last executing test programs:

3m3.934258864s ago: executing program 32 (id=177):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x0, 0xab}, 0x28)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xffff, 0x202, 0x3, 0x10083, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000001000000000000000000001811000012c2604c4f70ffb42302f97f8ff66cd3a791b7061b98a02accdca3364b274cac", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
socket(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8ec, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r7, 0x3141e0b2751b0f9b, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x60c5}, 0x80)

2m11.240292641s ago: executing program 1 (id=331):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x300008c8, &(0x7f0000000200)={0x11, 0x18, r1, 0x1, 0xda, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14)

1m55.586137402s ago: executing program 33 (id=331):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x300008c8, &(0x7f0000000200)={0x11, 0x18, r1, 0x1, 0xda, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14)

1m50.193970185s ago: executing program 34 (id=343):
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, r1)
getpgid(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0)

1m49.185689952s ago: executing program 6 (id=383):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x332, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x11, r1, 0x0)

1m48.598255468s ago: executing program 6 (id=384):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[], 0x118)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000))

1m47.50378555s ago: executing program 35 (id=355):
r0 = gettid()
migrate_pages(r0, 0x7, &(0x7f0000000000)=0x9, &(0x7f0000000180)=0x7)

1m47.488131417s ago: executing program 6 (id=386):
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x6, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_POLL(r0, 0x640f)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xa20, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]})
ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

1m47.246059921s ago: executing program 6 (id=387):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m46.919159421s ago: executing program 6 (id=388):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a", 0x91}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m46.726575717s ago: executing program 6 (id=389):
r0 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)

1m44.17197419s ago: executing program 36 (id=367):
r0 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0xf984, 0x10100, 0x3}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/236, 0xec}], 0x1}, 0x4}], 0x1, 0x10000, 0x0)
read$alg(r4, &(0x7f00000000c0)=""/47, 0x2f)

1m41.172444581s ago: executing program 37 (id=378):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80d0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0)
renameat2(r1, 0x0, r1, 0x0, 0x0)

1m31.170086263s ago: executing program 38 (id=389):
r0 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)

1m27.471825574s ago: executing program 7 (id=393):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x332, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x11, r1, 0x0)

1m26.71521026s ago: executing program 7 (id=394):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[], 0x118)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000))

1m25.69324036s ago: executing program 7 (id=395):
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x6, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_POLL(r0, 0x640f)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xa20, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]})
ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

1m25.423567735s ago: executing program 7 (id=396):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x18)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m25.11300082s ago: executing program 7 (id=397):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e00600000000", 0xa9}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m24.931619218s ago: executing program 7 (id=399):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, &(0x7f0000000240)="dfd9", 0x2, r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8402, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x410000, 0x2, 0x1})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x15b4}}, &(0x7f0000000400)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x7fff, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[r2, r2, r2, r2], &(0x7f00000005c0)=[{0x3, 0x5, 0xa}, {0x0, 0x3, 0x2, 0x7}, {0x2, 0x1, 0x9, 0x3}, {0x0, 0x4, 0x7, 0xc}], 0x10, 0x80000001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4)
close(r6)

1m20.960613427s ago: executing program 8 (id=402):
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x6, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_POLL(r0, 0x640f)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xa20, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]})
ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

1m20.851811854s ago: executing program 8 (id=403):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xc, 0x8040)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000200)=ANY=[@ANYBLOB="06"])

1m20.595048172s ago: executing program 8 (id=404):
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$eJwUk1Mc34UDRZe37JZtnmzbtm375H5fG8u23VbLtm3XsrH4//wf7ut9OPfcOwc4coCjBnjXAO8e4OgB3jPAewd43wDvH+ADA3xwgA8N8OEBPjLARwf42AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+AbA3xzgG8N8O0BvjPAdwf43gDfH+AHA/xwgB8N8OMBfjLATwf42QA/H+AXAxwzwC8H+NUAvx7gNwP8doDfDfD7Af4wwB8H+NMAfx7gLwP8dYC/DfD3Af4xwLED/HOAfw3w7wH+M8B/B/jfAIcEOE6A4wY4XoDjBzhBgBMGOFGAQwMcFuDEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4PAAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDHCuAOcOcJ4A5w1wvgDnD3CBABcMcKEAFw5wkQAXDXCxABcPcIkACXDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVAFcLcPUA1whwzQDXCnDtANcJcN0A1wtw/QA3CHDDADcKcOMANwlw0wA3C3DzALcIcMsAtwpw6wC3CXDbALcLcPsAdwhwxwB3CnDnAHcJcNcAdwtw9wD3CHDPAPcKcO8A9wlw3wD3C3D/AA8I8MAADwrw4AAPCfDQAA8L8PAAjwjwyACPCvDoAI8J8NgAjwvw+ABPCPDEAA3wpABPDvCUAE8N8LQATw/wjADPDHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/giADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAEcGOCrAuwK8O8DRAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHgmAC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8Axwb4Z4B/Bfh3gP8E+G+A/wU4JMRxQhw3xPFCHD/ECUKcMMSJQhwa4rAQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhCHhzhjiDOFOHOIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIuEuGiIi4W4eIhLhEiIS4a4VIhLh7hMiMuGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIjHhnhciMeHeEKIJ4ZoiCeFeHKIp4R4aoinhXh6iGeEeGaIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EEeEeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Y4MsRRId4V4t0hjg7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEMeE+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hDg2xD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThTh0AiHRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEODzCGSOcKcKZI5wlwlkjnC3C2SOcI8I5I5wrwrkjnCfCeSOcL8L5I1wgwgUjXCjChSNcJMJFI1wswsUjXCJCIlwywqUiXDrCZSJcNsLlIlw+whUiXDHClSJcOcJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDbC4yI8PsITIjwxQiM8KcKTIzwlwlMjPC3C0yM8I8IzIxxEGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4IsKzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwpERjorwrgjvjnB0hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0Q4JsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCsRH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGIfGOCzGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcbhMc4Y40wxzhzjLDHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhrjYjEuHuMSMRLjkjEuFePSMS4T47IxLhfj8jGuEOOKMa4U48oxrhLjqjGuFuPqMa4R45oxrhXj2jGuE+O6Ma4X4/oxbhDjhjFuFOPGMW4S46Yxbhbj5jFuEeOWMW4V49YxbhPjtjFuN/6QIf/nu0OMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxmiMJ8V4coynxHhqjKfFeHqMZ8R4ZoyDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYR8R4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xjgyxlEx3hXj3TGOjvGeGO+N8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYx8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/EODbGP2P8K8a/Y/wnxn9j/C/GIQmOk+C4CY6X4PgJTpDghAlOlODQBIclOHGCkyQ4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4PMEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIkESXDLBpRJcOsFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDFBEzwpwZMTPCXBUxM8LcHTEzwjwTMTHCQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJzgiwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBkQmOSvCuBO9OcHSC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJDgmwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8GxCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUx01xvBTHT3GCFCdMcaIUh6Y4LMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxeEpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpkuKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZriSSmenOIpKZ6a4mkpnp7iGSmemeIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FESmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKY5McVSKd6V4d4qjU7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JiV5NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9SHJPilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4tgU/0zxrxT/TvGfFP9N8b8Uh2Q4TobjZjhehuNnOEGGE2Y4UYZDMxyW4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDh8AxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQzJcMkMl8pw6QyXyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/McJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+GIDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4MR2Y4KsO7Mrw7w9EZ3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhkxk+leHTGT6T4bMZPpfh8xm+kOGLGb6U4csZvpLhqxm+luHrGb6R4ZsZvpXh2xm+k+G7Gb6X4fsZfpDhhxl+lOHHGX6S4acZfpbh5xl+keGYDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwzHZvhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lyHJrjsBwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHIfnOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOaw4dMuT/LNbOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8Zgcj83xuByPz/GEHE/M0RxPyvHkHE/J8dQcT8vx9BzPyPHMHAc5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jmOyPGsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GO/+81ZsTYkTmO+r/LQ4YM+X9G5zhkyJAh9+Z4X4735/hAjg/+3/0hQ4Y8nOMjOT6a42M5Pp7jEzk+meNTOT6d4zM5Ppvjczk+n+MLOb6Y40s5vpzjKzm+muNrOb6e4xs5vpnjWzm+neM7Ob6b43s5vp/jBzl+mONHOX6c4yc5fprjZzl+nuMXOY7J8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yHFsjn/m+FeOf+f4T47/5vjf/5kUOE6B4xY4XoHjFzhBgRMWOFGBQwscVuDEBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4PACZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLXCxAhcvcIkCKXDJApcqcOkCNxjejF22wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Clz//30FbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnligBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxR4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngyAJHFXhXgXcXOLrAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvChxT4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeDYAv8s8K8C/y7wnwL/LfC/AoeUOE6J45Y4XonjlzhBiROWOFGJQ0scVuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4vASZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSKXHJEpcqcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEi3xpBJPLvGUEk8t8bQSTy/xjBLPLHFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iiBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEkeWOKrEu0q8u8TRJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHimBK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8Sx5b4Z4l/lfh3if+U+G+J/5U4pMJxKhy3wvEqHL/CCSqcsMKJKhxa4bAKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgqHVzhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVEiFS1a4VIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1ZohSdVeHKFp1R4aoWnVXh6hWdUeGaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7CkdUeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Y4ssJRFd5V4d0Vjq7wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCsdU+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFv1X4e4V/VDi2wj8r/KvCvyv8p8J/K/yvwiE1jlPjuDWOV+P4NU5Q44Q1TlTj0BqH1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOLzGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKJGalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxRms8qcaTazylxlNrPK3G02s8o8YzaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4osazajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxpE1jqrxrhrvrnF0jffUeG+N99V4f40P1PhgjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9Q4psYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGsTX+WeNfNf5d4z81/lvjfzUOaXCcBsdtcLwGx29wggYnbHCiBoc2OKzBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocHhDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDdLgkg0u1eDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ3a4EkNntzgKQ2e2uBpDZ7e4BkNntngoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wRENntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ2ObHBUg3c1eHeDoxu8p8F7G7yvwfsbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwTENftngVw1+3eA3DX7b4HcNft/gDw3+2OBPDf7c4C8N/trgbw3+3uAfDY5t8M8G/2rw7wb/afDfBv9rcEiL47Q4bovjtTh+ixO0OGGLE7U4tMVhLU7c4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtDm9xxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2iRFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s0RZPavHkFk9p8dQWT2vx9BbPaPHMFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2OaPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9scWSLo1q8q8W7Wxzd4j0t3tvifS3e3+IDLT7Y4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtw/7/mxdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9aHNPily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4tgW/2zxrxb/bvGfFv9t8b8Wh3Q4Tofjdjheh+N3OEGHE3Y4UYdDOxzW4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDh8A5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ7pcMkOl+pw6Q6X6XDZDpfrcPmOYUOGDHHFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7fC0Dk/v8IwOz+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4YgOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg5Hdjiqw7s6vLvD0R3e0+G9Hd7X4f0dPtDhgx0+1OHDHT7S4aMdPtbh4x0+0eGTHT7V4dMdPtPhsx0+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2+1eHbHb7T4bsdvtfh+x1+0OGHHX7U4ccdftLhpx1+1uHnHX7R4ZgOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDsd2+GeHf3X4d4f/dPhvh/91OKTHcXoct8fxehy/xwl6nLDHiXoc2uOwHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeh/c4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/RIj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2aI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x5H9HhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2OLLHUT3e1ePdPY7u8Z6e/7FID0x4HgwCRVO3qW3bvbVt27btWyO138dGbSupbdu2He3szPcXzhyHD3DEAB8a4MMDfGSAjw7wsQE+PsAnBvjkAJ8a4NMDfGaAzw7wuQE+P8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOHOCoAY4e4JgBjh3gkADHCXDcAMcLcPwAJwhwwgAnCnDiACcJcGiAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wY4LMDzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrAhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4dYDXBHhtgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCAwwMcEeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AY4McFSAowMcE+DYAIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4SYhDQ5w0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xGEhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xKtDvCbEa0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQxwe4ogQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxZIijQhwd4pgQx4Y4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wkkiHBrhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhEuFSERLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4Y4UkRnhyhEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuREOi/C8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjh8AhHRPhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhCMjHBXh6AjHRDg2wiExjhPjuDGOF+P4MU4Q44QxThTjxDFOEuPQGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMcakYiXHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI+L8fgYT4jxxBhPivHkGI3xlBhPjfG0GE+P8YwYz4zxrBjPjvGcGM+NcViM58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8U4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8eoYr4nx2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGIfHOCLGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfG/2IcGeOoGEfHOCbGsTEOSXCcBMdNcLwEx09wggQnTHCiBCdOcJIEhyY4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyS4ZIJLJUiCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmuFqCqye4RoJrJrhWgmsnuE6C6ya4XoLrJ7hBghsmuFGCGye4SYKbJrhZgpsnuEWCWya4VYJbJ7hNgtsmuF2C2ye4Q4I7JrhTgjsnuEuCuya4W4K7J7hHgnsmuFeCeye4T4L7JrhfgvsneECCByZ4UIIHJ3hIgocmeFiChyd4RIJHJnhUgkcneEyCxyZ4XILHJ3hCgicmeFKCJydogqckeGqCpyV4eoJnJHhmgmcleHaC5yR4boLDEjwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJXJ3hNgtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyY4PMERCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+C/Cf6X4MgERyU4OsExCY5NcEiK46Q4borjpTh+ihOkOGGKE6U4cYqTpDg0xUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5RVM8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJbieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvDrFa1K8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxeEpjkjxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxRHpjgqxdEpjklxbIpDMhwnw3EzHC/D8TOcIMMJM5wow4kznCTDoRlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOH7GS6a4WIZLp7hEhkumeFSGZLh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+Ge6X4f4ZHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+GwDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/KcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+HVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxkOz3BEhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobv/e/wBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxmOzHBUhqMzHJPh2AyH5DhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOQ3OcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMselciTHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7VzXCfHdXNcL8f1c9wgxw1z3CjHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCbHY3M8LsfjczwhxxNzPCnHk3M0x1NyPDXH03I8Pcczcjwzx7NyPDvHc3I8N8dhOZ6X4/k5XpDjhTlelOPFOV6S46U5Xpbj5TlekeOVOV6V4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3McnuOIHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcWSOo3IcneOYHMfmOKTAcQoct8DxChy/wAkKnLDAiQqcuMBJChxa4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5b4HEFHl/gCQWeWOBJBZ5coAWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFDivwvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQXeWeBdBd5d4D0F3lvgfQXeX+ADBT5Y4PACRxT4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4x//7DMW/Cvy7wH8K/LfA/wocWeCoAkcXOKbAsQUOKXGcEsctcbwSxy9xghInLHGiEicucZISh5Y4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJS5S4ZIlLlUiJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5doiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonDSjyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxEGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5Y4vMQRJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4sgSR5U4usQxJY4tcUiF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDi0wkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrnK/C+StcoMIFK1yowoUrXKTCRStcrMLFK1yiwiUrXKpCKly6wmUqXLbC5SpcvsIVKlyxwpUqXLnCVSpctcLVKly9wjUqXLPCtSpcu8J1Kly3wvUqXL/CDSrcsMKNKty4wk0q3LTCzSrcvMItKtyywq0q3LrCbSrctsLtKty+wh0q3LHCnSrcucJdKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyo8scKTKjy5Qis8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrHFbheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwuEVjqjwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K/63wvwpHVjiqwtEVjqlwbIVDahynxnFrHK/G8WucoMYJa5yoxolrnKTGoTVOWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNVLj0jUuU+OyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTVa4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+OwGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+qcVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+PVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzUOr3FEjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOLLGUTWOrnFMjWNrHNLgOA2O2+B4DY7f4AQNTtjgRA1O3OAkDQ5tcNIGJ2tw8ganaHDKBqdqcOoGp2lw2gana3D6BmdocMYGZ2pw5gZnaXDWBmdrcPYG52hwzgbnanDuBudpcN4G52tw/gYXaHDBBhdqcOEGF2lw0QYXa3DxBpdocMkGl2qQBpducJkGl21wuQaXb3CFBldscKUGV25wlQZXbXC1BldvcI0G12xwrQbXbnCdBtdtcL0G129wgwY3bHCjBjducJMGN21wswY3b3CLBrdscKsGt25wmwa3bXC7BrdvcIcGd2xwpwZ3bnCXBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGj2/whAZPbPCkBk9u0AZPafDUBk9r8PQGz2jwzAbPavDsBs9p8NwGhzV4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9scHiDIxp8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8GRDY5qcHSDYxoc2+CQFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lxaIuTtjhZi5O3OEWLU7Y4VYtTtzhNi9O2OF2L07c4Q4sztjhTizO3OEuLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2uFiLi7e4RItLtrhUi7S4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6u0uGqLq7W4eotrtLhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0eGKLJ7V4cou2eEqLp7Z4Wount3hGi2e2eFaLZ7d4TovntjisxfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxataHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3h1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIvDWxzR4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmxxVIujWxzT4tgWh3Q4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh0M7nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLLDpTqkw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypw5M7tMNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfDYR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7HN7hiA4f6vDhDh/p8NEOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv8aNsS/O/ynw387/K/DkR2O6nB0h2M6HNvhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHifpcWiPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Y4rMfzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPw3sc0eP/kVyOTXwfjBZMmSa1bbtb27Zt295aqW3j/7NRt1Ft27btO8/c8w3OzuyLHTnAUQMcPcAxAxw7wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggCMDHBXg6ADHBDg2wIcCfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDHBniqBBHhzgmxLEhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOHICEdFODrCMRGOjfChCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2McGeOoGEfHOCbGsTE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIjExyV4OgExyQ4NsGHEnw4wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTHJniqBRHpzgmxbEpPpTiwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQxHZjgqw9EZjslwbIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/mODLHUTmOznFMjmNzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHCxxZ4KgCRxc4psCxBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiyBJHlTi6xDElji3xoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVjqxwVIWjKxxT4dgKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrHFkjaNqHF3jmBrH1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDIxsc1eDoBsc0OLbBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxzZ4qgWR7c4psWxLT7U4sMtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+xwZIejOhzd4ZgOx3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9PhgjyN7HNXj6B7H9Di25/9YtOc2vgtAgeJbtWrZtl0n27Zt2z7Ztm17v6+NbBvLNlat7T73ufe8h/Pfx26A/QCfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8McOQAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wFED/HuA/wzw3wGOHuB/AxwzwLEDHBLg0ADHCXDcAMcLcFiA4wc4QYATBjg8wIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQIkwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDNMCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAhwR4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTAkQF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8Bjgrw7wD/CfDfAEcH+F+AYwIcG+CQEIeGOE6I44Y4XojDQhw/xAlCnDDE4SFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4RIiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGKIhnhTiySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHiiBAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIY4M8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CnFUiH+H+E+I/4Y4OsT/QhwT4tgQh0Q4NMJxIhw3wvEiHBbh+BFOEOGEEQ6PcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiJcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I1xn2/2YjwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM0wpMiPDnCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wiciHBHhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMKREX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxGOivDvCP+J8N8IR0f4X4RjIhwb4ZAYh8Y4TozjxjhejMNiHD9m1Nj/y+ExThTjxDFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuESMxLhnjUjEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhijMZ4U48kxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R44gYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MT4Z41MxPh3jMzE+G+NzMT4f4wsxvhjjSzG+HOMrMb4a42sxvh7jGzG+GeNbMb4d4zsxvhvjezG+H+MHMX4Y40cxfhzjJzGOjPHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4pxVIx/x/hPjP/GODrG/2IcE+PYGIckODTBcRIcN8HxEhyW4PgJTpDghAkOT3CiBCdOcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkESXDJBJdKcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE3wpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb03wtgRvT/COBO9M8K4E707wngTvTfC+BO9P8IEEH0zwoQQfTvCRBB9N8LEEH0/wiQRHJDhIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/wyQSfSvDpBJ9J8NkEn0vw+QRfSPDFBF9K8OUEX0nw1QRfS/D1BN9I8M0E30rw7QTfSfDdBN9L8P0EP0jwwwQ/SvDjBD9JcGSCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgqMS/DvBfxL8N8HRCf6X4JgExyY4JMWhKY6T4rgpjpfisBTHT3GCFCdMcXiKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpEiKS6a4VIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6ZoiieleHKKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+kOCLFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYojU/w0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1IcleLfKf6T4r8pjk7xvxTHpDg2xSEZDs1wnAzHzXC8DIdlOH6GE2Q4YYbDM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCJDMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxQzM8KcOTMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczM8L8PzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDxzN8IsMRGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8MsOnMnw6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08yHJnhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4agM/87wnwz/zXB0hv9lOCbDsRkOyXFojuPkOG6O4+U4LMfxc5wgxwlzHJ7jRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOZLjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rpXj2jmuk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5jlukeOWOW6V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek+OxOR6X4/E5npDjiTma40k5npzjKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5jshxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2M/fMiQ/33iqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHEfm+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5Tgqx79z/CfHf3McneN/OY7JcWyOQwocWuA4BY5b4HgFDitw/AInKHDCAocXOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixe4RIEUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFXh8gScUeGKBFnhSgScXeEqBpxZ4WoGnF3hGgWcWeFaBZxd4ToHnFnhegecXeEGBFxZ4UYEXF3hJgZcWeFmBlxd4RYFXFnhVgVcXeE2B1xZ4XYHXF3hDgTcWeFOBNxd4S4G3FnhbgbcXeEeBdxZ4V4F3F3hPgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgSMKHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxQ4ssBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAUQX+XeA/Bf5b4OgC/ytwTIFjCxxS4tASxylx3BLHK3FYieOXOEGJE5Y4vMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8xCVKpMQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8ocQTS7TEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0ocUeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7EJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxJElflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJY4q8e8S/ynx3xJHl/hfiWNKHFvikAqHVjhOheNWOF6Fwyocv8IJKpywwuEVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc5U4cwVzlLhrBXOVuHsFc5R4ZwVzlXh3BXOU+G8Fc5X4fwVLlDhghUuVOHCFS5S4aIVLlbh4hUuUSEVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVI0cMGeIxFR5b4XEVHl/hCRWeWKEVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhiAoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFY6s8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qnBUhX9X+E+F/1Y4usL/KhxT4dgKh9Q4tMZxahy3xvFqHFbj+DVOUOOENQ6vcaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqpcckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQarfGkGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGkfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6lxZI2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNo2r8u8Z/avy3xtE1/lfjmBrH1jikwaENjtPguA2O1+CwBsdvcIIGJ2xweIMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizS4aIOLNbh4g0s0SINLNrhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYPbNrhdg9s3uEODOza4U4M7N7hLg7s2uFuDuze4R4N7NrhXg3s3uE+D+za4X4P7N3hAgwc2eFCDBzd4SIOHNnhYg4c3eESDRzZ4VINHN3hMg8c2eFyDxzd4QoMnNmiDJzV4coOnNHhqg6c1eHqDZzR4ZoNnNXh2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIOPNPhog481+HiDTzQ4osFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJgyMb/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/GhzV4N8N/tPgvw2ObvC/Bsc0OLbBIS0ObXGcFsdtcbwWh7U4fosTtDhhi8NbnKjFiVucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZW5ypxZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqMWFW1ykxUVbXKzFxVtcokVaXLLFpUYPdekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFm3xpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRZHtDhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xyRafavHpFp9p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9pcWSLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi6Na/LvFf1r8t8XRLf7X4pgWx7Y4pMOhHY7T4bgdjtfhsA7H73CCDifscHiHE3U4cYeTdDhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdEiHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Zohyd1eHKHp3R4aoendXh6h2d0eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090OKLDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYcjO/y0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzoc1eHfHf7T4b8dju7wvw7HdDi2wyE9Du1xnB7H7XG8Hof1OH6PE/Q4YY/De5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKJHelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxR3s8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscRPQ56/J8AAAD//8P52+I=")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x02\x00', r0, &(0x7f0000000180)='.\x02\x00')

1m20.216512168s ago: executing program 8 (id=405):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x2, 0x6}}, 0x20)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0xe00}], 0x1}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40)

1m20.053279391s ago: executing program 8 (id=406):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e00600000000", 0xa9}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m19.835589922s ago: executing program 9 (id=408):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nodiscard}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000001cc0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3")
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=""/80, 0x0, 0xdddd0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003a40))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=""/53, 0x0, &(0x7f0000000500)=""/4082, 0xd000})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe83, &(0x7f0000000000)='cgroup\x00'}, 0x77)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x8001)

1m19.806379092s ago: executing program 8 (id=409):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[], 0x118)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000))

1m17.170066632s ago: executing program 9 (id=413):
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xee00, &(0x7f00000002c0)={0x4, 0x0, 0xffffffffffffffff, 0xffe, 0x200000000, 0xfffffffffffffffb, 0x8000000000000000, 0x10001, 0xffff4001})
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe)

1m16.851808994s ago: executing program 9 (id=414):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)

1m16.031860656s ago: executing program 9 (id=417):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)

1m15.955606105s ago: executing program 9 (id=418):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e00600000000", 0xa9}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m15.822920285s ago: executing program 9 (id=420):
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x6, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_POLL(r0, 0x640f)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xa20, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]})
ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

1m15.570024775s ago: executing program 1 (id=392):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x9c, 0x4, 0x0, 0x0, 0x0, 0x9})
r0 = socket$netlink(0x10, 0x3, 0x15)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000fe42008a18eb3e691244050a94605d0b461d66e2ff0ab0220d7f47f64e6694aee5b72054f7897c116ea005c3d5c57b6f3620feca0eb9c093415f0b5dd7992ea644b72a2d6338075b36d54308aa2132d68e81e56c4b6f815f956d91fe229ee1d18117d8d42953f29c7cf16f740ad40af61420ede1c40730076207ca90296089d74caf867b8ecdba4feb1884f04a0d28be5781371d3fd7a1a412485831cbcaa5862e6cea8e36bb5e28f0b5c2ed9b907b61d01b10cb4110d5"], &(0x7f0000000300)='syzkaller\x00'}, 0x90)
r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0xd)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
read$eventfd(r4, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000240)={{0x80, 0xf7}, 'port1\x00', 0x3ee, 0x2062f, 0x3, 0x100, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
close_range(r1, 0xffffffffffffffff, 0x10000000000000)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x492f82, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r8}, 0xc)
r9 = openat$ppp(0xffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f0000000180)=0x1)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401})
timer_create(0xb, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

1m14.725227249s ago: executing program 1 (id=423):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r1, 0x90}, {0xffffffffffffffff, 0x5d}, {0xffffffffffffffff, 0x500}, {}, {r1, 0x60}], 0x6, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0xd]}, 0x8)

1m14.124229005s ago: executing program 1 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)

1m13.935124309s ago: executing program 1 (id=429):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace", 0xb5}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m13.825019391s ago: executing program 1 (id=430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56a69, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x5}, {0xffff, 0xffff}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

1m9.215928191s ago: executing program 39 (id=399):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, &(0x7f0000000240)="dfd9", 0x2, r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8402, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x410000, 0x2, 0x1})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x15b4}}, &(0x7f0000000400)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x7fff, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[r2, r2, r2, r2], &(0x7f00000005c0)=[{0x3, 0x5, 0xa}, {0x0, 0x3, 0x2, 0x7}, {0x2, 0x1, 0x9, 0x3}, {0x0, 0x4, 0x7, 0xc}], 0x10, 0x80000001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4)
close(r6)

1m4.17162197s ago: executing program 40 (id=409):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[], 0x118)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000))

1m0.583189572s ago: executing program 41 (id=420):
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x6, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_POLL(r0, 0x640f)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xa20, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]})
ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

58.747411968s ago: executing program 42 (id=430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56a69, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x5}, {0xffff, 0xffff}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

24.705370812s ago: executing program 3 (id=531):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8000c66)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62042, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0x9)
pwritev2(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)='9', 0x1}], 0x1, 0x5402, 0x0, 0x2)

20.823909586s ago: executing program 3 (id=540):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(0x0, &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
setxattr$incfs_metadata(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)="2c6a6c967417f23d616e89b2fe07475e5484908a047be93b9067e1ea7b65ccb6669ad6173561c5", 0x27, 0x0)
lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x5}, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

19.911706414s ago: executing program 3 (id=544):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000180), 0x4)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)

18.024041093s ago: executing program 3 (id=548):
r0 = socket$pptp(0x18, 0x1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40)
mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8)
chdir(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
io_setup(0x4, &(0x7f0000010440)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfdfe, 0x100000000000000}])
close_range(r0, 0xffffffffffffffff, 0x0)

7.671250748s ago: executing program 0 (id=580):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
io_setup(0x4, &(0x7f0000010440)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000019c0)=[0x0])

7.62558628s ago: executing program 5 (id=581):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7)

7.222148024s ago: executing program 0 (id=585):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
close(0x3)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000280)=0x4)

7.060621552s ago: executing program 2 (id=586):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x3, 0x180000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3a, 0x4000, @fd_index=0x2, 0x8, 0x0, 0x0, 0x1, 0x1, {0x1}})
io_uring_enter(r1, 0x3517, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x84, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20005004)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB])
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)

6.957621545s ago: executing program 4 (id=587):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)="2c6a6c967417f23d616e89b2fe07475e5484908a047be93b9067e1ea7b65ccb6669ad6173561c5", 0x27, 0x0)
lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x5}, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

6.736054407s ago: executing program 0 (id=588):
futex(&(0x7f0000000000)=0x1, 0x3, 0x80000000, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0xa02772d7866b1541)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000180)=0x8001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x3)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

6.348990481s ago: executing program 4 (id=589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(r0, &(0x7f0000000bc0)='./file0\x00', 0x801)
move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220)

6.336968072s ago: executing program 3 (id=590):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12)
close(0xffffffffffffffff)

5.284459848s ago: executing program 2 (id=591):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe4)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000003c0)={0x8c, 0x79, {0xffffffffffffffff}, {<r7=>0xee01}, 0x4, 0x5})
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10801, &(0x7f0000000400)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_lt={'euid<', r6}}, {@euid_lt={'euid<', r7}}, {@pcr={'pcr', 0x3d, 0x14}}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000480)={0x8, 0x2, 'client0\x00', 0x1, "abb363bbde7e68b5", "ddfdbda093760845a388d32521c6ac020d1d6261237a7cc81469ef60fa12d45d", 0x8, 0x8})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lremovexattr(0x0, 0x0)

5.147887207s ago: executing program 4 (id=592):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r1, 0x90}, {0xffffffffffffffff, 0x5d}, {0xffffffffffffffff, 0x500}, {}, {r1, 0x60}], 0x6, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0xd]}, 0x8)

4.842065145s ago: executing program 5 (id=593):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000)

4.713422243s ago: executing program 5 (id=594):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000240)=""/4096}, 0x94)

3.594697216s ago: executing program 5 (id=595):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
io_setup(0x4, &(0x7f0000010440)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000019c0)=[0x0])

3.506248332s ago: executing program 4 (id=596):
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0)

2.281947962s ago: executing program 5 (id=597):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="600200001000090100000000fddbdf25fc0000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000a000000af0000004800020063626328646573335f6564652900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000600ac1e", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d3330000007f0000010000000000000000000000000300000000000000a8cb0000000000000700000000000000ff0f0000000000000300000000000000010001000000000002000000000000000900000000000000040000000000000004000000000000000200000000000000060000000000000008000000630f0000d600000028bd70000135000002000209160000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000"], 0x260}}, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffa, 0x2}, 0xe)
socket$netlink(0x10, 0x3, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

2.281451369s ago: executing program 4 (id=598):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x2, 0x6}}, 0x20)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0xffe}], 0x1}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40)

1.955846957s ago: executing program 4 (id=599):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20)
write$binfmt_elf32(r0, 0x0, 0x4cd)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x101000)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
getpgid(0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

1.878793149s ago: executing program 0 (id=600):
r0 = socket$pptp(0x18, 0x1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40)
mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8)
chdir(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
io_setup(0x4, &(0x7f0000010440)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfdfe, 0x100000000000000}])
close_range(r0, 0xffffffffffffffff, 0x0)

1.653603038s ago: executing program 2 (id=601):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121b008, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0)

1.542152773s ago: executing program 2 (id=602):
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8)

1.49574284s ago: executing program 3 (id=603):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x2, &(0x7f0000000040)={0x1d, "79c58abcca2dfc8862fb4046e2b8075d96249cb98f5c03f18356fa722969c3a992"}})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x81, 0x8, 0x9, 0x8, 0xeb, 0x0, 0x3, 0x100, 0xf, 0x0, 0xb1, 0x7, '\x00', 0x7, 0x3c})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.307008917s ago: executing program 0 (id=604):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)="2c6a6c967417f23d616e89b2fe07475e5484908a047be93b9067e1ea7b65ccb6669ad6173561c5", 0x27, 0x0)
lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x5}, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.17151924s ago: executing program 2 (id=605):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300})

985.444069ms ago: executing program 5 (id=606):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r1, 0x90}, {0xffffffffffffffff, 0x5d}, {0xffffffffffffffff, 0x500}, {}, {r1, 0x60}], 0x6, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0xd]}, 0x8)

974.583355ms ago: executing program 0 (id=607):
socket$inet6(0xa, 0x3, 0xff)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @random="fc06839d09fe"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='bridge_slave_1\x00', 0x6, 0x7, 0x9})

0s ago: executing program 2 (id=608):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

kernel console output (not intermixed with test programs):

adding VLAN 0 to HW filter on device team0
[   92.081879][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.089227][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.108264][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.115577][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.159381][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   92.274187][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.288567][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.295900][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.308889][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.316138][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.445467][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   92.502188][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.509582][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.561678][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.571142][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.578314][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.629366][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.736512][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.936415][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.998848][ T5859] veth0_vlan: entered promiscuous mode
[   93.024794][ T5858] veth0_vlan: entered promiscuous mode
[   93.089192][ T5858] veth1_vlan: entered promiscuous mode
[   93.104105][ T5859] veth1_vlan: entered promiscuous mode
[   93.189789][ T5182] Bluetooth: hci1: command tx timeout
[   93.202308][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.224561][ T5874] veth0_vlan: entered promiscuous mode
[   93.238874][ T5874] veth1_vlan: entered promiscuous mode
[   93.270006][ T5870] Bluetooth: hci3: command tx timeout
[   93.270416][ T5879] Bluetooth: hci4: command tx timeout
[   93.275517][ T5182] Bluetooth: hci0: command tx timeout
[   93.281014][ T5879] Bluetooth: hci2: command tx timeout
[   93.307736][ T5859] veth0_macvtap: entered promiscuous mode
[   93.319750][ T5859] veth1_macvtap: entered promiscuous mode
[   93.333262][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.347003][ T5858] veth0_macvtap: entered promiscuous mode
[   93.405424][ T5858] veth1_macvtap: entered promiscuous mode
[   93.428087][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.447238][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.498137][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.513851][ T5874] veth0_macvtap: entered promiscuous mode
[   93.541517][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.556577][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.568294][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.589250][ T5874] veth1_macvtap: entered promiscuous mode
[   93.627571][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.646233][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.672402][ T5860] veth0_vlan: entered promiscuous mode
[   93.698936][ T5860] veth1_vlan: entered promiscuous mode
[   93.706764][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.736128][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.746268][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.781364][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.812962][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.852092][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.908222][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.921465][ T5860] veth0_macvtap: entered promiscuous mode
[   93.931654][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.943441][ T1135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.953619][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.964622][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.997412][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.013800][ T5860] veth1_macvtap: entered promiscuous mode
[   94.030446][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.038328][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.076914][ T5862] veth0_vlan: entered promiscuous mode
[   94.175574][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.184566][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.184874][ T5862] veth1_vlan: entered promiscuous mode
[   94.203369][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.206666][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.218216][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.271983][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.318053][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.332777][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.342148][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.348339][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.394862][ T1135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.407577][ T1135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.414245][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.448945][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.478579][ T5862] veth0_macvtap: entered promiscuous mode
[   94.491290][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.572758][ T5862] veth1_macvtap: entered promiscuous mode
[   94.719986][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.831723][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.836916][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.851925][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.895383][ T5994] binder_alloc: 5993: binder_alloc_buf size -40 failed, no address space
[   94.926377][ T1135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.938637][ T5994] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[   94.961435][ T1135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.059294][ T1135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.104565][ T1135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.223910][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.238333][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.274762][ T5182] Bluetooth: hci1: command tx timeout
[   95.350063][ T5870] Bluetooth: hci4: command tx timeout
[   95.356310][ T5879] Bluetooth: hci0: command tx timeout
[   95.362012][ T5878] Bluetooth: hci3: command tx timeout
[   95.369691][ T5182] Bluetooth: hci2: command tx timeout
[   95.575642][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.625165][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.837503][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.860765][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.889099][ T6013] netlink: 368 bytes leftover after parsing attributes in process `syz.1.11'.
[   96.390706][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.400556][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.470459][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.679886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.059803][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.290069][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.298826][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.661066][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[   97.729963][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.738698][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   98.104869][ T6046] 9pnet_virtio: no channels available for device syz
[  100.864938][ T6065] Bluetooth: MGMT ver 1.23
[  102.920255][   T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.130051][   T43] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  104.205314][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.246930][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.342973][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.351816][ T6082] binder: 6081:6082 unknown command 0
[  104.382832][ T6082] binder: 6081:6082 ioctl c0306201 200000000080 returned -22
[  104.383993][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.400646][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.417051][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.429831][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.439962][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.462027][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.470627][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.499628][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.514924][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.536410][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.559838][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.580151][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.610639][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.640329][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.679867][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.692140][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.733238][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.810452][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.878385][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.919358][   T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.969264][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.978981][   T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  104.999392][   T43] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  105.044818][   T43] usb 1-1: Product: syz
[  105.059300][   T43] usb 1-1: Manufacturer: syz
[  105.064852][   T43] usb 1-1: SerialNumber: syz
[  105.292614][   T43] usb 1-1: config 0 descriptor??
[  105.342310][   T43] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  106.131788][ T6100] Zero length message leads to an empty skb
[  108.735118][ T5977] usb 1-1: USB disconnect, device number 2
[  108.918019][ T5977] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  110.210826][ T6125] binder: 6122:6125 unknown command 0
[  110.221925][ T6125] binder: 6122:6125 ioctl c0306201 200000000080 returned -22
[  111.667551][ T6150] lo speed is unknown, defaulting to 1000
[  111.684572][ T6150] lo speed is unknown, defaulting to 1000
[  111.841478][ T6150] lo speed is unknown, defaulting to 1000
[  111.931667][ T6150] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.324581][ T6150] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  113.424522][ T6150] lo speed is unknown, defaulting to 1000
[  113.482545][ T6150] lo speed is unknown, defaulting to 1000
[  113.529264][ T6150] lo speed is unknown, defaulting to 1000
[  113.584332][ T6150] lo speed is unknown, defaulting to 1000
[  113.620780][ T6168] binder: 6167:6168 unknown command 0
[  113.628795][ T6168] binder: 6167:6168 ioctl c0306201 200000000080 returned -22
[  113.647249][ T6150] lo speed is unknown, defaulting to 1000
[  114.135884][ T6179] netlink: 368 bytes leftover after parsing attributes in process `syz.4.61'.
[  114.229703][ T5870] Bluetooth: hci4: command 0x0405 tx timeout
[  115.859372][ T6186] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  116.313402][ T6212] 9pnet_virtio: no channels available for device syz
[  117.890718][ T6216] binder: 6211:6216 unknown command 0
[  117.914064][ T6216] binder: 6211:6216 ioctl c0306201 200000000080 returned -22
[  121.791769][ T6234] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  121.798565][ T6234] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  121.820619][ T6234] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  122.082720][ T6234] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  122.219794][ T6234] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  122.233394][ T5182] Bluetooth: hci1: command 0x0c1a tx timeout
[  122.813620][ T6234] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  122.961863][ T6234] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  123.052700][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'.
[  123.069714][ T6234] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  123.327245][ T6234] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  123.617076][ T6234] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  123.633442][ T6234] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  123.718761][ T6234] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  124.674187][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout
[  124.681670][ T5182] Bluetooth: hci3: command 0x0c1a tx timeout
[  125.109635][ T5182] Bluetooth: hci2: command 0x0c1a tx timeout
[  125.254851][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'.
[  125.265159][ T6293] netlink: 'syz.4.89': attribute type 5 has an invalid length.
[  125.276686][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.89'.
[  125.565735][ T6309] 9pnet_virtio: no channels available for device syz
[  125.689096][ T5182] Bluetooth: hci4: command 0x0405 tx timeout
[  126.079225][ T6293] geneve2: entered promiscuous mode
[  126.126486][ T6293] geneve2: entered allmulticast mode
[  126.549277][   T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  126.583637][   T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  126.619622][ T5916] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  126.792669][ T5182] Bluetooth: hci3: command 0x0c1a tx timeout
[  126.794196][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  126.798768][ T5182] Bluetooth: hci1: command 0x0c1a tx timeout
[  127.009567][ T5916] usb 1-1: Using ep0 maxpacket: 16
[  127.015778][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  127.042770][ T5916] usb 1-1: too many configurations: 123, using maximum allowed: 8
[  127.057328][ T6321] batman_adv: batadv0: Adding interface: dummy0
[  127.070124][ T6321] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.114082][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.126387][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.145511][ T6321] batman_adv: batadv0: Interface activated: dummy0
[  127.155807][ T6323] batadv0: mtu less than device minimum
[  127.170565][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.182186][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.194181][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.205715][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.217175][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.228617][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.240119][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.251572][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.262975][ T6323] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.299764][ T5182] Bluetooth: hci2: command 0x0c1a tx timeout
[  127.307895][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.320092][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.341747][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.354734][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.381169][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.412854][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.564117][ T5916] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  127.595109][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  127.649722][ T5916] usb 1-1: SerialNumber: syz
[  127.690471][ T5916] usb 1-1: config 0 descriptor??
[  127.723261][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[  127.874662][ T5182] Bluetooth: hci4: command 0x0405 tx timeout
[  128.010800][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  128.020060][ T5217] bcm5974 1-1:0.0: could not read from device
[  128.030636][ T5916] usb 1-1: USB disconnect, device number 3
[  128.879643][ T5182] Bluetooth: hci3: command 0x0c1a tx timeout
[  128.930985][ T5217] bcm5974 1-1:0.0: could not read from device
[  129.360068][ T5182] Bluetooth: hci2: command 0x0c1a tx timeout
[  129.915746][ T5182] Bluetooth: hci4: command 0x0405 tx timeout
[  130.820376][ T5182] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6
[  131.034653][ T6365] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  132.081982][ T6382] 9pnet_virtio: no channels available for device syz
[  133.046065][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  133.249821][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.279391][ T5182] Bluetooth: hci1: unexpected event for opcode 0x0000
[  133.722527][ T5182] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6
[  134.874448][ T6418] program syz.0.126 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.006526][ T6427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.130'.
[  135.799366][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.126'.
[  137.351416][ T5182] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  137.362037][ T5182] Bluetooth: hci1: Injecting HCI hardware error event
[  137.376468][ T5182] Bluetooth: hci1: hardware error 0x00
[  139.732066][ T5182] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  142.240116][ T6454] fuse: Unknown parameter 'use00000000000000000000'
[  142.240390][ T5182] Bluetooth: hci4: unexpected event for opcode 0x0000
[  142.803298][ T6470] binder: BINDER_SET_CONTEXT_MGR already set
[  142.836256][ T6470] binder: 6468:6470 ioctl 4018620d 200000000040 returned -16
[  145.524742][ T6488] kvm: pic: non byte read
[  146.317609][ T5182] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  146.327773][ T5182] Bluetooth: hci4: Injecting HCI hardware error event
[  146.359840][ T5182] Bluetooth: hci4: hardware error 0x00
[  147.406772][ T6499] fuse: Unknown parameter 'user_i00000000000000000000'
[  147.542136][ T5870] Bluetooth: hci3: unexpected event for opcode 0x0000
[  147.836527][ T6505] warning: `syz.0.146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  148.390037][ T5182] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  148.993232][ T6514] binder: BINDER_SET_CONTEXT_MGR already set
[  148.999268][ T6514] binder: 6513:6514 ioctl 4018620d 200000000040 returned -16
[  151.196225][ T6532] fuse: Unknown parameter 'user_i00000000000000000000'
[  151.599754][ T5870] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  151.612328][ T5870] Bluetooth: hci3: Injecting HCI hardware error event
[  151.626125][ T5182] Bluetooth: hci3: hardware error 0x00
[  151.676596][ T6536] capability: warning: `syz.4.162' uses deprecated v2 capabilities in a way that may be insecure
[  152.500555][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'.
[  153.678601][ T5182] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  155.620554][ T6570] fuse: Unknown parameter 'user_i00000000000000000000'
[  158.274726][ T6599] netlink: 'syz.1.181': attribute type 12 has an invalid length.
[  158.333083][ T6598] evm: overlay not supported
[  158.347326][ T6599] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.181'.
[  159.266487][ T6612] fuse: Unknown parameter 'user_id00000000000000000000'
[  160.757956][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'.
[  160.770355][ T6616] netlink: 'syz.4.187': attribute type 5 has an invalid length.
[  160.780680][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'.
[  164.460467][ T6654] fuse: Unknown parameter 'user_id00000000000000000000'
[  168.192847][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'.
[  169.230129][ T6684] netlink: 'syz.3.206': attribute type 5 has an invalid length.
[  169.240128][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'.
[  169.914045][ T6684] geneve2: entered promiscuous mode
[  169.919426][ T6684] geneve2: entered allmulticast mode
[  169.992117][ T6448] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  170.084540][ T6448] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  170.118786][ T6448] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  170.150952][ T6448] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  170.458697][ T6696] fuse: Unknown parameter 'user_id00000000000000000000'
[  174.959670][ T6727] netlink: 60 bytes leftover after parsing attributes in process `syz.1.218'.
[  175.117567][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.139920][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.180933][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.191102][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.200517][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.288072][ T6731] lo speed is unknown, defaulting to 1000
[  176.059209][ T6740] fuse: Bad value for 'fd'
[  176.210624][ T6444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.269669][ T5182] Bluetooth: hci5: command tx timeout
[  177.400019][ T6745] netlink: 'syz.0.224': attribute type 1 has an invalid length.
[  177.407925][ T6745] netlink: 224 bytes leftover after parsing attributes in process `syz.0.224'.
[  177.464477][ T6444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.768758][ T6444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.945637][ T6444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.135873][ T6761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.229'.
[  179.349826][ T5182] Bluetooth: hci5: command tx timeout
[  179.827161][ T6778] fuse: Bad value for 'fd'
[  179.991279][ T6731] chnl_net:caif_netlink_parms(): no params data found
[  180.227685][ T6444] bridge_slave_1: left allmulticast mode
[  180.248330][ T6444] bridge_slave_1: left promiscuous mode
[  180.369630][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.484192][ T6789] binder: 6786:6789 unknown command 0
[  180.536460][ T6789] binder: 6786:6789 ioctl c0306201 200000000080 returned -22
[  180.537505][ T6444] bridge_slave_0: left allmulticast mode
[  180.714294][ T6444] bridge_slave_0: left promiscuous mode
[  180.735333][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.437542][ T5182] Bluetooth: hci5: command tx timeout
[  182.019712][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  182.224705][   T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  182.286244][   T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  182.311524][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  182.352929][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  182.376637][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  182.400214][   T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  182.409344][   T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  182.432484][   T24] usb 2-1: Product: syz
[  182.436865][   T24] usb 2-1: Manufacturer: syz
[  182.480808][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  182.486110][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  182.519221][   T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  182.526092][   T24] cdc_wdm 2-1:1.0: Unknown control protocol
[  182.739925][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.778371][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.808029][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  182.808557][   T24] usb 2-1: USB disconnect, device number 2
[  182.815138][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  182.827070][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  182.873966][ T6444] bond0 (unregistering): Released all slaves
[  183.390879][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  183.511900][ T5182] Bluetooth: hci5: command tx timeout
[  183.607438][   T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  183.681001][   T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  183.750047][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  183.795535][ T6828] fuse: Bad value for 'fd'
[  183.837380][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  183.905047][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  183.949908][   T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  183.965356][   T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  184.018399][   T24] usb 2-1: Product: syz
[  184.034229][   T24] usb 2-1: Manufacturer: syz
[  184.082796][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  184.088430][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  184.319674][   T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  184.337431][   T24] cdc_wdm 2-1:1.0: Unknown control protocol
[  184.510867][ T6799] 9pnet_virtio: no channels available for device syz
[  184.998215][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.040967][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.094218][   T24] usb 2-1: USB disconnect, device number 3
[  185.108289][ T6731] bridge_slave_0: entered allmulticast mode
[  185.192140][ T6841] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  185.203258][ T6731] bridge_slave_0: entered promiscuous mode
[  185.236291][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.263920][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.265824][ T6841] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  185.281862][ T6731] bridge_slave_1: entered allmulticast mode
[  185.316039][ T6731] bridge_slave_1: entered promiscuous mode
[  186.868654][ T6731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.903484][ T6731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.075168][ T6866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.255'.
[  187.197087][ T6444] hsr_slave_0: left promiscuous mode
[  187.205386][ T6444] hsr_slave_1: left promiscuous mode
[  187.226598][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.245406][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.265910][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.278454][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.335682][ T6444] veth1_macvtap: left promiscuous mode
[  187.342974][ T6444] veth0_macvtap: left promiscuous mode
[  187.349175][ T6444] veth1_vlan: left promiscuous mode
[  187.356267][ T6444] veth0_vlan: left promiscuous mode
[  188.748861][ T6879] fuse: Unknown parameter '00000000000000000000004'
[  189.080231][ T6444] team0 (unregistering): Port device team_slave_1 removed
[  189.148874][ T6444] team0 (unregistering): Port device team_slave_0 removed
[  192.341132][ T6731] team0: Port device team_slave_0 added
[  192.381813][ T5984] lo speed is unknown, defaulting to 1000
[  192.453055][ T6731] team0: Port device team_slave_1 added
[  192.462180][ T5984] infiniband syz2: ib_query_port failed (-19)
[  192.606362][   T30] audit: type=1326 audit(1758075196.392:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  193.569741][   T30] audit: type=1326 audit(1758075196.392:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  193.897452][   T30] audit: type=1326 audit(1758075196.392:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  193.995545][   T30] audit: type=1326 audit(1758075196.452:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  194.009181][ T6731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.027253][   T30] audit: type=1326 audit(1758075196.452:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  194.078131][   T30] audit: type=1326 audit(1758075196.452:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  194.102463][   T30] audit: type=1326 audit(1758075196.452:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  194.139689][   T30] audit: type=1326 audit(1758075196.452:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  194.182962][ T6731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.315125][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.339888][   T30] audit: type=1326 audit(1758075196.452:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  194.379874][ T6731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.423650][ T6731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.443299][ T6731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.480052][   T30] audit: type=1326 audit(1758075196.482:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7978eba9 code=0x7ffc0000
[  194.523479][ T6731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.179183][ T6917] fuse: Unknown parameter '00000000000000000000004'
[  195.290138][ T6731] hsr_slave_0: entered promiscuous mode
[  195.319810][ T6731] hsr_slave_1: entered promiscuous mode
[  195.341598][ T6731] debugfs: 'hsr0' already exists in 'hsr'
[  195.394629][ T6731] Cannot create hsr debugfs directory
[  198.624919][ T6731] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  198.702765][ T6731] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  198.869382][ T6731] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  198.909349][ T6731] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  199.411285][ T6731] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.505548][ T6731] 8021q: adding VLAN 0 to HW filter on device team0
[  199.567043][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.574752][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.117589][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.124847][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.943516][ T6972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.272'.
[  202.047919][ T6975] fuse: Unknown parameter '00000000000000000000004'
[  203.275444][ T6995] netlink: 'syz.3.281': attribute type 1 has an invalid length.
[  203.316143][ T6995] netlink: 224 bytes leftover after parsing attributes in process `syz.3.281'.
[  203.374228][ T6731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.515095][ T6731] veth0_vlan: entered promiscuous mode
[  207.564072][ T7041] fuse: Unknown parameter '00000000000000000000004'
[  207.587765][ T6731] veth1_vlan: entered promiscuous mode
[  207.751871][ T6731] veth0_macvtap: entered promiscuous mode
[  207.843627][ T6731] veth1_macvtap: entered promiscuous mode
[  207.889308][ T6731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.907917][ T6731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.931489][ T7048] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[  207.939175][ T7048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.293'.
[  208.021379][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.038330][ T6444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.074245][ T6444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.106408][ T6444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.638579][ T6444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.698448][ T6444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.883961][ T6446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.906689][ T6446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.941980][ T7063] binder: BINDER_SET_CONTEXT_MGR already set
[  208.989719][ T7063] binder: 7061:7063 ioctl 4018620d 200000000040 returned -16
[  209.017086][ T7065] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  209.023895][ T7065] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  209.066084][ T7065] vhci_hcd vhci_hcd.0: Device attached
[  209.294281][ T7066] vhci_hcd: connection closed
[  209.333060][   T13] vhci_hcd: stop threads
[  209.370803][   T13] vhci_hcd: release socket
[  209.396121][   T13] vhci_hcd: disconnect device
[  211.376412][ T7078] binder: BINDER_SET_CONTEXT_MGR already set
[  211.458860][ T7078] binder: 7077:7078 ioctl 4018620d 200000000040 returned -16
[  212.133656][ T7090] mmap: syz.4.300 (7090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  213.326814][ T7096] 9pnet_virtio: no channels available for device syz
[  215.044455][ T7111] binder: 7110:7111 ioctl c0306201 0 returned -14
[  216.388591][ T7128] 9pnet_virtio: no channels available for device syz
[  217.321020][ T7129] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  217.321020][ T7129]    program syz.1.308 not setting count and/or reply_len properly
[  220.393680][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'.
[  220.413224][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'.
[  221.148482][ T7168] binder: 7167:7168 ioctl c0306201 0 returned -14
[  228.114966][ T7217] binder: 7215:7217 ioctl c0306201 0 returned -14
[  228.290032][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'.
[  231.558140][ T7271] overlayfs: missing 'lowerdir'
[  232.122881][ T7282] binder: BINDER_SET_CONTEXT_MGR already set
[  232.190058][ T7282] binder: 7279:7282 ioctl 4018620d 200000000040 returned -16
[  237.318454][ T7359] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[  237.340054][ T7359] netlink: 224 bytes leftover after parsing attributes in process `syz.0.364'.
[  237.459692][ T7364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  237.470576][ T7364] block device autoloading is deprecated and will be removed.
[  240.265199][ T7388] netlink: 'syz.4.376': attribute type 1 has an invalid length.
[  240.273015][ T7388] netlink: 224 bytes leftover after parsing attributes in process `syz.4.376'.
[  241.679687][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  241.688936][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  241.697026][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  241.706094][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  241.716947][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.817509][ T6444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.911920][ T6444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.984224][ T6444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.998126][ T7392] chnl_net:caif_netlink_parms(): no params data found
[  242.052903][ T6444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.117272][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.124685][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.132298][ T7392] bridge_slave_0: entered allmulticast mode
[  242.140280][ T7392] bridge_slave_0: entered promiscuous mode
[  242.149874][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.162204][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.170231][ T7392] bridge_slave_1: entered allmulticast mode
[  242.177498][ T7392] bridge_slave_1: entered promiscuous mode
[  242.227025][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.245156][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.306597][ T7392] team0: Port device team_slave_0 added
[  242.318615][ T7392] team0: Port device team_slave_1 added
[  242.394189][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.402874][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.429532][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.442751][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.449904][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.478351][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.529770][ T6444] bridge_slave_1: left allmulticast mode
[  242.535478][ T6444] bridge_slave_1: left promiscuous mode
[  242.542738][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.553382][ T6444] bridge_slave_0: left allmulticast mode
[  242.559039][ T6444] bridge_slave_0: left promiscuous mode
[  242.567147][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.865239][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.878861][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.894362][ T6444] bond0 (unregistering): Released all slaves
[  242.934636][ T7392] hsr_slave_0: entered promiscuous mode
[  242.943563][ T7392] hsr_slave_1: entered promiscuous mode
[  242.963277][ T7392] debugfs: 'hsr0' already exists in 'hsr'
[  242.969068][ T7392] Cannot create hsr debugfs directory
[  243.317205][ T6444] hsr_slave_0: left promiscuous mode
[  243.325756][ T6444] hsr_slave_1: left promiscuous mode
[  243.332559][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.341923][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.351225][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.358927][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.384233][ T6444] veth1_macvtap: left promiscuous mode
[  243.391226][ T6444] veth0_macvtap: left promiscuous mode
[  243.396939][ T6444] veth1_vlan: left promiscuous mode
[  243.403255][ T6444] veth0_vlan: left promiscuous mode
[  243.753432][ T5870] Bluetooth: hci1: command tx timeout
[  244.023276][ T6444] team0 (unregistering): Port device team_slave_1 removed
[  244.061613][ T6444] team0 (unregistering): Port device team_slave_0 removed
[  244.463306][ T7392] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  244.485402][ T7392] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  244.507019][ T7392] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  244.523874][ T7392] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  244.715094][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.744474][ T7392] 8021q: adding VLAN 0 to HW filter on device team0
[  244.765254][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.772476][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.796623][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.803860][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.159206][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.570717][ T7392] veth0_vlan: entered promiscuous mode
[  245.584122][ T7392] veth1_vlan: entered promiscuous mode
[  245.631507][ T7392] veth0_macvtap: entered promiscuous mode
[  245.647514][ T7392] veth1_macvtap: entered promiscuous mode
[  245.671429][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.694453][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.716201][ T6445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.728353][ T6448] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.751617][ T6448] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.761384][ T6448] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.829847][ T5870] Bluetooth: hci1: command tx timeout
[  245.885897][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.903712][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.941739][ T6446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.952637][ T6446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.527532][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  247.539229][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  247.548317][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  247.558293][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  247.568372][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  247.679796][ T6446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.691425][ T6446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  247.789228][ T6446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.809663][ T6446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  247.909679][ T5182] Bluetooth: hci1: command tx timeout
[  247.953826][ T6446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.964260][ T6446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  248.099926][ T6446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.110723][ T6446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  248.547691][ T6446] bridge_slave_1: left allmulticast mode
[  248.572243][ T6446] bridge_slave_1: left promiscuous mode
[  248.602061][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.671910][ T6446] bridge_slave_0: left allmulticast mode
[  248.678210][ T6446] bridge_slave_0: left promiscuous mode
[  248.709141][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.669760][ T5182] Bluetooth: hci2: command tx timeout
[  249.864878][ T7511] netlink: 'syz.6.387': attribute type 1 has an invalid length.
[  249.902844][ T7511] netlink: 224 bytes leftover after parsing attributes in process `syz.6.387'.
[  250.005101][ T5182] Bluetooth: hci1: command tx timeout
[  250.285319][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  250.294851][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  250.304344][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  250.315172][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  250.339176][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  250.509548][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.523788][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.535007][ T6446] bond0 (unregistering): Released all slaves
[  250.599022][ T7484] chnl_net:caif_netlink_parms(): no params data found
[  250.962174][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.981150][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.988447][ T7484] bridge_slave_0: entered allmulticast mode
[  251.003540][ T7484] bridge_slave_0: entered promiscuous mode
[  251.061051][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.070605][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.077902][ T7484] bridge_slave_1: entered allmulticast mode
[  251.090005][ T7484] bridge_slave_1: entered promiscuous mode
[  251.185484][ T6446] hsr_slave_0: left promiscuous mode
[  251.197109][ T6446] hsr_slave_1: left promiscuous mode
[  251.205570][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.218104][ T6446] net_ratelimit: 10 callbacks suppressed
[  251.218119][ T6446] batadv0: mtu less than device minimum
[  251.238405][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.250884][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.263016][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.275255][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.287648][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.299839][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.311950][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.324082][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.336184][ T6446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.382680][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.391816][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.438468][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.446954][ T6446] batman_adv: batadv0: Interface deactivated: dummy0
[  251.467623][ T6446] batman_adv: batadv0: Removing interface: dummy0
[  251.494360][ T6446] veth1_macvtap: left promiscuous mode
[  251.500037][ T6446] veth0_macvtap: left promiscuous mode
[  251.505725][ T6446] veth1_vlan: left promiscuous mode
[  251.511766][ T6446] veth0_vlan: left promiscuous mode
[  251.756253][ T5870] Bluetooth: hci2: command tx timeout
[  251.994020][ T6446] team0 (unregistering): Port device team_slave_1 removed
[  252.034646][ T6446] team0 (unregistering): Port device team_slave_0 removed
[  252.400932][ T5870] Bluetooth: hci4: command tx timeout
[  252.478816][ T7484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.576700][ T7484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.649347][ T7484] team0: Port device team_slave_0 added
[  252.670777][ T7484] team0: Port device team_slave_1 added
[  252.755916][ T7519] chnl_net:caif_netlink_parms(): no params data found
[  252.888412][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.903274][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.932170][ T7484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.033278][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.053472][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.157003][ T7484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.356103][ T6446] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.393292][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.427497][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.437412][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.451959][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.472947][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.642330][ T6446] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.715165][ T7484] hsr_slave_0: entered promiscuous mode
[  253.722907][ T7484] hsr_slave_1: entered promiscuous mode
[  253.736719][ T7484] debugfs: 'hsr0' already exists in 'hsr'
[  253.748934][ T7484] Cannot create hsr debugfs directory
[  253.826362][ T6446] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.830240][ T5182] Bluetooth: hci2: command tx timeout
[  253.905419][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.925244][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.934762][ T7519] bridge_slave_0: entered allmulticast mode
[  253.945894][ T7519] bridge_slave_0: entered promiscuous mode
[  253.977601][ T6446] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.997154][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.004755][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.012206][ T7519] bridge_slave_1: entered allmulticast mode
[  254.021180][ T7519] bridge_slave_1: entered promiscuous mode
[  254.113572][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.127759][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.234171][ T7519] team0: Port device team_slave_0 added
[  254.285319][ T7519] team0: Port device team_slave_1 added
[  254.386352][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.398977][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.435719][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.470879][ T5182] Bluetooth: hci4: command tx timeout
[  254.495818][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.508073][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.539693][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.701012][ T6446] bridge_slave_1: left allmulticast mode
[  254.706724][ T6446] bridge_slave_1: left promiscuous mode
[  254.718036][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.742029][ T6446] bridge_slave_0: left allmulticast mode
[  254.747737][ T6446] bridge_slave_0: left promiscuous mode
[  254.761606][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.284266][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.295596][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.306289][ T6446] bond0 (unregistering): Released all slaves
[  255.326725][ T7519] hsr_slave_0: entered promiscuous mode
[  255.334680][ T7519] hsr_slave_1: entered promiscuous mode
[  255.343545][ T7519] debugfs: 'hsr0' already exists in 'hsr'
[  255.349343][ T7519] Cannot create hsr debugfs directory
[  255.509850][ T5182] Bluetooth: hci5: command tx timeout
[  255.718540][ T6446] hsr_slave_0: left promiscuous mode
[  255.726286][ T6446] hsr_slave_1: left promiscuous mode
[  255.735455][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.749803][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.759093][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.773654][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.799589][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.864176][ T6446] veth1_macvtap: left promiscuous mode
[  255.882098][ T6446] veth0_macvtap: left promiscuous mode
[  255.889266][ T6446] veth1_vlan: left promiscuous mode
[  255.909908][ T5182] Bluetooth: hci2: command tx timeout
[  255.915360][ T6446] veth0_vlan: left promiscuous mode
[  256.386372][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.404737][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.415907][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.431946][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.443217][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  256.550552][ T5182] Bluetooth: hci4: command tx timeout
[  256.748667][ T6446] team0 (unregistering): Port device team_slave_1 removed
[  256.794889][ T6446] team0 (unregistering): Port device team_slave_0 removed
[  257.295786][ T7484] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  257.318207][ T7484] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  257.375664][ T7484] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  257.393407][ T7556] chnl_net:caif_netlink_parms(): no params data found
[  257.464454][ T7484] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  257.589811][ T5182] Bluetooth: hci5: command tx timeout
[  257.890068][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.897270][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.907049][ T7556] bridge_slave_0: entered allmulticast mode
[  257.916246][ T7556] bridge_slave_0: entered promiscuous mode
[  257.964416][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.983989][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.005500][ T7556] bridge_slave_1: entered allmulticast mode
[  258.014459][ T7556] bridge_slave_1: entered promiscuous mode
[  258.162252][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.176280][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.192285][ T7519] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  258.207217][ T7519] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  258.293946][ T7519] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  258.305236][ T7519] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  258.342884][ T6446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.353519][ T6446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  258.375909][ T7556] team0: Port device team_slave_0 added
[  258.385275][ T7556] team0: Port device team_slave_1 added
[  258.447432][ T6446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.459708][ T6446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  258.469946][ T5182] Bluetooth: hci0: command tx timeout
[  258.502696][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.510632][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.538063][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.573943][ T6446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.584491][ T6446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  258.604181][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.611560][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.638867][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.639831][ T5182] Bluetooth: hci4: command tx timeout
[  258.691769][ T6446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.703285][ T6446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  258.820839][ T7556] hsr_slave_0: entered promiscuous mode
[  258.827759][ T7556] hsr_slave_1: entered promiscuous mode
[  258.834649][ T7556] debugfs: 'hsr0' already exists in 'hsr'
[  258.841488][ T7556] Cannot create hsr debugfs directory
[  258.977186][ T7588] chnl_net:caif_netlink_parms(): no params data found
[  259.185846][ T7484] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.406782][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.428706][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.437404][ T7588] bridge_slave_0: entered allmulticast mode
[  259.454024][ T7588] bridge_slave_0: entered promiscuous mode
[  259.479095][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.491846][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.499172][ T7588] bridge_slave_1: entered allmulticast mode
[  259.518930][ T7588] bridge_slave_1: entered promiscuous mode
[  259.571859][ T6446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.669752][ T5182] Bluetooth: hci5: command tx timeout
[  259.703755][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.738122][ T7484] 8021q: adding VLAN 0 to HW filter on device team0
[  259.793344][ T6446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.821295][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.868741][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.875969][ T6444] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.937093][ T6446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.957338][ T7588] team0: Port device team_slave_0 added
[  259.997773][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.005005][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.015785][ T7588] team0: Port device team_slave_1 added
[  260.077295][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.085428][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.113580][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.143998][ T6446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.177907][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.188712][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.195887][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.223809][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.252964][ T7556] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  260.266491][ T7556] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  260.284014][ T7556] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  260.360556][ T7556] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  260.411837][ T7588] hsr_slave_0: entered promiscuous mode
[  260.419071][ T7588] hsr_slave_1: entered promiscuous mode
[  260.426624][ T7588] debugfs: 'hsr0' already exists in 'hsr'
[  260.433063][ T7588] Cannot create hsr debugfs directory
[  260.550911][ T5182] Bluetooth: hci0: command tx timeout
[  260.608954][ T7519] 8021q: adding VLAN 0 to HW filter on device team0
[  260.801619][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.808820][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.849914][ T6446] bridge_slave_1: left allmulticast mode
[  260.855632][ T6446] bridge_slave_1: left promiscuous mode
[  260.871781][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.895608][ T6446] bridge_slave_0: left allmulticast mode
[  260.902607][ T6446] bridge_slave_0: left promiscuous mode
[  260.908575][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.922446][ T6446] bridge_slave_1: left allmulticast mode
[  260.928156][ T6446] bridge_slave_1: left promiscuous mode
[  260.935474][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.957532][ T6446] bridge_slave_0: left allmulticast mode
[  260.963459][ T6446] bridge_slave_0: left promiscuous mode
[  260.969264][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.466486][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.478594][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.489337][ T6446] bond0 (unregistering): Released all slaves
[  261.749786][ T5182] Bluetooth: hci5: command tx timeout
[  261.853515][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.864436][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.876940][ T6446] bond0 (unregistering): Released all slaves
[  261.906968][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.914194][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.630916][ T5182] Bluetooth: hci0: command tx timeout
[  262.766745][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.813055][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.023442][ T6446] hsr_slave_0: left promiscuous mode
[  263.045041][ T6446] hsr_slave_1: left promiscuous mode
[  263.060371][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.067805][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.076988][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.088606][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.112146][ T6446] hsr_slave_0: left promiscuous mode
[  263.118186][ T6446] hsr_slave_1: left promiscuous mode
[  263.124831][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.132545][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.141589][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.150447][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.184912][ T6446] veth1_macvtap: left promiscuous mode
[  263.194913][ T6446] veth0_macvtap: left promiscuous mode
[  263.200717][ T6446] veth1_vlan: left promiscuous mode
[  263.206037][ T6446] veth0_vlan: left promiscuous mode
[  263.215104][ T6446] veth1_macvtap: left promiscuous mode
[  263.220945][ T6446] veth0_macvtap: left promiscuous mode
[  263.226616][ T6446] veth1_vlan: left promiscuous mode
[  263.232741][ T6446] veth0_vlan: left promiscuous mode
[  263.770910][ T6446] team0 (unregistering): Port device team_slave_1 removed
[  263.813416][ T6446] team0 (unregistering): Port device team_slave_0 removed
[  264.563054][ T6446] team0 (unregistering): Port device team_slave_1 removed
[  264.603228][ T6446] team0 (unregistering): Port device team_slave_0 removed
[  264.710967][ T5182] Bluetooth: hci0: command tx timeout
[  264.977687][ T7556] 8021q: adding VLAN 0 to HW filter on device team0
[  265.065669][ T7519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.097943][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.105171][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.184686][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.192027][ T6444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.255590][ T7588] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  265.322408][ T7588] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  265.385633][ T7588] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  265.458606][ T7588] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  265.536006][ T7556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  265.864752][ T7484] veth0_vlan: entered promiscuous mode
[  265.906378][ T7484] veth1_vlan: entered promiscuous mode
[  266.014443][ T7588] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.175694][ T7588] 8021q: adding VLAN 0 to HW filter on device team0
[  266.241202][ T7484] veth0_macvtap: entered promiscuous mode
[  266.304539][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.311730][ T6444] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.365371][ T7519] veth0_vlan: entered promiscuous mode
[  266.385867][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.418216][ T7484] veth1_macvtap: entered promiscuous mode
[  266.457395][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.464610][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.508019][ T7519] veth1_vlan: entered promiscuous mode
[  266.663056][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.763532][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.796471][ T1156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.871314][ T1156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.882627][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  266.891342][ T7519] veth0_macvtap: entered promiscuous mode
[  266.898490][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  266.907841][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  266.927224][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  266.939178][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.003047][ T6444] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.044333][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.066201][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.089218][ T7519] veth1_macvtap: entered promiscuous mode
[  267.172795][ T6444] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.317269][ T6444] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.443277][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.522896][ T6444] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.573759][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.639912][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.647975][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.685873][ T6446] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.776637][ T6446] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.787721][ T6446] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.827949][ T7556] veth0_vlan: entered promiscuous mode
[  267.845189][ T6446] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.884646][ T6448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.904633][ T6448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.972737][ T7556] veth1_vlan: entered promiscuous mode
[  268.078775][ T7588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.032668][ T5182] Bluetooth: hci1: command tx timeout
[  269.482410][ T6447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.521293][ T6447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.571820][ T6444] bridge_slave_1: left allmulticast mode
[  269.582418][ T6444] bridge_slave_1: left promiscuous mode
[  269.588373][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.616672][ T6444] bridge_slave_0: left allmulticast mode
[  269.633225][ T6444] bridge_slave_0: left promiscuous mode
[  269.650648][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.426749][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.442875][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.456446][ T6444] bond0 (unregistering): Released all slaves
[  271.112951][ T5182] Bluetooth: hci1: command tx timeout
[  271.429217][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.438968][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.533561][ T7556] veth0_macvtap: entered promiscuous mode
[  271.542880][ T7728] chnl_net:caif_netlink_parms(): no params data found
[  271.646311][ T7787] netlink: 'syz.7.396': attribute type 1 has an invalid length.
[  271.686315][ T7787] netlink: 224 bytes leftover after parsing attributes in process `syz.7.396'.
[  271.725905][ T7588] veth0_vlan: entered promiscuous mode
[  272.004036][ T7799] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  272.018142][ T7799] FAT-fs (loop8): unable to read boot sector
[  272.058609][ T7556] veth1_macvtap: entered promiscuous mode
[  272.243209][ T7588] veth1_vlan: entered promiscuous mode
[  272.345892][ T6444] hsr_slave_0: left promiscuous mode
[  272.387754][ T6444] hsr_slave_1: left promiscuous mode
[  273.145209][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.171434][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.186184][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.196275][ T5182] Bluetooth: hci1: command tx timeout
[  273.204717][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.249332][ T6444] veth1_macvtap: left promiscuous mode
[  273.257650][ T6444] veth0_macvtap: left promiscuous mode
[  273.279720][ T6444] veth1_vlan: left promiscuous mode
[  273.285116][ T6444] veth0_vlan: left promiscuous mode
[  273.833774][ T6444] team0 (unregistering): Port device team_slave_1 removed
[  273.874252][ T6444] team0 (unregistering): Port device team_slave_0 removed
[  274.256905][ T7588] veth0_macvtap: entered promiscuous mode
[  274.265049][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.272543][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.281543][ T7728] bridge_slave_0: entered allmulticast mode
[  274.291395][ T7728] bridge_slave_0: entered promiscuous mode
[  274.333885][ T7588] veth1_macvtap: entered promiscuous mode
[  274.343338][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.356851][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.368814][ T7728] bridge_slave_1: entered allmulticast mode
[  274.391760][ T7728] bridge_slave_1: entered promiscuous mode
[  274.477122][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.513957][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.528462][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.624950][ T7728] team0: Port device team_slave_0 added
[  274.634291][ T7728] team0: Port device team_slave_1 added
[  274.648554][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.674864][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.765160][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.783693][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.816396][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.831342][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.838325][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.864433][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.887078][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.128091][   T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.145070][   T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.188153][   T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.210348][   T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.278704][ T5182] Bluetooth: hci1: command tx timeout
[  275.309334][   T62] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.457398][   T62] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.494899][ T7728] hsr_slave_0: entered promiscuous mode
[  275.513470][ T7728] hsr_slave_1: entered promiscuous mode
[  275.524799][   T62] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.599969][   T62] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.615814][ T6444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.645293][ T6444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.752041][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.772668][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.825179][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.850220][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.935437][ T6446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.959504][ T6446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.396163][ T7844] =======================================================
[  276.396163][ T7844] WARNING: The mand mount option has been deprecated and
[  276.396163][ T7844]          and is ignored by this kernel. Remove the mand
[  276.396163][ T7844]          option from the mount to silence this warning.
[  276.396163][ T7844] =======================================================
[  276.469105][ T7844] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  276.517894][ T7844] hpfs: hpfs_map_sector(): read error
[  277.274016][ T7861] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  277.308642][ T7861] EXT4-fs (loop9): unable to read superblock
[  277.473612][ T7728] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  277.498982][ T7728] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  277.541546][ T7728] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  277.562528][ T7728] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  278.728007][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.833979][ T7728] 8021q: adding VLAN 0 to HW filter on device team0
[  278.885323][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.892598][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.938434][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.945930][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.786159][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.858325][ T7728] veth0_vlan: entered promiscuous mode
[  279.872028][ T7728] veth1_vlan: entered promiscuous mode
[  279.998808][ T7728] veth0_macvtap: entered promiscuous mode
[  280.032795][ T7728] veth1_macvtap: entered promiscuous mode
[  280.066226][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.763976][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.828247][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.847561][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.938669][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.998914][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.160382][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.168337][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.243324][ T6447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.279516][ T6447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.283421][ T7902] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.317991][ T7902] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.328968][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  281.343736][ T7902] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.355251][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  281.366273][ T7902] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  281.374424][ T7902] UDF-fs: Scanning with blocksize 512 failed
[  281.416816][ T7902] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.434346][ T7902] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.446248][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  281.457515][ T7902] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.518928][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  281.532775][ T7902] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  281.544492][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.1.392'.
[  281.628546][ T7902] UDF-fs: Scanning with blocksize 1024 failed
[  281.639369][ T7902] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.671022][ T7902] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.693133][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  281.711765][ T7902] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.725760][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  281.752980][ T7902] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  281.769531][ T7902] UDF-fs: Scanning with blocksize 2048 failed
[  281.780573][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  281.810039][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  281.828484][ T7902] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  281.872916][ T7902] UDF-fs: Scanning with blocksize 4096 failed
[  281.879058][ T7902] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  281.996940][ T5182] Bluetooth: hci5: command tx timeout
[  282.147833][ T7918] overlayfs: failed to resolve './file1': -2
[  282.291222][ T7922] blk_print_req_error: 3 callbacks suppressed
[  282.291242][ T7922] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.329024][ T5182] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  282.335704][ T7922] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32
[  282.338815][ T5182] CPU: 0 UID: 0 PID: 5182 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  282.338864][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  282.338881][ T5182] Workqueue: hci1 hci_rx_work
[  282.338945][ T5182] Call Trace:
[  282.338957][ T5182]  <TASK>
[  282.338970][ T5182]  dump_stack_lvl+0x189/0x250
[  282.339017][ T5182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.339047][ T5182]  ? __pfx__printk+0x10/0x10
[  282.339088][ T5182]  ? kernfs_path_from_node+0x250/0x290
[  282.339120][ T5182]  ? kernfs_path_from_node+0x2f/0x290
[  282.339156][ T5182]  sysfs_create_dir_ns+0x259/0x280
[  282.339189][ T5182]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  282.339223][ T5182]  ? do_raw_spin_unlock+0x122/0x240
[  282.339255][ T5182]  kobject_add_internal+0x59f/0xb40
[  282.339291][ T5182]  kobject_add+0x155/0x220
[  282.339321][ T5182]  ? __pfx_kobject_add+0x10/0x10
[  282.339344][ T5182]  ? _raw_spin_unlock+0x28/0x50
[  282.339381][ T5182]  ? get_device_parent+0x366/0x3a0
[  282.339415][ T5182]  device_add+0x408/0xb50
[  282.339454][ T5182]  hci_conn_add_sysfs+0xd5/0x1e0
[  282.339487][ T5182]  le_conn_complete_evt+0xc3a/0x1220
[  282.339541][ T5182]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  282.339580][ T5182]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  282.339607][ T5182]  ? __asan_memcpy+0x40/0x70
[  282.339649][ T5182]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  282.339669][ T5182]  ? skb_pull_data+0xfb/0x200
[  282.339704][ T5182]  hci_le_conn_complete_evt+0x187/0x450
[  282.339751][ T5182]  hci_event_packet+0x78f/0x1200
[  282.339786][ T5182]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  282.339825][ T5182]  ? __pfx_hci_event_packet+0x10/0x10
[  282.339858][ T5182]  ? kcov_remote_start+0x4d3/0x7f0
[  282.339888][ T5182]  ? lockdep_hardirqs_on+0x90/0x150
[  282.339929][ T5182]  ? hci_send_to_monitor+0xe2/0x570
[  282.339957][ T5182]  hci_rx_work+0x46a/0xe80
[  282.340010][ T5182]  ? process_scheduled_works+0x9ef/0x17b0
[  282.340053][ T5182]  process_scheduled_works+0xae1/0x17b0
[  282.340128][ T5182]  ? __pfx_process_scheduled_works+0x10/0x10
[  282.340188][ T5182]  worker_thread+0x8a0/0xda0
[  282.340232][ T5182]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  282.340277][ T5182]  ? __kthread_parkme+0x7b/0x200
[  282.340313][ T5182]  kthread+0x711/0x8a0
[  282.340345][ T5182]  ? __pfx_worker_thread+0x10/0x10
[  282.340383][ T5182]  ? __pfx_kthread+0x10/0x10
[  282.340412][ T5182]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.340443][ T5182]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.340477][ T5182]  ? __pfx_kthread+0x10/0x10
[  282.340503][ T5182]  ret_from_fork+0x4bc/0x870
[  282.340543][ T5182]  ? __pfx_ret_from_fork+0x10/0x10
[  282.340586][ T5182]  ? __switch_to_asm+0x39/0x70
[  282.340617][ T5182]  ? __switch_to_asm+0x33/0x70
[  282.340647][ T5182]  ? __pfx_kthread+0x10/0x10
[  282.340674][ T5182]  ret_from_fork_asm+0x1a/0x30
[  282.340729][ T5182]  </TASK>
[  282.342872][ T5182] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  282.643744][ T5182] Bluetooth: hci1: failed to register connection device
[  283.781978][ T7949] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  283.819823][ T7949] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  283.828296][ T7949] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  283.853959][ T7949] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  283.866296][ T7949] bcachefs: bch2_fs_get_tree() error: EIO
[  283.998731][ T7966] overlayfs: failed to resolve './file0': -2
[  284.069754][ T5878] Bluetooth: hci5: command 0x0406 tx timeout
[  286.774827][ T8056] overlayfs: failed to resolve './file0': -2
[  288.444139][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.454178][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.463994][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.475760][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.487783][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.790056][ T5182] Bluetooth: hci1: command 0x0406 tx timeout
[  288.857192][ T6447] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.978571][ T6447] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.074305][ T6447] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.122125][ T8101] chnl_net:caif_netlink_parms(): no params data found
[  289.160766][ T6447] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.407486][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.422809][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.431455][ T8101] bridge_slave_0: entered allmulticast mode
[  289.448948][ T8101] bridge_slave_0: entered promiscuous mode
[  289.487008][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.495901][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.508268][ T8101] bridge_slave_1: entered allmulticast mode
[  289.516999][ T8101] bridge_slave_1: entered promiscuous mode
[  289.655451][ T6447] bridge_slave_1: left allmulticast mode
[  289.677600][ T6447] bridge_slave_1: left promiscuous mode
[  289.686976][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.710703][ T6447] bridge_slave_0: left allmulticast mode
[  289.716424][ T6447] bridge_slave_0: left promiscuous mode
[  289.742358][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.550569][ T5182] Bluetooth: hci3: command tx timeout
[  290.885379][ T6447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.897383][ T6447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.914787][ T6447] bond0 (unregistering): Released all slaves
[  290.937295][ T8101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.958865][ T8101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.055055][ T8101] team0: Port device team_slave_0 added
[  291.073049][ T8101] team0: Port device team_slave_1 added
[  291.218483][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.226368][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.256156][ T8101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.279953][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.287705][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.314939][ T8101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.454241][ T6447] hsr_slave_0: left promiscuous mode
[  291.467131][ T6447] hsr_slave_1: left promiscuous mode
[  291.475707][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.483782][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.492239][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.500094][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.530969][ T6447] veth1_macvtap: left promiscuous mode
[  291.536631][ T6447] veth0_macvtap: left promiscuous mode
[  291.549004][ T6447] veth1_vlan: left promiscuous mode
[  291.556905][ T6447] veth0_vlan: left promiscuous mode
[  291.955647][ T8156] overlayfs: failed to resolve './file0': -2
[  292.289309][ T6447] team0 (unregistering): Port device team_slave_1 removed
[  292.326445][ T6447] team0 (unregistering): Port device team_slave_0 removed
[  292.629762][ T5182] Bluetooth: hci3: command tx timeout
[  292.668211][ T8101] hsr_slave_0: entered promiscuous mode
[  292.676327][ T8101] hsr_slave_1: entered promiscuous mode
[  292.684761][ T8101] debugfs: 'hsr0' already exists in 'hsr'
[  292.691961][ T8101] Cannot create hsr debugfs directory
[  294.414188][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  294.426588][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  294.435236][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  294.443525][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  294.452992][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  294.713167][ T5182] Bluetooth: hci3: command tx timeout
[  294.823652][ T6447] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.976266][ T6447] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.228674][ T6447] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.373764][ T6447] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.402524][ T8204] netlink: 'syz.2.462': attribute type 10 has an invalid length.
[  295.419338][ T8101] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  295.465081][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.474001][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.500225][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.507457][ T8204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.515594][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.522825][ T8204] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.536996][ T8204] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  295.546153][ T8101] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  295.563626][ T8177] chnl_net:caif_netlink_parms(): no params data found
[  295.598195][ T8101] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  295.647587][ T8209] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S+���+
[  295.661579][ T8101] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  295.871954][ T8221] overlayfs: failed to resolve './file0': -2
[  295.892650][ T6447] bridge_slave_1: left allmulticast mode
[  295.909965][ T6447] bridge_slave_1: left promiscuous mode
[  295.917043][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.932272][ T6447] bridge_slave_0: left allmulticast mode
[  295.937968][ T6447] bridge_slave_0: left promiscuous mode
[  295.963833][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.470361][ T5182] Bluetooth: hci2: command tx timeout
[  296.805862][ T5182] Bluetooth: hci3: command tx timeout
[  297.215102][ T6447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.229352][ T6447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.251702][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  297.253831][ T6447] bond0 (unregistering): Released all slaves
[  297.270334][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  297.280200][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  297.289912][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  297.298496][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  297.325769][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.336231][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.343768][ T8177] bridge_slave_0: entered allmulticast mode
[  297.354596][ T8177] bridge_slave_0: entered promiscuous mode
[  297.365392][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.375184][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.382469][ T8177] bridge_slave_1: entered allmulticast mode
[  297.391666][ T8177] bridge_slave_1: entered promiscuous mode
[  297.501840][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.521990][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.677550][ T8177] team0: Port device team_slave_0 added
[  297.705933][ T8177] team0: Port device team_slave_1 added
[  297.775308][ T6447] hsr_slave_0: left promiscuous mode
[  297.784191][ T6447] hsr_slave_1: left promiscuous mode
[  297.790875][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.798364][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.806528][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.814153][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.837268][ T6447] veth1_macvtap: left promiscuous mode
[  297.854700][ T6447] veth0_macvtap: left promiscuous mode
[  297.861371][ T6447] veth1_vlan: left promiscuous mode
[  297.867374][ T6447] veth0_vlan: left promiscuous mode
[  298.273970][ T8258] overlayfs: failed to resolve './file0': -2
[  298.564423][ T5878] Bluetooth: hci2: command tx timeout
[  298.869314][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.885608][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.896798][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.905220][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.922146][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.930629][ T6447] team0 (unregistering): Port device team_slave_1 removed
[  299.074739][ T6447] team0 (unregistering): Port device team_slave_0 removed
[  299.359565][ T5182] Bluetooth: hci4: command tx timeout
[  299.746283][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.754138][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.780749][ T8177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.806826][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.818614][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.848109][ T8177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.080502][ T5182] Bluetooth: hci0: command tx timeout
[  300.097403][ T8177] hsr_slave_0: entered promiscuous mode
[  300.104393][ T8177] hsr_slave_1: entered promiscuous mode
[  300.111522][ T8177] debugfs: 'hsr0' already exists in 'hsr'
[  300.119994][ T8177] Cannot create hsr debugfs directory
[  300.632089][ T5182] Bluetooth: hci2: command tx timeout
[  301.040506][ T5182] Bluetooth: hci1: command tx timeout
[  301.287748][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.364137][ T8261] chnl_net:caif_netlink_parms(): no params data found
[  301.432160][ T5182] Bluetooth: hci4: command tx timeout
[  301.479263][ T8290] overlayfs: failed to resolve './file0': -2
[  301.531207][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.611232][ T8101] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.618547][ T8243] chnl_net:caif_netlink_parms(): no params data found
[  301.681745][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.872377][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.952049][ T8101] 8021q: adding VLAN 0 to HW filter on device team0
[  302.127242][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.134430][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.194593][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.201772][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.267644][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.276863][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.284294][ T8261] bridge_slave_0: entered allmulticast mode
[  302.297285][ T8261] bridge_slave_0: entered promiscuous mode
[  302.308353][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.318387][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.331230][ T8261] bridge_slave_1: entered allmulticast mode
[  302.343416][ T8261] bridge_slave_1: entered promiscuous mode
[  302.417774][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.436903][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.558727][ T8261] team0: Port device team_slave_0 added
[  302.710092][ T5182] Bluetooth: hci2: command tx timeout
[  303.110100][ T5182] Bluetooth: hci1: command tx timeout
[  303.184434][ T8261] team0: Port device team_slave_1 added
[  303.305496][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.316694][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.326429][ T8243] bridge_slave_0: entered allmulticast mode
[  303.338116][ T8243] bridge_slave_0: entered promiscuous mode
[  303.350459][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.357603][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.365357][ T8243] bridge_slave_1: entered allmulticast mode
[  303.375764][ T8243] bridge_slave_1: entered promiscuous mode
[  303.414676][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.422292][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.450070][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.463288][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.471074][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.499350][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.519597][ T5182] Bluetooth: hci4: command tx timeout
[  304.545064][ T8261] hsr_slave_0: entered promiscuous mode
[  304.552809][ T8261] hsr_slave_1: entered promiscuous mode
[  304.559196][ T8261] debugfs: 'hsr0' already exists in 'hsr'
[  304.568087][ T8261] Cannot create hsr debugfs directory
[  304.577277][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.590662][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.657419][ T8101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  304.762846][ T8332] overlayfs: failed to resolve './file0': -2
[  305.114110][ T1156] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.193412][ T5182] Bluetooth: hci1: command tx timeout
[  305.229292][ T8243] team0: Port device team_slave_0 added
[  305.499194][ T1156] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.593643][ T5182] Bluetooth: hci4: command tx timeout
[  306.294935][ T8177] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  306.336629][ T8177] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  306.367637][ T8243] team0: Port device team_slave_1 added
[  306.435141][ T1156] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.530846][ T8177] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  306.723750][ T1156] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.741083][ T8177] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  306.959414][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.968265][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.037780][ T8243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.269878][ T5182] Bluetooth: hci1: command tx timeout
[  307.410481][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.417477][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.465606][ T8243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.601196][ T8101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.916772][ T8243] hsr_slave_0: entered promiscuous mode
[  307.926364][ T8243] hsr_slave_1: entered promiscuous mode
[  307.941036][ T8243] debugfs: 'hsr0' already exists in 'hsr'
[  307.946814][ T8243] Cannot create hsr debugfs directory
[  308.024963][ T1156] bridge_slave_1: left allmulticast mode
[  308.035405][ T1156] bridge_slave_1: left promiscuous mode
[  308.041522][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.070585][ T1156] bridge_slave_0: left allmulticast mode
[  308.076362][ T1156] bridge_slave_0: left promiscuous mode
[  308.082522][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.098888][ T1156] bridge_slave_1: left allmulticast mode
[  308.107304][ T1156] bridge_slave_1: left promiscuous mode
[  308.113288][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.129027][ T1156] bridge_slave_0: left allmulticast mode
[  308.136154][ T1156] bridge_slave_0: left promiscuous mode
[  308.147304][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.556234][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.567244][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.577462][ T1156] bond0 (unregistering): Released all slaves
[  308.850291][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.862571][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.873963][ T1156] bond0 (unregistering): Released all slaves
[  309.358648][ T8101] veth0_vlan: entered promiscuous mode
[  309.537795][ T8101] veth1_vlan: entered promiscuous mode
[  309.655558][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.828278][ T1156] hsr_slave_0: left promiscuous mode
[  309.838675][ T1156] hsr_slave_1: left promiscuous mode
[  309.847723][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.933194][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.954787][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.966350][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.998210][ T8414] overlayfs: failed to resolve './file0': -2
[  310.006911][ T1156] hsr_slave_0: left promiscuous mode
[  310.015911][ T1156] hsr_slave_1: left promiscuous mode
[  310.022545][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.030346][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.038393][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.047005][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.090574][ T1156] veth1_macvtap: left promiscuous mode
[  310.096162][ T1156] veth0_macvtap: left promiscuous mode
[  310.102364][ T1156] veth1_vlan: left promiscuous mode
[  310.165347][ T1156] veth0_vlan: left promiscuous mode
[  310.250486][ T1156] veth1_macvtap: left promiscuous mode
[  310.256365][ T1156] veth0_macvtap: left promiscuous mode
[  310.262291][ T1156] veth1_vlan: left promiscuous mode
[  310.299870][ T1156] veth0_vlan: left promiscuous mode
[  312.126847][ T1156] team0 (unregistering): Port device team_slave_1 removed
[  312.220192][ T1156] team0 (unregistering): Port device team_slave_0 removed
[  314.181743][ T1156] team0 (unregistering): Port device team_slave_1 removed
[  314.217452][ T1156] team0 (unregistering): Port device team_slave_0 removed
[  314.667850][ T8177] 8021q: adding VLAN 0 to HW filter on device team0
[  314.702573][ T8101] veth0_macvtap: entered promiscuous mode
[  314.737063][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.744280][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.759226][ T8261] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  314.788563][ T8261] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  315.021360][ T8101] veth1_macvtap: entered promiscuous mode
[  315.713486][ T8261] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  315.745446][ T8261] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  316.123528][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.130851][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.319641][ T8101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.358671][ T8101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.524719][ T6447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.538921][ T6447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.604984][ T6447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.629933][ T6447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.931197][ T8243] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  316.957193][ T8243] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  316.997630][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.061190][ T8243] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  317.087128][ T8243] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  317.159212][ T8261] 8021q: adding VLAN 0 to HW filter on device team0
[  317.194444][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.227695][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.249500][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.284280][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.291476][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.363940][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.371176][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.462677][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.492279][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.558947][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.708691][ T8261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  317.739693][ T8261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  317.959272][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.069787][ T8243] 8021q: adding VLAN 0 to HW filter on device team0
[  318.118348][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.125551][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.183339][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.190562][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.717582][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.738875][ T8177] veth0_vlan: entered promiscuous mode
[  318.779130][ T8177] veth1_vlan: entered promiscuous mode
[  318.921497][ T8177] veth0_macvtap: entered promiscuous mode
[  318.953219][ T8177] veth1_macvtap: entered promiscuous mode
[  319.134886][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.192256][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.209378][ T8243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.268585][ T1156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.307245][ T1156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.336821][ T1156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.358099][ T8498] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  319.384773][ T1156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.406123][ T8498] bcachefs (/dev/loop3): error reading default superblock: IO error: -5
[  319.425678][ T8498] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  319.520836][ T8498] bcachefs (/dev/loop3): error reading superblock: IO error: -5
[  319.604891][ T8498] bcachefs: bch2_fs_get_tree() error: EIO
[  320.250627][ T5182] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  321.154924][ T8243] veth0_vlan: entered promiscuous mode
[  321.204249][ T8243] veth1_vlan: entered promiscuous mode
[  321.253668][ T6445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.316731][ T6445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.837568][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.848390][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.887173][ T8243] veth0_macvtap: entered promiscuous mode
[  321.998862][ T8243] veth1_macvtap: entered promiscuous mode
[  322.215967][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.307813][ T8261] veth0_vlan: entered promiscuous mode
[  322.546778][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.227948][ T8261] veth1_vlan: entered promiscuous mode
[  323.263574][ T6447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.508269][ T6447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.537864][ T6447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.529718][ T6447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.723422][ T8261] veth0_macvtap: entered promiscuous mode
[  324.805393][ T8261] veth1_macvtap: entered promiscuous mode
[  324.945124][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.963007][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.999722][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.024204][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.332700][ T6445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.371684][ T6445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.435873][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.482334][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.529271][ T6448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.602677][ T6448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.107399][ T6446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.179960][ T6446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.221012][ T8607] bridge_slave_0: left allmulticast mode
[  327.226775][ T8607] bridge_slave_0: left promiscuous mode
[  327.310149][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.478739][ T8607] bridge_slave_1: left allmulticast mode
[  327.516477][ T8607] bridge_slave_1: left promiscuous mode
[  327.525791][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.579010][ T8607] bond0: (slave bond_slave_0): Releasing backup interface
[  327.733925][ T8607] bond0: (slave bond_slave_1): Releasing backup interface
[  327.789644][ T8607] team0: Port device team_slave_0 removed
[  327.813148][ T8607] team0: Port device team_slave_1 removed
[  327.827646][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.853004][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.894896][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.908072][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.966602][ T8607] net_ratelimit: 30 callbacks suppressed
[  327.966619][ T8607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  328.100782][ T8610] vlan0: entered promiscuous mode
[  328.135749][ T8610] team0: Port device vlan0 added
[  328.241432][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.292726][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.879102][ T8654] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  331.071879][ T8654] EXT4-fs (loop4): unable to read superblock
[  333.729491][ T8680] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  334.636018][ T8690] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  335.677121][ T8690] EXT4-fs (loop3): unable to read superblock
[  336.307833][ T8716] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  336.307833][ T8716]    program syz.0.538 not setting count and/or reply_len properly
[  336.647004][ T8722] overlayfs: failed to clone upperpath
[  337.147331][ T8734] vivid-000: disconnect
[  337.230717][ T8733] vivid-000: reconnect
[  337.321950][ T8741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  340.097865][ T8777] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  340.381481][ T8777] EXT4-fs (loop0): unable to read superblock
[  341.169257][ T8783] overlayfs: failed to clone upperpath
[  341.558043][ T8791] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  341.558043][ T8791]    program syz.5.554 not setting count and/or reply_len properly
[  341.650484][ T8793] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  341.688785][ T8793] EXT4-fs (loop0): unable to read superblock
[  341.783641][ T8799] No control pipe specified
[  342.779715][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'.
[  344.061298][ T8853] overlayfs: failed to clone upperpath
[  352.272529][ T5182] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  352.282344][ T5182] CPU: 0 UID: 0 PID: 5182 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  352.282365][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  352.282376][ T5182] Workqueue: hci1 hci_rx_work
[  352.282402][ T5182] Call Trace:
[  352.282408][ T5182]  <TASK>
[  352.282415][ T5182]  dump_stack_lvl+0x189/0x250
[  352.282439][ T5182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.282457][ T5182]  ? __pfx__printk+0x10/0x10
[  352.282483][ T5182]  ? kernfs_path_from_node+0x250/0x290
[  352.282503][ T5182]  ? kernfs_path_from_node+0x2f/0x290
[  352.282526][ T5182]  sysfs_create_dir_ns+0x259/0x280
[  352.282548][ T5182]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  352.282569][ T5182]  ? do_raw_spin_unlock+0x122/0x240
[  352.282590][ T5182]  kobject_add_internal+0x59f/0xb40
[  352.282613][ T5182]  kobject_add+0x155/0x220
[  352.282631][ T5182]  ? __pfx_kobject_add+0x10/0x10
[  352.282646][ T5182]  ? _raw_spin_unlock+0x28/0x50
[  352.282670][ T5182]  ? get_device_parent+0x366/0x3a0
[  352.282692][ T5182]  device_add+0x408/0xb50
[  352.282713][ T5182]  hci_conn_add_sysfs+0xd5/0x1e0
[  352.282734][ T5182]  le_conn_complete_evt+0xc3a/0x1220
[  352.282783][ T5182]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  352.282807][ T5182]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  352.282821][ T5182]  ? __asan_memcpy+0x40/0x70
[  352.282846][ T5182]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  352.282860][ T5182]  ? skb_pull_data+0xfb/0x200
[  352.282882][ T5182]  hci_le_conn_complete_evt+0x187/0x450
[  352.282911][ T5182]  hci_event_packet+0x78f/0x1200
[  352.282934][ T5182]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  352.282958][ T5182]  ? __pfx_hci_event_packet+0x10/0x10
[  352.282980][ T5182]  ? kcov_remote_start+0x4d3/0x7f0
[  352.282999][ T5182]  ? lockdep_hardirqs_on+0x90/0x150
[  352.283024][ T5182]  ? hci_send_to_monitor+0xe2/0x570
[  352.283042][ T5182]  hci_rx_work+0x46a/0xe80
[  352.283067][ T5182]  ? process_scheduled_works+0x9ef/0x17b0
[  352.283091][ T5182]  process_scheduled_works+0xae1/0x17b0
[  352.283136][ T5182]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.283172][ T5182]  worker_thread+0x8a0/0xda0
[  352.283197][ T5182]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  352.283225][ T5182]  ? __kthread_parkme+0x7b/0x200
[  352.283247][ T5182]  kthread+0x711/0x8a0
[  352.283267][ T5182]  ? __pfx_worker_thread+0x10/0x10
[  352.283289][ T5182]  ? __pfx_kthread+0x10/0x10
[  352.283307][ T5182]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.283327][ T5182]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.283348][ T5182]  ? __pfx_kthread+0x10/0x10
[  352.283365][ T5182]  ret_from_fork+0x4bc/0x870
[  352.283389][ T5182]  ? __pfx_ret_from_fork+0x10/0x10
[  352.283416][ T5182]  ? __switch_to_asm+0x39/0x70
[  352.283435][ T5182]  ? __switch_to_asm+0x33/0x70
[  352.283454][ T5182]  ? __pfx_kthread+0x10/0x10
[  352.283471][ T5182]  ret_from_fork_asm+0x1a/0x30
[  352.283505][ T5182]  </TASK>
[  352.283596][ T5182] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  352.573896][ T5182] Bluetooth: hci1: failed to register connection device
[  353.109767][ T5182] Bluetooth: hci5: command 0xfc11 tx timeout
[  353.139178][ T5878] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  355.055070][ T8971] netlink: 368 bytes leftover after parsing attributes in process `syz.5.597'.
[  355.612688][ T5878] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1
[  356.997904][ T5878] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  357.007768][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  357.007799][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  357.007814][ T5878] Workqueue: hci2 hci_rx_work
[  357.007846][ T5878] Call Trace:
[  357.007854][ T5878]  <TASK>
[  357.007864][ T5878]  dump_stack_lvl+0x189/0x250
[  357.007897][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.007924][ T5878]  ? __pfx__printk+0x10/0x10
[  357.007961][ T5878]  ? kernfs_path_from_node+0x250/0x290
[  357.007987][ T5878]  ? kernfs_path_from_node+0x2f/0x290
[  357.008019][ T5878]  sysfs_create_dir_ns+0x259/0x280
[  357.008049][ T5878]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  357.008079][ T5878]  ? do_raw_spin_unlock+0x122/0x240
[  357.008109][ T5878]  kobject_add_internal+0x59f/0xb40
[  357.008142][ T5878]  kobject_add+0x155/0x220
[  357.008168][ T5878]  ? __pfx_kobject_add+0x10/0x10
[  357.008190][ T5878]  ? _raw_spin_unlock+0x28/0x50
[  357.008224][ T5878]  ? get_device_parent+0x366/0x3a0
[  357.008255][ T5878]  device_add+0x408/0xb50
[  357.008297][ T5878]  hci_conn_add_sysfs+0xd5/0x1e0
[  357.008329][ T5878]  le_conn_complete_evt+0xc3a/0x1220
[  357.008377][ T5878]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  357.008412][ T5878]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  357.008431][ T5878]  ? __asan_memcpy+0x40/0x70
[  357.008467][ T5878]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  357.008486][ T5878]  ? skb_pull_data+0xfb/0x200
[  357.008516][ T5878]  hci_le_conn_complete_evt+0x187/0x450
[  357.008558][ T5878]  hci_event_packet+0x78f/0x1200
[  357.008589][ T5878]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  357.008625][ T5878]  ? __pfx_hci_event_packet+0x10/0x10
[  357.008655][ T5878]  ? kcov_remote_start+0x4d3/0x7f0
[  357.008683][ T5878]  ? lockdep_hardirqs_on+0x90/0x150
[  357.008725][ T5878]  ? hci_send_to_monitor+0xe2/0x570
[  357.008751][ T5878]  hci_rx_work+0x46a/0xe80
[  357.008788][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  357.008823][ T5878]  process_scheduled_works+0xae1/0x17b0
[  357.008889][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  357.008938][ T5878]  worker_thread+0x8a0/0xda0
[  357.008974][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  357.009013][ T5878]  ? __kthread_parkme+0x7b/0x200
[  357.009045][ T5878]  kthread+0x711/0x8a0
[  357.009074][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  357.009104][ T5878]  ? __pfx_kthread+0x10/0x10
[  357.009130][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.009158][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.009187][ T5878]  ? __pfx_kthread+0x10/0x10
[  357.009212][ T5878]  ret_from_fork+0x4bc/0x870
[  357.009246][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  357.009297][ T5878]  ? __switch_to_asm+0x39/0x70
[  357.009323][ T5878]  ? __switch_to_asm+0x33/0x70
[  357.009349][ T5878]  ? __pfx_kthread+0x10/0x10
[  357.009372][ T5878]  ret_from_fork_asm+0x1a/0x30
[  357.009420][ T5878]  </TASK>
[  357.283629][ T5878] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  357.298209][ T5878] Bluetooth: hci2: failed to register connection device
[  357.322822][ T5878] ==================================================================
[  357.330927][ T5878] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040
[  357.339000][ T5878] Read of size 8 at addr ffff88807b931480 by task kworker/u9:8/5878
[  357.346984][ T5878] 
[  357.349318][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  357.349337][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  357.349349][ T5878] Workqueue: hci2 hci_rx_work
[  357.349377][ T5878] Call Trace:
[  357.349385][ T5878]  <TASK>
[  357.349392][ T5878]  dump_stack_lvl+0x189/0x250
[  357.349419][ T5878]  ? __kasan_check_byte+0x12/0x40
[  357.349441][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.349465][ T5878]  ? lock_release+0x4b/0x3e0
[  357.349496][ T5878]  ? __virt_addr_valid+0x4a5/0x5c0
[  357.349520][ T5878]  print_report+0xca/0x240
[  357.349535][ T5878]  ? l2cap_connect_cfm+0x6e4/0x1040
[  357.349549][ T5878]  kasan_report+0x118/0x150
[  357.349565][ T5878]  ? l2cap_connect_cfm+0x6e4/0x1040
[  357.349583][ T5878]  l2cap_connect_cfm+0x6e4/0x1040
[  357.349602][ T5878]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  357.349619][ T5878]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  357.349634][ T5878]  hci_connect_cfm+0x95/0x140
[  357.349657][ T5878]  le_conn_complete_evt+0xcd3/0x1220
[  357.349686][ T5878]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  357.349709][ T5878]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  357.349723][ T5878]  ? __asan_memcpy+0x40/0x70
[  357.349745][ T5878]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  357.349758][ T5878]  ? skb_pull_data+0xfb/0x200
[  357.349777][ T5878]  hci_le_conn_complete_evt+0x187/0x450
[  357.349802][ T5878]  hci_event_packet+0x78f/0x1200
[  357.349823][ T5878]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  357.349846][ T5878]  ? __pfx_hci_event_packet+0x10/0x10
[  357.349865][ T5878]  ? kcov_remote_start+0x4d3/0x7f0
[  357.349884][ T5878]  ? lockdep_hardirqs_on+0x90/0x150
[  357.349908][ T5878]  ? hci_send_to_monitor+0xe2/0x570
[  357.349923][ T5878]  hci_rx_work+0x46a/0xe80
[  357.349945][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  357.349969][ T5878]  process_scheduled_works+0xae1/0x17b0
[  357.350001][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  357.350030][ T5878]  worker_thread+0x8a0/0xda0
[  357.350054][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  357.350078][ T5878]  ? __kthread_parkme+0x7b/0x200
[  357.350095][ T5878]  kthread+0x711/0x8a0
[  357.350113][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  357.350135][ T5878]  ? __pfx_kthread+0x10/0x10
[  357.350151][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.350172][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.350193][ T5878]  ? __pfx_kthread+0x10/0x10
[  357.350209][ T5878]  ret_from_fork+0x4bc/0x870
[  357.350238][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  357.350262][ T5878]  ? __switch_to_asm+0x39/0x70
[  357.350281][ T5878]  ? __switch_to_asm+0x33/0x70
[  357.350300][ T5878]  ? __pfx_kthread+0x10/0x10
[  357.350316][ T5878]  ret_from_fork_asm+0x1a/0x30
[  357.350344][ T5878]  </TASK>
[  357.350350][ T5878] 
[  357.621134][ T5878] Allocated by task 5878:
[  357.625458][ T5878]  kasan_save_track+0x3e/0x80
[  357.630236][ T5878]  __kasan_kmalloc+0x93/0xb0
[  357.634851][ T5878]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  357.640233][ T5878]  l2cap_chan_create+0x50/0x760
[  357.645088][ T5878]  l2cap_sock_new_connection_cb+0x182/0x2b0
[  357.650993][ T5878]  l2cap_connect_cfm+0x37a/0x1040
[  357.656063][ T5878]  hci_connect_cfm+0x95/0x140
[  357.660758][ T5878]  le_conn_complete_evt+0xcd3/0x1220
[  357.666053][ T5878]  hci_le_conn_complete_evt+0x187/0x450
[  357.671612][ T5878]  hci_event_packet+0x78f/0x1200
[  357.676570][ T5878]  hci_rx_work+0x46a/0xe80
[  357.680985][ T5878]  process_scheduled_works+0xae1/0x17b0
[  357.686530][ T5878]  worker_thread+0x8a0/0xda0
[  357.691125][ T5878]  kthread+0x711/0x8a0
[  357.695205][ T5878]  ret_from_fork+0x4bc/0x870
[  357.699797][ T5878]  ret_from_fork_asm+0x1a/0x30
[  357.704561][ T5878] 
[  357.706876][ T5878] Freed by task 8999:
[  357.710846][ T5878]  kasan_save_track+0x3e/0x80
[  357.715523][ T5878]  __kasan_save_free_info+0x46/0x50
[  357.720719][ T5878]  __kasan_slab_free+0x5c/0x80
[  357.725503][ T5878]  kfree+0x19c/0x6e0
[  357.729395][ T5878]  l2cap_sock_cleanup_listen+0xea/0x3e0
[  357.734947][ T5878]  l2cap_sock_release+0x6a/0x210
[  357.739877][ T5878]  sock_close+0xc3/0x240
[  357.744118][ T5878]  __fput+0x44c/0xa70
[  357.748100][ T5878]  task_work_run+0x1d4/0x260
[  357.752696][ T5878]  exit_to_user_mode_loop+0xec/0x130
[  357.758002][ T5878]  do_syscall_64+0x2bd/0xfa0
[  357.762705][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.768775][ T5878] 
[  357.771112][ T5878] The buggy address belongs to the object at ffff88807b931000
[  357.771112][ T5878]  which belongs to the cache kmalloc-2k of size 2048
[  357.785167][ T5878] The buggy address is located 1152 bytes inside of
[  357.785167][ T5878]  freed 2048-byte region [ffff88807b931000, ffff88807b931800)
[  357.799152][ T5878] 
[  357.801486][ T5878] The buggy address belongs to the physical page:
[  357.807922][ T5878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b930
[  357.816686][ T5878] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  357.825282][ T5878] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  357.833273][ T5878] page_type: f5(slab)
[  357.837257][ T5878] raw: 00fff00000000040 ffff88801a842000 0000000000000000 0000000000000001
[  357.845928][ T5878] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  357.854512][ T5878] head: 00fff00000000040 ffff88801a842000 0000000000000000 0000000000000001
[  357.863185][ T5878] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  357.871883][ T5878] head: 00fff00000000003 ffffea0001ee4c01 00000000ffffffff 00000000ffffffff
[  357.880658][ T5878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  357.889354][ T5878] page dumped because: kasan: bad access detected
[  357.896054][ T5878] page_owner tracks the page as allocated
[  357.901799][ T5878] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7686, tgid 7686 (kworker/1:7), ts 320150326984, free_ts 320014329513
[  357.923244][ T5878]  post_alloc_hook+0x240/0x2a0
[  357.928019][ T5878]  get_page_from_freelist+0x21e4/0x22c0
[  357.933558][ T5878]  __alloc_frozen_pages_noprof+0x181/0x370
[  357.939360][ T5878]  alloc_pages_mpol+0x232/0x4a0
[  357.944217][ T5878]  allocate_slab+0x96/0x3a0
[  357.948740][ T5878]  ___slab_alloc+0xe94/0x1920
[  357.953437][ T5878]  __slab_alloc+0x65/0x100
[  357.957861][ T5878]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[  357.964286][ T5878]  kmalloc_reserve+0x136/0x290
[  357.969063][ T5878]  __alloc_skb+0x142/0x2d0
[  357.973485][ T5878]  mld_newpack+0x13c/0xc40
[  357.977947][ T5878]  add_grhead+0x5a/0x2a0
[  357.982204][ T5878]  add_grec+0x1452/0x1740
[  357.986572][ T5878]  mld_ifc_work+0x6ed/0xd60
[  357.991109][ T5878]  process_scheduled_works+0xae1/0x17b0
[  357.996688][ T5878]  worker_thread+0x8a0/0xda0
[  358.001291][ T5878] page last free pid 5232 tgid 5232 stack trace:
[  358.007627][ T5878]  __free_frozen_pages+0xbc4/0xd30
[  358.012761][ T5878]  __put_partials+0x146/0x170
[  358.017628][ T5878]  put_cpu_partial+0x1f2/0x2e0
[  358.022415][ T5878]  __slab_free+0x2b9/0x390
[  358.026838][ T5878]  qlist_free_all+0x97/0x140
[  358.031442][ T5878]  kasan_quarantine_reduce+0x148/0x160
[  358.036951][ T5878]  __kasan_slab_alloc+0x22/0x80
[  358.041804][ T5878]  __kmalloc_noprof+0x3c3/0x7f0
[  358.046663][ T5878]  tomoyo_realpath_from_path+0xe3/0x5d0
[  358.052219][ T5878]  tomoyo_path_perm+0x213/0x4b0
[  358.057118][ T5878]  security_inode_getattr+0x12f/0x330
[  358.062560][ T5878]  __x64_sys_newfstat+0xfc/0x200
[  358.067523][ T5878]  do_syscall_64+0xfa/0xfa0
[  358.072048][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.077993][ T5878] 
[  358.080342][ T5878] Memory state around the buggy address:
[  358.086062][ T5878]  ffff88807b931380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  358.094261][ T5878]  ffff88807b931400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  358.102339][ T5878] >ffff88807b931480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  358.110400][ T5878]                    ^
[  358.114469][ T5878]  ffff88807b931500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  358.122526][ T5878]  ffff88807b931580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  358.130759][ T5878] ==================================================================
[  358.141366][ T5878] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  358.148584][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  358.158055][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  358.168133][ T5878] Workqueue: hci2 hci_rx_work
[  358.172863][ T5878] Call Trace:
[  358.176162][ T5878]  <TASK>
[  358.179154][ T5878]  dump_stack_lvl+0x99/0x250
[  358.183779][ T5878]  ? __asan_memcpy+0x40/0x70
[  358.188395][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.193615][ T5878]  ? __pfx__printk+0x10/0x10
[  358.198233][ T5878]  vpanic+0x237/0x6d0
[  358.202230][ T5878]  ? __pfx_vpanic+0x10/0x10
[  358.206745][ T5878]  ? preempt_schedule+0xae/0xc0
[  358.211626][ T5878]  ? __pfx_preempt_schedule+0x10/0x10
[  358.217036][ T5878]  panic+0xb9/0xc0
[  358.220782][ T5878]  ? __pfx_panic+0x10/0x10
[  358.225209][ T5878]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  358.231114][ T5878]  ? l2cap_connect_cfm+0x6e4/0x1040
[  358.236323][ T5878]  check_panic_on_warn+0x89/0xb0
[  358.241271][ T5878]  ? l2cap_connect_cfm+0x6e4/0x1040
[  358.246473][ T5878]  end_report+0x78/0x160
[  358.250717][ T5878]  kasan_report+0x129/0x150
[  358.255240][ T5878]  ? l2cap_connect_cfm+0x6e4/0x1040
[  358.260441][ T5878]  l2cap_connect_cfm+0x6e4/0x1040
[  358.265584][ T5878]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  358.271218][ T5878]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  358.276696][ T5878]  hci_connect_cfm+0x95/0x140
[  358.281393][ T5878]  le_conn_complete_evt+0xcd3/0x1220
[  358.286713][ T5878]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  358.292450][ T5878]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  358.298097][ T5878]  ? __asan_memcpy+0x40/0x70
[  358.302723][ T5878]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  358.308992][ T5878]  ? skb_pull_data+0xfb/0x200
[  358.313718][ T5878]  hci_le_conn_complete_evt+0x187/0x450
[  358.319292][ T5878]  hci_event_packet+0x78f/0x1200
[  358.324242][ T5878]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  358.329566][ T5878]  ? __pfx_hci_event_packet+0x10/0x10
[  358.334987][ T5878]  ? kcov_remote_start+0x4d3/0x7f0
[  358.340122][ T5878]  ? lockdep_hardirqs_on+0x90/0x150
[  358.345351][ T5878]  ? hci_send_to_monitor+0xe2/0x570
[  358.350571][ T5878]  hci_rx_work+0x46a/0xe80
[  358.355014][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  358.360748][ T5878]  process_scheduled_works+0xae1/0x17b0
[  358.366328][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  358.372356][ T5878]  worker_thread+0x8a0/0xda0
[  358.377076][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  358.383442][ T5878]  ? __kthread_parkme+0x7b/0x200
[  358.388404][ T5878]  kthread+0x711/0x8a0
[  358.392487][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  358.397648][ T5878]  ? __pfx_kthread+0x10/0x10
[  358.402265][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  358.407500][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.412744][ T5878]  ? __pfx_kthread+0x10/0x10
[  358.417356][ T5878]  ret_from_fork+0x4bc/0x870
[  358.421962][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  358.427103][ T5878]  ? __switch_to_asm+0x39/0x70
[  358.431925][ T5878]  ? __switch_to_asm+0x33/0x70
[  358.436711][ T5878]  ? __pfx_kthread+0x10/0x10
[  358.441311][ T5878]  ret_from_fork_asm+0x1a/0x30
[  358.446120][ T5878]  </TASK>
[  358.449527][ T5878] Kernel Offset: disabled
[  358.453869][ T5878] Rebooting in 86400 seconds..