762][T11076] syzkaller0: entered promiscuous mode [ 339.664740][T11076] syzkaller0: entered allmulticast mode [ 340.457240][ T51] Bluetooth: hci1: command tx timeout [ 342.537196][ T51] Bluetooth: hci1: command tx timeout [ 342.696223][T11068] chnl_net:caif_netlink_parms(): no params data found [ 343.690755][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.698296][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.705749][T11068] bridge_slave_0: entered allmulticast mode [ 343.714144][T11068] bridge_slave_0: entered promiscuous mode [ 343.726031][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.737109][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.783992][T11068] bridge_slave_1: entered allmulticast mode [ 343.828560][T11068] bridge_slave_1: entered promiscuous mode [ 343.948208][T11121] syzkaller0: entered promiscuous mode [ 343.964030][T11121] syzkaller0: entered allmulticast mode [ 344.003599][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.042520][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.414776][T11141] loop4: detected capacity change from 0 to 2048 [ 344.488956][T11141] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 344.521956][T11141] NILFS (loop4): mounting unchecked fs [ 344.576467][T11141] NILFS (loop4): recovery complete [ 344.611206][T11148] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.639234][ T51] Bluetooth: hci1: command tx timeout [ 344.664881][T11068] team0: Port device team_slave_0 added [ 344.689937][T11068] team0: Port device team_slave_1 added [ 344.740144][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.777652][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.895976][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.937720][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.944722][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.971708][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.142414][ T3532] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.698333][T11068] hsr_slave_0: entered promiscuous mode [ 345.807525][T11068] hsr_slave_1: entered promiscuous mode [ 345.838227][T11068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.871632][T11068] Cannot create hsr debugfs directory [ 346.074044][T11164] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1273'. [ 346.767525][ T51] Bluetooth: hci1: command tx timeout [ 347.659876][T11068] netdevsim netdevsim3 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.783182][ T28] audit: type=1326 audit(1789192227.647:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.1278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b0959e159 code=0x0 [ 348.198706][T11068] netdevsim netdevsim3 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.739800][T11068] netdevsim netdevsim3 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.126753][T11068] netdevsim netdevsim3 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.648883][T11068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.705921][T11068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.774722][T11068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.882979][T11068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.289944][T11239] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 350.366310][T11243] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 350.436390][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.511993][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.553574][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.560813][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.642511][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.649728][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.801541][T11249] syzkaller0: entered promiscuous mode [ 350.825255][T11249] syzkaller0: entered allmulticast mode [ 351.930593][T11259] syzkaller0: entered promiscuous mode [ 351.938431][T11259] syzkaller0: entered allmulticast mode [ 352.474055][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.665325][T11068] veth0_vlan: entered promiscuous mode [ 352.759720][T11068] veth1_vlan: entered promiscuous mode [ 352.962117][T11068] veth0_macvtap: entered promiscuous mode [ 353.011867][T11068] veth1_macvtap: entered promiscuous mode [ 353.095120][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.135514][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.168266][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.200154][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.287188][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.367032][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.426994][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.498330][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.645769][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.051059][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 354.180880][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 354.661858][T11313] ip6gretap0: entered promiscuous mode [ 354.844093][T11313] ip6gretap0: left promiscuous mode [ 355.130948][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.525745][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.579804][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.589866][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.600723][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.610750][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.621326][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.631337][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.647471][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.658255][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.669175][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.680782][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.693182][T11068] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.702092][T11068] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.712593][T11068] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.723979][T11068] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.746663][T11316] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 355.799273][T11316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.924500][T11320] bond1: (slave geneve2): making interface the new active one [ 355.992875][T11320] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 356.072216][T11325] FAULT_INJECTION: forcing a failure. [ 356.072216][T11325] name failslab, interval 1, probability 0, space 0, times 0 [ 356.133908][T11325] CPU: 0 PID: 11325 Comm: syz.4.1303 Not tainted syzkaller #0 [ 356.141447][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.151558][T11325] Call Trace: [ 356.154945][T11325] [ 356.158019][T11325] dump_stack_lvl+0x18c/0x250 [ 356.162941][T11325] ? show_regs_print_info+0x20/0x20 [ 356.168240][T11325] ? load_image+0x420/0x420 [ 356.172812][T11325] ? __might_sleep+0xe0/0xe0 [ 356.177482][T11325] ? __lock_acquire+0x7d80/0x7d80 [ 356.182574][T11325] should_fail_ex+0x394/0x4c0 [ 356.187338][T11325] should_failslab+0x9/0x20 [ 356.191898][T11325] slab_pre_alloc_hook+0x59/0x300 [ 356.196985][T11325] ? loop_add+0x54/0x990 [ 356.201300][T11325] __kmem_cache_alloc_node+0x53/0x250 [ 356.206733][T11325] ? loop_add+0x54/0x990 [ 356.211012][T11325] kmalloc_trace+0x2a/0xe0 [ 356.215470][T11325] loop_add+0x54/0x990 [ 356.219572][T11325] loop_control_ioctl+0x128/0x590 [ 356.224624][T11325] ? loop_set_hw_queue_depth+0x110/0x110 [ 356.230291][T11325] ? bpf_lsm_file_ioctl+0x9/0x10 [ 356.235270][T11325] ? security_file_ioctl+0x80/0xa0 [ 356.240453][T11325] ? loop_set_hw_queue_depth+0x110/0x110 [ 356.246119][T11325] __se_sys_ioctl+0xfd/0x170 [ 356.250774][T11325] do_syscall_64+0x55/0xb0 [ 356.255218][T11325] ? clear_bhb_loop+0x40/0x90 [ 356.260045][T11325] ? clear_bhb_loop+0x40/0x90 [ 356.264758][T11325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.270694][T11325] RIP: 0033:0x7fa5a479e159 [ 356.275207][T11325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.294934][T11325] RSP: 002b:00007fa5a5690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.303381][T11325] RAX: ffffffffffffffda RBX: 00007fa5a4a25fa0 RCX: 00007fa5a479e159 [ 356.311390][T11325] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 356.319397][T11325] RBP: 00007fa5a483503b R08: 0000000000000000 R09: 0000000000000000 [ 356.327401][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.335402][T11325] R13: 00007fa5a4a26038 R14: 00007fa5a4a25fa0 R15: 00007fffd330cd88 [ 356.343434][T11325] [ 356.475573][T11320] syz.1.1301 (11320) used greatest stack depth: 20072 bytes left [ 356.573063][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.607369][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.652469][T11332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.660615][T11332] IPv6: NLM_F_CREATE should be set when creating new route [ 358.270266][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.277704][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.129694][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.182873][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.987566][T11333] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.999147][T11333] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.014141][T11333] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.027313][T11333] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.132054][T11352] syzkaller0: entered promiscuous mode [ 361.148317][T11352] syzkaller0: entered allmulticast mode [ 361.233687][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.277319][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.406500][T11386] overlayfs: failed to clone upperpath [ 362.830410][T11397] syz.0.1317 (11397) used greatest stack depth: 18896 bytes left [ 363.635959][T11410] overlayfs: failed to clone lowerpath [ 365.971846][T11040] syz.0.1249 (11040) used greatest stack depth: 17416 bytes left [ 368.237656][T11385] netlink: 'syz.1.1314': attribute type 4 has an invalid length. [ 369.025291][T11442] loop4: detected capacity change from 0 to 128 [ 369.043498][T11428] md/raid10:md0: not clean -- starting background reconstruction [ 369.062729][T11428] md/raid10:md0: active with 1 out of 2 devices [ 369.112596][T11428] md0: detected capacity change from 0 to 2048 [ 369.117026][T11442] FAT-fs (loop4): bogus number of reserved sectors [ 369.145727][T11442] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 369.176126][T11442] FAT-fs (loop4): Can't find a valid FAT filesystem [ 369.207144][T11451] md: resync of RAID array md0 [ 369.228645][T11448] loop1: detected capacity change from 0 to 256 [ 369.309576][T11451] md/raid10:md0: resync fails [ 369.338997][T11451] md: md0: resync done. [ 369.417406][T11440] binder: 11439:11440 ioctl c0306201 200000000380 returned -14 [ 369.797375][ T28] audit: type=1326 audit(1789192249.657:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaccf9e159 code=0x0 [ 371.489193][T11490] binder: 11489:11490 ioctl c0306201 200000000180 returned -14 [ 371.527719][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 371.670757][T11496] syzkaller0: entered promiscuous mode [ 371.679657][T11496] syzkaller0: entered allmulticast mode [ 372.161792][T11522] syz.4.1345 (11522): attempted to duplicate a private mapping with mremap. This is not supported. [ 372.570338][T11530] syzkaller0: entered promiscuous mode [ 372.589821][T11530] syzkaller0: entered allmulticast mode [ 372.626128][T11530] tipc: Started in network mode [ 372.651651][T11530] tipc: Node identity b279102861e8, cluster identity 4711 [ 372.679568][T11530] tipc: Enabled bearer , priority 0 [ 372.713824][T11529] tipc: Resetting bearer [ 372.918826][T11529] tipc: Disabling bearer [ 373.145666][ T51] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 374.584241][T11572] nvmet: adding nsid 1 to subsystem testsubsys [ 374.677607][T11572] nvmet: failed to open block device (null): (-22) [ 375.109397][T11591] loop1: detected capacity change from 0 to 512 [ 375.138238][T11591] EXT4-fs: Ignoring removed orlov option [ 375.305360][T11591] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 375.613462][T11591] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 375.768065][T11591] EXT4-fs (loop1): group descriptors corrupted! [ 376.868902][T11614] ip_tables: iptables: counters copy to user failed while replacing table [ 377.086268][ T1082] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.657142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 378.707590][T11620] pimreg: entered allmulticast mode [ 378.795743][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.802475][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.506589][T11629] netlink: 'syz.0.1368': attribute type 16 has an invalid length. [ 379.556936][T11629] netlink: 'syz.0.1368': attribute type 17 has an invalid length. [ 379.589856][T11629] erspan0: left promiscuous mode [ 379.628981][T11635] loop4: detected capacity change from 0 to 512 [ 379.655909][T11629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.657352][T11635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 379.744085][T11635] EXT4-fs (loop4): 1 truncate cleaned up [ 379.755240][T11635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.796591][T11620] pimreg: left allmulticast mode [ 380.290000][T11635] netlink: 'syz.4.1370': attribute type 322 has an invalid length. [ 381.628190][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 381.838873][ T23] usb 2-1: config 0 has no interfaces? [ 381.867925][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.897461][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.905881][ T23] usb 2-1: Product: syz [ 381.920820][ T23] usb 2-1: Manufacturer: syz [ 381.925493][ T23] usb 2-1: SerialNumber: syz [ 381.968987][ T23] usb 2-1: config 0 descriptor?? [ 381.969678][ T3491] netdevsim netdevsim6 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.049665][ T3491] netdevsim netdevsim6 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.111949][ T3491] netdevsim netdevsim6 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.161212][ T3491] netdevsim netdevsim6 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.217423][ T3491] tipc: Disabling bearer [ 382.227960][ T3491] tipc: Left network mode [ 383.424756][T10105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.645832][ T173] usb 2-1: USB disconnect, device number 4 [ 383.810269][T11719] syz_tun: entered allmulticast mode [ 386.532962][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 386.920206][ T3491] hsr_slave_0: left promiscuous mode [ 387.057137][ T3491] hsr_slave_1: left promiscuous mode [ 387.104431][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.162994][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.222146][ T3491] bridge_slave_1: left allmulticast mode [ 387.267176][ T3491] bridge_slave_1: left promiscuous mode [ 387.312777][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.349022][ T3491] bridge_slave_0: left allmulticast mode [ 387.379686][ T3491] bridge_slave_0: left promiscuous mode [ 387.401888][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.927851][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 390.002230][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 390.072218][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.145853][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.700900][ T3491] bond0 (unregistering): Released all slaves [ 390.852070][T11781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.859428][T11781] IPv6: NLM_F_CREATE should be set when creating new route [ 391.596469][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.604242][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.275979][T11785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.361376][T11785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.779398][T11785] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.789093][T11785] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.798060][T11785] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.807397][T11785] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.911671][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1402'. [ 393.942929][T11788] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 393.959727][T11788] bridge0: entered promiscuous mode [ 393.966243][T11790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.973522][T11790] IPv6: NLM_F_CREATE should be set when creating new route [ 393.990476][T11792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1402'. [ 394.844626][T11792] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 394.859137][T11792] bridge1: entered promiscuous mode [ 395.028957][T11846] loop1: detected capacity change from 0 to 8 [ 395.088157][T11846] SQUASHFS error: lzo decompression failed, data probably corrupt [ 395.116528][T11846] SQUASHFS error: Failed to read block 0x91: -5 [ 395.144911][T11846] SQUASHFS error: Unable to read metadata cache entry [8f] [ 395.177168][T11846] SQUASHFS error: Unable to read inode 0x11f [ 396.153325][ T3491] IPVS: stop unused estimator thread 0... [ 396.273321][T11846] [ 396.275706][T11846] ====================================================== [ 396.282745][T11846] WARNING: possible circular locking dependency detected [ 396.289790][T11846] syzkaller #0 Not tainted [ 396.294218][T11846] ------------------------------------------------------ [ 396.301249][T11846] syz.1.1408/11846 is trying to acquire lock: [ 396.307325][T11846] ffffffff8ddf70b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 396.317151][T11846] [ 396.317151][T11846] but task is already holding lock: [ 396.324535][T11846] ffff88805d9bf910 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 396.324641][T11865] loop4: detected capacity change from 0 to 1024 [ 396.334227][T11846] [ 396.334227][T11846] which lock already depends on the new lock. [ 396.334227][T11846] [ 396.334238][T11846] [ 396.334238][T11846] the existing dependency chain (in reverse order) is: [ 396.334243][T11846] [ 396.334243][T11846] -> #2 (&sb->s_type->i_mutex_key#27){++++}-{3:3}: [ 396.334275][T11846] down_write+0x97/0x200 [ 396.373536][T11846] configfs_depend_item_unlocked+0x157/0x430 [ 396.380074][T11846] usbg_make_tpg+0x1f7/0x580 [ 396.385352][T11846] target_fabric_make_tpg+0xa4/0x6d0 [ 396.391218][T11846] configfs_mkdir+0x515/0x9e0 [ 396.396447][T11846] vfs_mkdir+0x2a5/0x470 [ 396.401241][T11846] do_mkdirat+0x1dc/0x450 [ 396.406129][T11846] __x64_sys_mkdir+0x6e/0x80 [ 396.411271][T11846] do_syscall_64+0x55/0xb0 [ 396.416247][T11846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.422688][T11846] [ 396.422688][T11846] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 396.430373][T11846] __mutex_lock+0x135/0xc80 [ 396.435432][T11846] tcm_set_name+0x2a/0x90 [ 396.440323][T11846] function_make+0x199/0x350 [ 396.445502][T11846] configfs_mkdir+0x515/0x9e0 [ 396.450725][T11846] vfs_mkdir+0x2a5/0x470 [ 396.455512][T11846] do_mkdirat+0x1dc/0x450 [ 396.460390][T11846] __x64_sys_mkdir+0x6e/0x80 [ 396.465534][T11846] do_syscall_64+0x55/0xb0 [ 396.470520][T11846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.476973][T11846] [ 396.476973][T11846] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 396.485264][T11846] __lock_acquire+0x37ef/0x7d80 [ 396.490669][T11846] lock_acquire+0x19e/0x420 [ 396.495725][T11846] __mutex_lock+0x135/0xc80 [ 396.500789][T11846] configfs_rmdir+0x63c/0x980 [ 396.506023][T11846] vfs_rmdir+0x352/0x4b0 [ 396.510822][T11846] do_rmdir+0x29f/0x590 [ 396.515538][T11846] __x64_sys_rmdir+0x49/0x50 [ 396.520678][T11846] do_syscall_64+0x55/0xb0 [ 396.525651][T11846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.532619][T11846] [ 396.532619][T11846] other info that might help us debug this: [ 396.532619][T11846] [ 396.542865][T11846] Chain exists of: [ 396.542865][T11846] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#27 [ 396.542865][T11846] [ 396.557600][T11846] Possible unsafe locking scenario: [ 396.557600][T11846] [ 396.565072][T11846] CPU0 CPU1 [ 396.570453][T11846] ---- ---- [ 396.575842][T11846] lock(&sb->s_type->i_mutex_key#27); [ 396.581339][T11846] lock(&opts->dep_lock); [ 396.588302][T11846] lock(&sb->s_type->i_mutex_key#27); [ 396.596326][T11846] lock(gadget_subsys.su_mutex); [ 396.601380][T11846] [ 396.601380][T11846] *** DEADLOCK *** [ 396.601380][T11846] [ 396.609550][T11846] 3 locks held by syz.1.1408/11846: [ 396.614774][T11846] #0: ffff888143e84418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 396.624065][T11846] #1: ffff88805db2c670 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 396.634920][T11846] #2: ffff88805d9bf910 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 396.645078][T11846] [ 396.645078][T11846] stack backtrace: [ 396.651002][T11846] CPU: 0 PID: 11846 Comm: syz.1.1408 Not tainted syzkaller #0 [ 396.658488][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.668573][T11846] Call Trace: [ 396.671878][T11846] [ 396.674830][T11846] dump_stack_lvl+0x18c/0x250 [ 396.679548][T11846] ? load_image+0x420/0x420 [ 396.684087][T11846] ? show_regs_print_info+0x20/0x20 [ 396.689323][T11846] ? print_circular_bug+0x12b/0x1a0 [ 396.694556][T11846] check_noncircular+0x2fc/0x400 [ 396.699531][T11846] ? print_deadlock_bug+0x5d0/0x5d0 [ 396.704762][T11846] ? lockdep_lock+0xf5/0x230 [ 396.709384][T11846] ? _find_first_zero_bit+0xd6/0x100 [ 396.714702][T11846] __lock_acquire+0x37ef/0x7d80 [ 396.719596][T11846] ? verify_lock_unused+0x140/0x140 [ 396.724835][T11846] ? verify_lock_unused+0x140/0x140 [ 396.730075][T11846] lock_acquire+0x19e/0x420 [ 396.734611][T11846] ? configfs_rmdir+0x63c/0x980 [ 396.739499][T11846] ? __might_sleep+0xe0/0xe0 [ 396.744202][T11846] ? read_lock_is_recursive+0x20/0x20 [ 396.749615][T11846] __mutex_lock+0x135/0xc80 [ 396.754154][T11846] ? configfs_rmdir+0x63c/0x980 [ 396.759036][T11846] ? configfs_rmdir+0x63c/0x980 [ 396.763927][T11846] ? mutex_lock_nested+0x20/0x20 [ 396.768904][T11846] ? __lock_acquire+0x7d80/0x7d80 [ 396.773968][T11846] ? lockref_put_or_lock+0x72/0xb0 [ 396.779144][T11846] ? dput+0x3b/0x1e0 [ 396.783078][T11846] ? dput+0x3b/0x1e0 [ 396.787013][T11846] configfs_rmdir+0x63c/0x980 [ 396.791731][T11846] vfs_rmdir+0x352/0x4b0 [ 396.796009][T11846] do_rmdir+0x29f/0x590 [ 396.800192][T11846] ? __check_object_size+0x4fc/0xa40 [ 396.805500][T11846] ? d_delete_notify+0x150/0x150 [ 396.810468][T11846] ? getname_flags+0x20a/0x500 [ 396.815269][T11846] __x64_sys_rmdir+0x49/0x50 [ 396.819887][T11846] do_syscall_64+0x55/0xb0 [ 396.824339][T11846] ? clear_bhb_loop+0x40/0x90 [ 396.829046][T11846] ? clear_bhb_loop+0x40/0x90 [ 396.833754][T11846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.839686][T11846] RIP: 0033:0x7f6b0959e159 [ 396.844126][T11846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.863761][T11846] RSP: 002b:00007f6b0a44b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 396.872206][T11846] RAX: ffffffffffffffda RBX: 00007f6b09825fa0 RCX: 00007f6b0959e159 [ 396.880201][T11846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 396.888196][T11846] RBP: 00007f6b0963503b R08: 0000000000000000 R09: 0000000000000000 [ 396.896198][T11846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.904198][T11846] R13: 00007f6b09826038 R14: 00007f6b09825fa0 R15: 00007ffc09b1a778 [ 396.912206][T11846] [ 396.953291][T11865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.608419][T10105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.338428][T12014] Bluetooth: hci4: command 0x0406 tx timeout