last executing test programs: 6m53.746448848s ago: executing program 32 (id=25): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000012c0)={0x18, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) get_robust_list(0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {&(0x7f0000000f40)=""/253, 0xfd}, {0x0}], 0x4, &(0x7f0000001240), 0x0, 0x0) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', 0x0) 6m46.711358197s ago: executing program 33 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100006f7547cc85ee04ea21e7db2bedab06aa94ba931cebae9fdf2c6a611427d16ddb1cf3f5d6c3f3f77fd5a05b188291eb77260e276d7c1ece1c", @ANYRES8=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x44, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000f40)="$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") 6m30.177525483s ago: executing program 34 (id=50): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r0 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa40bb886400007e3fab95892f"], 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000700)={0x8, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0xfb7}}, {{0xa, 0x4, 0x1002, @remote, 0x6}}}, 0x108) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) io_setup(0x6, &(0x7f0000000680)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000380)={{0x2, 0x3, 0x8000004, 0x7, 'syz1\x00', 0x1}, 0x0, 0x100, 0xb79, 0x0, 0x6, 0x2, 'syz0\x00', &(0x7f00000000c0)=['\\($#\xa1\xb7\x00', './cgroup.cpu/syz0\x00', './cgroup.cpu/syz0\x00', '-}\xe3b:\xe0\x92\x00', './cgroup.cpu/syz0\x00', './cgroup.cpu/syz0\x00'], 0x57}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x424ec1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 5m19.898399886s ago: executing program 4 (id=141): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) 5m5.966962874s ago: executing program 4 (id=155): socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 5m1.126501786s ago: executing program 4 (id=145): socket$kcm(0x10, 0x7, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) creat(&(0x7f0000000300)='./file0\x00', 0xe8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x644140, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 4m53.797425486s ago: executing program 4 (id=152): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) 4m52.417529435s ago: executing program 8 (id=159): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000002c0)=0xd) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ptrace$setopts(0x4206, r3, 0x1b6, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r2, &(0x7f0000000200)) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0xfa2, 0x7, 0x800, 0x2, 0x8000, 0xffffffffffffffff}) 4m50.50145954s ago: executing program 8 (id=160): r0 = io_uring_setup(0x4412, &(0x7f00000005c0)={0x0, 0x8af5, 0x20000, 0x0, 0xff}) fstat(r0, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000000c0)={0x1}) chdir(&(0x7f0000000040)='./file0\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000180)={0x0, {0x2e, 0x8000000000000000, 0xd2a1, 0x0, 0xb}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 4m50.37353606s ago: executing program 4 (id=162): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 4m47.626878226s ago: executing program 35 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) io_setup(0x8, 0x0) io_pgetevents(0x0, 0xcd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 4m45.189668207s ago: executing program 8 (id=166): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r2, &(0x7f00000061c0)={0x2020}, 0x2020) 4m45.186407834s ago: executing program 4 (id=167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x0, @local}, {0x1, @random="9d4da8c461c7"}, 0x6, {0x2, 0x0, @rand_addr=0x64010102}, 'syz_tun\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20040000, 0x0, 0x2, 0x4, 0x7, 0x400, 0x7}}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) readlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m43.922687016s ago: executing program 36 (id=147): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getenv(0x4201, r1, 0x4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x7, @mcast2, 0xffffefa7}, 0x1c) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000007c0)=""/4096) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tun(r4, &(0x7f0000000080)={@void, @void, @llc={@llc={0x6, 0x6, "05a9", "6e7c4f1bebeafd671322662be357e281ef0bf230ce1b5fdc55b2b06382f814807a9184aea8d0d6f0261d8316b260b7b0f893b5a0024d1f11fb15090557b8db370ff63ed93c53c985ef2ec39ba897c1b6a0d526ad1e8a1fff7778357aef5902e7e81a1b8b"}}}, 0x68) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m42.873156874s ago: executing program 8 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) io_setup(0x8, 0x0) io_pgetevents(0x0, 0xcd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 4m41.083922723s ago: executing program 8 (id=173): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) close(r1) kexec_load(0x8, 0x5, &(0x7f0000001540)=[{&(0x7f0000000280)="5bd8eec05122df77bf523b06b9e97167780ae9023a44dd49944f8edb1ac5322f85d1d58c6c965956d3c430e4c3a2d62497c30fe80a06f624aba0632b7d295a5ba5574ab8f6271c189fdf07e66aa94ac994863e224cebee9e9c96083ee333e6d7776ae6f1386b1a8d5109b42f99f27bd83b7c26cba3346f212ed0", 0x7a, 0xe42, 0x5}, {0x0, 0x0, 0x3, 0x3}, {&(0x7f0000001340)="4c3666584c681e7d4d26050745755cfac5ba5bfe578e0dce88fec4a0c8105d1c7a73ddb91dcd822e0367cda42e6a6e09edaafe4a5d4bfb8a19f735a1a3f78cf633a7f85859d0990492d85581c513281555762bbd20d0da899f6d6b565891021703471eaac9918ff9703865252971af4a422951112bc5234b10818c182c99ce80204f8e4b9c735e2faab48c1d49e3ecc7b44a35f1a221b5536c03701be13ba25941bf17", 0xa3, 0x3, 0x8001}, {&(0x7f0000001400)="e13e4bb2198bb1a2e9f620ccd4d2b64711019c54ead10de592e98087ce9559a44bfa4377bbf9322d232b0fe70bfa220543ba33a6b234a16f3521a97195fddc5fd531178c98db6da68da1eb848e13311bf9065e63c23f87dfc969f9c201bc", 0x5e, 0x68, 0x5}, {&(0x7f0000001480), 0x0, 0xffff, 0xa8}], 0x140000) 4m36.196509469s ago: executing program 8 (id=175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) 4m29.797290954s ago: executing program 37 (id=167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x0, @local}, {0x1, @random="9d4da8c461c7"}, 0x6, {0x2, 0x0, @rand_addr=0x64010102}, 'syz_tun\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20040000, 0x0, 0x2, 0x4, 0x7, 0x400, 0x7}}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) readlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m20.168515473s ago: executing program 38 (id=175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) 3m45.194246779s ago: executing program 7 (id=228): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setuid(0xee00) 3m43.50985145s ago: executing program 7 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x28e08a7aa33ba155) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) 3m40.792301286s ago: executing program 7 (id=230): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5453, 0x0) 3m27.148792043s ago: executing program 7 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0xff34, 0x5}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000400)={0x0, 0x1, 0x101, 0x80000001}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) 3m25.544409955s ago: executing program 7 (id=232): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 3m22.23027616s ago: executing program 7 (id=233): socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x413}}}, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) socket$alg(0x26, 0x5, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x4, 0x0, 0x9, 0x8001, 0x9, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x197, 0x5}, 0x0, 0x0, 0xfffffffffffffffd, 0x400001, 0x800, 0xac1d, 0x7146, 0x5, 0xffff, 0xdffc, r2}) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0xcb, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0xa7c) syz_emit_ethernet(0x42, 0x0, 0x0) 3m22.054424987s ago: executing program 6 (id=235): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r2, &(0x7f00000061c0)={0x2020}, 0x2020) 3m20.69843205s ago: executing program 6 (id=238): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000002c0)=0xd) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ptrace$setopts(0x4206, r3, 0x1b6, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r2, &(0x7f0000000200)) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0xfa2, 0x7, 0x800, 0x2, 0x8000, 0xffffffffffffffff}) 3m18.628776808s ago: executing program 6 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpriority(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x29b0, &(0x7f0000000700)={0x0, 0x695d, 0x10000, 0x0, 0x1fb}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x0) io_uring_enter(r3, 0x74f6, 0x47c1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000980)}, 0xc0) 3m17.249065919s ago: executing program 6 (id=243): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setuid(0xee00) 3m14.371608032s ago: executing program 6 (id=246): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 3m12.130334336s ago: executing program 6 (id=249): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) 3m7.722465502s ago: executing program 39 (id=233): socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x413}}}, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) socket$alg(0x26, 0x5, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x4, 0x0, 0x9, 0x8001, 0x9, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x197, 0x5}, 0x0, 0x0, 0xfffffffffffffffd, 0x400001, 0x800, 0xac1d, 0x7146, 0x5, 0xffff, 0xdffc, r2}) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0xcb, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0xa7c) syz_emit_ethernet(0x42, 0x0, 0x0) 2m56.957586178s ago: executing program 40 (id=249): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) 1m20.778121992s ago: executing program 0 (id=363): bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 1m20.533623348s ago: executing program 0 (id=364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x2012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$FUSE_BMAP(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r6, 0x20, 0xfffffffffffffffe}, 0x8f) epoll_pwait(r4, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) ioctl$MON_IOCX_GET(r7, 0x400c9206, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.197506908s ago: executing program 0 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 1m5.467549579s ago: executing program 0 (id=380): mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$adfs(&(0x7f0000009e00), &(0x7f0000000240)='./file0\x00', 0x4002, &(0x7f0000000440)={[{@gid}, {@ftsuffix={'ftsuffix', 0x3d, 0x2}}, {@ftsuffix={'ftsuffix', 0x3d, 0x1}}, {}, {@ownmask}, {@othmask={'othmask', 0x3d, 0x3ff}}, {@gid}, {@ftsuffix={'ftsuffix', 0x3d, 0xfffffffffffffff8}}], [{@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x66, 0x31, 0x34, 0x37, 0x37, 0x37, 0x32], 0x2d, [0x31, 0x66, 0x37, 0x32], 0x2d, [0x37, 0x35, 0x61, 0x35], 0x2d, [0x63, 0x63, 0x36, 0x36], 0x2d, [0x61, 0x30, 0x38, 0x37, 0x31, 0x36, 0x62, 0x66]}}}]}, 0x1, 0x9de1, &(0x7f0000009e40)="$eJws2eMSpgfDbOHYtm2v2LZt2/aK89w2kolta5BMbNu2bQx2vbW/PoSr+kdX9dABDhvg8AGOGOC9A7xvgCMHeP8AHxjggwN8aIAPD/CRAT46wMcG+PgAnxjgkwN8aoBPD/CZAT47wOcG+PwAXxjgiwN8aYAvD/CVAb46wNcG+PoA3xjgmwN8a4BvD/CdAb47wPcG+P4APxjghwP8aIAfD/CTAX46wM8G+PkAvxjglwP8aoBfD/CbAX47wO8G+P0AfxjgjwP8aYA/D/CXAf46wN8G+PsA/xjgnwP8a4B/D/CfAf47wP8GOGqAowc4ZoBjBzhOgOMGOF6A4wc4QYATBjhRgBMHOEmAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIBLB7hMgAS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7/Z/dLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHOApAZ4aoAGeFuDpAZ4R4JkBnhXg2QGeE+C5AQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AM8L8DzAxwS4AUBXhjgRQFeHOAlAV4a4GUBXh7gFQFeGeBVAV4d4DUBXhvgdQFeH+ANAd4Y4E0B3hzgLQHeGuBtAd4e4B0B3hngXQHeHeA9AQ4NcFiAwwMcEeC9Ad4X4MgA7w/wgQAfDPChAB8O8JEAHw3wsQAfD/CJAJ8M8KkAnw7wmQCfDfC5AJ8P8IUAXwzwpQBfDvCVAF8N8LUAXw/wjQDfDPCtAN8O8J0A3w3wvQDfD/CDAD8M8KMAPw7wkwA/DfCzAD8P8IsAvwzwqwC/DvCbAL8N8LsAvw/whwB/DPCnAH8O8JcAfw3wtwB/D/CPAP8M8K8A/w7wnwD/DfC/AEcFODrAMQGODXCcEMcNcbwQxw9xghAnDHGiECcOcZIQJw1xshAnD3GKEKcMcaoQpw5xmhCnDXG6EKcPcYYQZwxxphBnDnGWEGcNcbYQZw9xjhDnDHGuEOcOcZ4Q5w1xvhDnD3GBEBcMcaEQFw5xkRAXDXGxEBcPcYkQlwxxqRCXDnGZEAlx2RCXC3H5EFcIccUQVwpx5RBXCXHVEFcLcfUQ1whxzRDXCnHtENcJcd0Q1wtx/RA3CHHDEDcKceMQNwlx0xA3C3HzELcIccsQtwpx6xC3CXHbELcLcfsQdwhxxxB3CnHnEHcJcdcQdwtx9xD3CHHPEPcKce8Q9wlx3xD3C3H/EA8I8cAQDwrx4BAPCfHQEA8L8fAQjwjxyBCPCvHoEI8J8dgQjwvx+BBPCPHEEE8K8eQQTwnx1BAN8bQQTw/xjBDPDPGsEM8O8ZwQzw1xEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4nkhnh/ikBAvCPHCEC8K8eIQLwnx0hAvC/HyEK8I8coQrwrx6hCvCfHaEK8L8foQbwjxxhBvCvHmEG8J8dYQbwvx9hDvCPHOEO8K8e4Q7wlxaIjDQhwe4ogQ7w3xvhBHhnh/iA+E+GCID4X4cIiPhPhoiI+F+HiIT4T4ZIhPhfh0iM+E+GyIz4X4fIgvhPhiiC+F+HKIr4T4aoivhfh6iG+E+GaIb4X4dojvhPhuiO+F+H6IH4T4YYgfhfhxiJ+E+GmIn4X4eYhfhPhliF+F+HWI34T4bYjfhfh9iD+E+GOIP4X4c4i/hPhriL+F+HuIf4T4Z4h/hfh3iP+E+G+I/4U4KsTRIY4JcWyI40Q4boTjRTh+hBNEOGGEE0U4cYSTRDhphJNFOHmEU0Q4ZYRTRTh1hNNEOG2E00U4fYQzRDhjhDNFOHOEs0Q4a4SzRTh7hHNEOGeEc0U4d4TzRDhvhPNFOH+EC0S4YIQLRbhwhItEuGiEi0W4eIRLRLhkhEtFuHSEy0RIhMtGuFyEy0e4QoQrRrhShCtHuEqEq0a4WoSrR7hGhGtGuFaEa0e4ToTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRnhchMdHeEKEJ0Z4UoQnR3hKhKdGaISnRXh6hGdEeGaEZ0V4doTnRHhuhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wjPi/D8CIdEeEGEF0Z4UYQXR3hJhJdGeFmEl0d4RYRXRnhVhFdHeE2E10Z4XYTXR3hDhDdGeFOEN0d4S4S3RnhbhLdHeEeEd0Z4V4R3R3hPhEMjHBbh8AhHRHhvhPdFODLC+yN8IMIHI3wowocjfCTCRyN8LMLHI3wiwicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMJPI/wsws8j/CLCLyP8KsKvI/wmwm8j/C7C7yP8IcIfI/wpwp8j/CXCXyP8LcLfI/wjwj8j/CvCvyP8J8J/I/wvwlERjo5wTIRjIxwnxnFjHC/G8WOcIMYJY5woxoljnCTGSWOcLMbJY5wixiljnCrGqWOcJsZpY5wuxuljnCHGGWOcKcaZY5wlxlljnC3G2WOcI8Y5Y5wrxrljnCfGeWOcL8b5Y1wgxgVjXCjGhWNcJMZFY1wsxsVjXCLGJWNcKsalY1wmRmJcNsblYlw+xhViXDHGlWJcOcZVYlw1xtViXD3GNWJcM8a1Ylw7xnViXDfG9WJcP8YNYtwwxo1i3DjGTWLcNMbNYtw8xi1i3DLGrWLcOsZtYtw2xu1i3D7GHWLcMcadYtw5xl1i3DXG3WLcPcY9Ytwzxr1i3DvGfWLcN8b9Ytw/xgNiPDDGg2I8OMZDYjw0xsNiPDzGI2I8MsajYjw6xmNiPDbG42I8PsYTYjwxxpNiPDnGU2I8NUZjPC3G02M8I8YzYzwrxrNjPCfGc2McxBjEGMYYxRjHmMSYxpjFmMdYxFjGWMVYx9jE2MbYxdjHeF6M58c4JMYLYrwwxotivDjGS2K8NMbLYrw8xitivDLGq2K8OsZrYrw2xutivD7GG2K8McabYrw5xltivDXG22K8PcY7YrwzxrtivDvGe2IcGuOwGIfHOOJ/HR7n/2dkjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8b4XIzPx/hCjC/G+FKML8f4SoyvxvhajK/H+EaMb8b4Voxvx/hOjO/G+F6M78f4QYwfxvhRjB/H+EmMn8b4WYyfx/hFjF/G+FWMX8f4TYzfxvhdjN/H+EOMP8b4U4w/x/hLjL/G+FuMv8f4R4x/xvhXjH/H+E+M/8b4X4yjYhwd45gYx8Y4ToLjJjheguMnOEGCEyY4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgksmuFSCSye4TIIkuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoInJXhygqckeGqCJnhagqcneEaCZyZ4VoJnJ3hOgucmOEgwSDBMMEowTjBJME0wSzBPsEiwTLBKsE6wSbBNsEuwT/C8BM9PcEiCFyR4YYIXJXhxgpckeGmClyV4eYJXJHhlglcleHWC1yR4bYLXJXh9gjckeGOCNyV4c4K3JHhrgrcleHuCdyR4Z4J3JXh3gvckODTBYQkOT3BEgvcmeF+CIxO8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wecSfD7BFxJ8McGXEnw5wVcSfDXB1xJ8PcE3EnwzwbcSfDvBdxJ8N8H3Enw/wQ8S/DDBjxL8OMFPEvw0wc8S/DzBLxL8MsGvEvw6wW8S/DbB7xL8PsEfEvwxwZ8S/DnBXxL8NcHfEvw9wT8S/DPBvxL8O8F/Evw3wf8SHJXg6ATHJDg2wXFSHDfF8VIcP8UJUpwwxYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVJcMsWlUlw6xWVSJMVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTPCnFk1M8JcVTUzTF01I8PcUzUjwzxbNSPDvFc1I8N8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2K56V4fopDUrwgxQtTvCjFi1O8JMVLU7wsxctTvCLFK1O8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTvCvFu1O8J8WhKQ5LcXiKI1K8N8X7UhyZ4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisyk+l+LzKb6Q4ospvpTiyym+kuKrKb6W4uspvpHimym+leLbKb6T4rspvpfi+yl+kOKHKX6U4scpfpLipyl+luLnKX6R4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKf6S4q8p/pbi7yn+keKfKf6V4t8p/pPivyn+l+KoFEenOCbFsSmOk+G4GY6X4fgZTpDhhBlOlOHEGU6S4aQZTpbh5BlOkeGUGU6V4dQZTpPhtBlOl+H0Gc6Q4YwZzpThzBnOkuGsGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4cIZLpLhohkuluHiGS6R4ZIZLpXh0hkukyEZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemOFJGZ6c4SkZnpqhGZ6W4ekZnpHhmRmeleHZGZ6T4bkZDjIMMgwzjDKMM0wyTDPMMswzLDIsM6wyrDNsMmwz7DLsMzwvw/MzHJLhBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z/m+735ThzRnekuGtGd6W4e0Z3pHhnRneleHdGd6T4dAMh2U4PMMRGd6b4X0Zjszw/gwfyPDBDB/K8OEMH8nw0Qwfy/DxDJ/I8MkMn8rw6QyfyfDZDJ/L8PkMX8jwxQxfyvDlDF/J8NUMX8vw9QzfyPDNDN/K8O0M38nw3Qzfy/D9DD/I8MMMP8rw4ww/yfDTDD/L8PMMv8jwywy/yvDrDL/J8NsMv8vw+wx/yPDHDH/K8OcMf8nw1wx/y/D3DP/I8M8M/8rw7wz/yfDfDP/LcFSGozMck+HY/9nmOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscz8vx/ByH5HhBjhfmeFGOF+d4SY6X5nhZjpfneEWOV+Z4VY5X53hNjtfmeF2O1+d4Q4435nhTjjfneEuOt+Z4W46353hHjnfmeFeOd+d4T45DcxyW4/AcR+R4b4735Tgyx/tzfCDHB3N8KMeHc3wkx0dzfCzHx3N8Iscnc3wqx6dzfCbHZ3N8Lsfnc3whxxdzfCnHl3N8JcdXc3wtx9dzfCPHN3N8K8e3c3wnx3dzfC/H93P8IMcPc/wox49z/CTHT3P8LMfPc/wixy9z/CrHr3P8Jsdvc/wux+9z/CHHH3P8Kcefc/wlx19z/C3H33P8I8c/c/wrx79z/CfHf3P8L8dROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF3hegecXOKTACwq8sMCLCry4wEsKvLTAywq8vMArCryywKsKvLrAawq8tsDrCry+wBsKvLHAmwq8ucBbCry1wNsKvL3AOwq8s8C7Cry7wHsKHFrgsAKHFziiwHsLvK/AkQXeX+ADBT5Y4EMFPlzgIwU+WuBjBT5e4BMFPlngUwU+XeAzBT5b4HMFPl/gCwW+WOBLBb5c4CsFvlrgawW+XuAbBb5Z4FsFvl3gOwW+W+B7Bb5f4AcFfljgRwV+XOAnBX5a4GcFfl7gFwV+WeBXBX5d4DcFflvgdwV+X+APBf5Y4E8F/lzgLwX+WuBvBf5e4B8F/lngXwX+XeA/Bf5b4H8FjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+KgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7E80o8v8QhJV5Q4oUlXlTixSVeUuKlJV5W4uUlXlHilSVeVeLVJV5T4rUlXlfi9SXeUOKNJd5U4s0l3lLirSXeVuLtJd5R4p0l3lXi3SXeU+LQEoeVOLzEESXeW+J9JY4s8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8a8n/HQYnPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiaNKHF3imBLHljhOheNWOF6F41c4QYUTVjhRhRNXOEmFk1Y4WYWTVzhFhVNWOFWFU1c4TYXTVjhdhdNXOEOFM1Y4U4UzVzhLhbNWOFuFs1c4R4VzVjhXhXNXOE+F81Y4X4XzV7hAhQtWuFCFC1e4SIWLVrhYhYtXuESFS1a4VIVLV7hMhVS4bIXLVbh8hStUuGKFK1W4coWrVLhqhatVuHqFa1S4ZoVrVbh2hetUuG6F61W4foUbVLhhhRtVuHGFm1S4aYWbVbh5hVtUuGWFW1W4dYXbVLhthdtVuH2FO1S4Y4U7VbhzhbtUuGuFu1W4e4V7VLhnhXtVuHeF+1S4b4X7Vbh/hQdUeGCFB1V4cIWHVHhohYdVeHiFR1R4ZIVHVXh0hcdUeGyFx1V4fIUnVHhihSdVeHKFp1R4aoVWeFqFp1d4RoVnVnhWhWdXeE6F51Y4qDCoMKwwqjCuMKkwrTCrMK+wqLCssKqwrrCpsK2wq7Cv8LwKz69wSIUXVHhhhRdVeHGFl1R4aYWXVXh5hVdUeGWFV1V4dYXXVHhthddVeH2FN1R4Y4U3VXhzhbdUeGuFt1V4e4V3VHhnhXdVeHeF91Q4tMJhFQ6vcESF91Z4X4UjK7y/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocVeHoCsdUOLbCcWoct8bxahy/xglqnLDGiWqcuMZJapy0xslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWqctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFaly4xkVqXLTGxWpcvMYlalyyxqVqXLrGZWqkxmVrXK7G5WtcocYVa1ypxpVrXKXGVWtcrcbVa1yjxjVrXKvGtWtcp8Z1a1yvxvVr3KDGDWvcqMaNa9ykxk1r3KzGzWvcosYta9yqxq1r3KbGbWvcrsbta9yhxh1r3KnGnWvcpcZda9ytxt1r3KPGPWvcq8a9a9ynxn1r3K/G/Ws8oMYDazyoxoNrPKTGQ2s8rMbDazyixiNrPKrGo2s8psZjazyuxuNrPKHGE2s8qcaTazylxlNrtMbTajy9xjNqPLPGs2o8u8Zzajy3xkGNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2NfY3n1Xh+jUNqvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrvKbGa2u8rsbra7yhxhtrvKnGm2u8pcZba7ytxttrvKPGO2u8q8a7a7ynxqE1DqtxeI0jary3xvtqHFnj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X46gaR9c4psaxNY7T4LgNjtfg+A1O0OCEDU7U4MQNTtLgpA1O1uDkDU7R4JQNTtXg1A1O0+C0DU7X4PQNztDgjA3O1ODMDc7S4KwNztbg7A3O0eCcDc7V4NwNztPgvA3O1+D8DS7Q4IINLtTgwg0u0uCiDS7W4OINLtHgkg0u1eDSDS7TIA0u2+ByDS7f4AoNrtjgSg2u3OAqDa7a4GoNrt7gGg2u2eBaDa7d4DoNrtvgeg2u3+AGDW7Y4EYNbtzgJg1u2uBmDW7e4BYNbtngVg1u3eA2DW7b4HYNbt/gDg3u2OBODe7c4C4N7trgbg3u3uAeDe7Z4F4N7t3gPg3u2+B+De7f4AENHtjgQQ0e3OAhDR7a4GENHt7gEQ0e2eBRDR7d4DENHtvgcQ0e3+AJDZ7Y4EkNntzgKQ2e2qANntbg6Q2e0eCZDZ7V4NkNntPguQ0OGgwaDBuMGowbTBpMG8wazBssGiwbrBqsG2wabBvsGuwbPK/B8xsc0uAFDV7Y4EUNXtzgJQ1e2uBlDV7e4BUNXtngVQ1e3eA1DV7b4HUNXt/gDQ3e2OBNDd7c4C0N3trgbQ3e3uAdDd7Z4F0N3t3gPQ0ObXBYg8MbHNHgvQ3e1+DIBu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwZHNTi6wTENjm1wnBbHbXG8FsdvcYIWJ2xxohYnbnGSFidtcbIWJ29xihanbHGqFqducZoWp21xuhanb3GGFmdscaYWZ25xlhZnbXG2FmdvcY4W52xxrhbnbnGeFudtcb4W529xgRYXbHGhFhducZEWF21xsRYXb3GJFpdscakWl25xmRZpcdkWl2tx+RZXaHHFFldqceUWV2lx1RZXa3H1Ftdocc0W12px7RbXaXHdFtdrcf0WN2hxwxY3anHjFjdpcdMWN2tx8xa3aHHLFrdqcesWt2lx2xa3a3H7FndocccWd2px5xZ3aXHXFndrcfcW92hxzxb3anHvFvdpcd8W92tx/xYPaPHAFg9q8eAWD2nx0BYPa/HwFo9o8cgWj2rx6BaPafHYFo9r8fgWT2jxxBZPavHkFk9p8dQWbfG0Fk9v8YwWz2zxrBbPbvGcFs9tcdBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi3+J5LZ7f4pAWL2jxwhYvavHiFi9p8dIWL2vx8havaPHKFq9q8eoWr2nx2hava/H6Fm9o8cYWb2rx5hZvafHWFm9r8fYW72jxzhbvavHuFu9pcWiLw1oc3uKIFu9t8b4WR7Z4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKrF0S2OaXFsi+N0OG6H43U4focTdDhhhxN1OHGHk3Q4aYeTdTh5h1N0OGWHU3U4dYfTdDhth9N1OH2HM3Q4Y4czdThzh7N0OGuHs3U4e4dzdDhnh3N1OHeH83Q4b4fzdTh/hwt0uGCHC3W4cIeLdLhoh4t1uHiHS3S4ZIdLdbh0h8t0SIfLdrhch8t3uEKHK3a4Uocrd7hKh6t2uFqHq3e4RodrdrhWh2t3uE6H63a4Xofrd7hBhxt2uFGHG3e4SYebdrhZh5t3uEWHW3a4VYdbd7hNh9t2uF2H23e4Q4c7drhThzt3uEuHu3a4W4e7d7hHh3t2uFeHe3e4T4f7drhfh/t3eECHB3Z4UIcHd3hIh4d2eFiHh3d4RIdHdnhUh0d3eEyHx3Z4XIfHd3hChyd2eFKHJ3d4SoendmiHp3V4eodndHhmh2d1eHaH53R4boeDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsOz+vw/A6HdHhBhxd2eFGHF3d4SYeXdnhZh5d3eEWHV3Z4VYdXd3hNh9d2eF2H13d4Q4c3dnhThzd3eEuHt3Z4W4e3d3hHh3d2eFeHd3d4T4dDOxzW4fAOR3R4b4f3dTiyw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8NRHY7ucEyHYzscp8dxexyvx/F7nKDHCXucqMeJe5ykx0l7nKzHyXucoscpe5yqx6l7nKbHaXucrsfpe5yhxxl7nKnHmXucpcdZe5ytx9l7nKPHOXucq8e5e5ynx3l7nK/H+XtcoMcFe1yox4V7XKTHRXtcrMfFe1yixyV7XKrHpXtcpkd6XLbH5XpcvscVelyxx5V6XLnHVXpctcfVely9xzV6XLPHtXpcu8d1ely3x/V6XL/HDXrcsMeNety4x0163LTHzXrcvMctetyyx6163LrHbXrctsftety+xx163LHHnXrcucddety1x9163L3HPXrcs8e9ety7x3163LfH/Xrcv8cDejywx4N6PLjHQ3o8tMfDejy8xyN6PLLHo3o8usdjejy2x+N6PL7HE3o8sceTejy5x1N6PLVHezytx9N7PKPHM3s8q8ezezynx3N7HPQY9Bj2GPUY95j0mPaY9Zj3WPRY9lj1WPfY9Nj22PXY93hej+f3OKTHC3q8sMeLery4x0t6vLTHy3q8vMcreryyx6t6vLrHa3q8tsfrery+xxt6vLHHm3q8ucdbery1x9t6vL3HO3q8s8e7ery7x3t6HNrjsB6H9ziix3t7vK/Hkf3/Y9keFzAtEAAK52mybbtOtm3btn2yze+1kW1Ntm3b5nj/7IU8OGyADw/wkQE+OsDHBvj4AJ8Y4JMDfGqATw/wmQE+O8DnBvj8AF8Y4IsDfGmALw/wlQG+OsDXBvj6AN8Y4JsDfGuAbw/wnQG+O8D3Bvj+AD8Y4IcD/GiAHw/wkwF+OsDPBvj5AL8Y4JcD/GqAXw/wmwF+O8DvBvj9AH8Y4I8D/GmAPw/wlwH+OsDfBvj7AP8Y4J8D/GuAfw/wnwH+O8D/Bjh8gCMGOHKAowY4eoBjBjh2gOMEOG6A4wU4foATBDhhgBMFOCTAiQMcGuAkAU4a4GQBTh7gFAFOGeBUAU4d4DQBThvgdAFOH+AMAc4Y4EwBzhzgLAHOGuBsAc4e4BwBzhngXAHOHeA8Ac4b4HwBzh/gAgEuGOBCAS4c4CIBLhrgYgEuHuASAS4Z4FIBEuDSAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4X4PEBnhDgiQGeFODJARrgKQGeGuBpAZ4e4BkBnhngWQGeHeA5AZ4b4HkBnh/gBQFeGOBFAV4c4CUBXhrgZQFeHuAVAV4Z4FUBXh3gIMAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALsA+wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAhwW4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/Af4X4PAARwQ4MsBRAY4OcEyAYwMcJ8RxQxwvxPFDnCDECUOcKMQhIU4c4tAQJwlx0hAnC3HyEKcIccoQpwpx6hCnCXHaEKcLcfoQZwhxxhBnCnHmEGcJcdYQZwtx9hDnCHHOEOcKce4Q5wlx3hDnC3H+EBcIccEQFwpx4RAXCXHREBcLcfEQlwhxyRCXCpEQlw5xmRCXDXG5EJcPcYUQVwxxpRBXDnGVEFcNcbUQVw9xjRDXDHGtENcOcZ0Q1w1xvRDXD3GDEDcMcaMQNw5xkxA3DXGzEDcPcYsQtwxxqxC3DnGbELcNcbsQtw9xhxB3DHGnEHcOcZcQdw1xtxB3D3GPEPcMca8Q9w5xnxD3DXG/EPcP8YAQDwzxoBAPDvGQEA8N8bAQDw/xiBCPDPGoEI8O8ZgQjw3xuBCPD/GEEE8M8aQQTw7REE8J8dQQTwvx9BDPCPHMEM8K8ewQzwnx3BDPC/H8EC8I8cIQLwrx4hAvCfHSEC8L8fIQrwjxyhCvCvHqEAchBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh9iFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTisBAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEL8M8asQvw7xmxC/DfG7EL8P8YcQfwzxpxB/DvGXEH8N8bcQfw/xjxD/DPGvEP8O8Z8Q/w3xvxCHhzgixJEhjgpxdIhjQhwb4jgRjhvheBGOH+EEEU4Y4UQRDolw4giHRjhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSERLh0hMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhEZ4SoSnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6E50d4QYQXRnhRhBdHeEmEl0Z4WYSXR3hFhFdGeFWEV0c4iDCIMIwwijCOMIkwjTCLMI+wiLCMsIqwjrCJsI2wi7CP8JoIr43wugivj/CGCG+M8KYIb47wlghvjfC2CG+P8I4I74zwrgjvjvCeCO+N8L4I74/wgQgfjPChCIdF+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0T4ZYRfRfh1hN9E+G2E30X4fYQ/RPhjhD9F+HOEv0T4a4S/Rfh7hH9E+GeEf0X4d4T/RPhvhP9FODzCERGOjHBUhKMjHBPh2AjHiXHcGMeLcfwYJ4hxwhgninFIjBPHODTGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYiTGpWNcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M0xlNiPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYjw/xgtivDDGi2K8OMZLYrw0xstivDzGK2K8MsarYrw6xkGMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEeGuMt8V4e4x3xHhnjHfFeHeM98R4b4z3xXh/jA/E+GCMD8U4LMaHY3wkxkdjfCzGx2N8IsYnY3wqxqdjfCbGZ2N8LsbnY3whxhdjfCnGl2N8JcZXY3wtxtdjfCPGN2N8K8a3Y3wnxndjfC/G92P8IMYPY/woxo9j/CTGT2P8LMbPY/wixi9j/CrGr2P8JsZvY/wuxu9j/CHGH2P8KcafY/wlxl9j/C3G32P8I8Y/Y/wrxr9j/CfGf2P8L8bhMY6IcWSMo2IcHeOYGMfGOE6C4yY4XoLjJzhBghMmOFGCQxKcOMGhCU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpUgCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6coAmekuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1QkOEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTvCbBaxO8LsHrE7whwRsTvCnBmxO8JcFbE7wtwdsTvCPBOxO8K8G7E7wnwXsTvC/B+xN8IMEHE3wowWEJPpzgIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meBXCX6d4DcJfpvgdwl+n+APCf6Y4E8J/pzgLwn+muBvCf6e4B8J/pngXwn+neA/Cf6b4H8JDk9wRIIjExyV4OgExyQ4NsFxUhw3xfFSHD/FCVKcMMWJUhyS4sQpDk1xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTHGpFElx6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUT0rx5BRN8ZQUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9OcZBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin+I1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQykOS/HhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2RSfS/H5FF9I8cUUX0rx5RRfSfHVFF9L8fUU30jxzRTfSvHtFN9J8d0U30vx/RQ/SPHDFD9K8eMUP0nx0xQ/S/HzFL9I8csUv0rx6xS/SfHbFL9L8fsUf0jxxxR/SvHnFH9J8dcUf0vx9xT/SPHPFP9K8e8U/0nx3xT/S3F4iiNSHJniqBRHpzgmxbEpjpPhuBmOl+H4GU6Q4YQZTpThkAwnznBohpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhgxtD/CwwXyXDRDBfLcPEMl8hwyQyXypAMl85wmQyXzXC5DJfPcIUMV8xwpQxXznCVDFfNcLUMV89wjQzXzHCtDNfOcJ0M181wvQzXz3CDDDfMcKMMN85wkww3zXCzDDfPcIsMt8xwqwy3znCbDLfNcLsMt89whwx3zHCnDHfOcJcMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQDA/N8LAMD8/wiAyPzPCoDI/O8JgMj83wuAyPz/CEDE/M8KQMT87QDE/J8NQMT8vw9AzPyPDMDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDAcZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hlek+G1GV6X4fUZ3pDhjRnelOHNGd6S4a0Z3pbh7RnekeGdGd6V4d0Z3pPhvRnel+H9GT6Q4YMZPpThsAwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/83wvwyHZzgiw5EZjspwdIZjMhyb4Tg5jpvjeDmOn+MEOU6Y40Q5Dslx4hyH5jhJjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDjjPmOFOOM+c4S46z5jhbjrPnOEeOc+Y4V45z5zhPjvPmOF+O8+e4QI4L5rhQjgvnuEiOi+a4WI6L57hEjkvmuFSO5Lh0jsvkuGyOy+W4fI4r5LhijivluHKOq+S4ao6r5bh6jmvkuGaOa+W4do7r5LhujuvluH6OG+S4YY4b5bhxjpvkuGmOm+W4eY5b5LhljlvluHWO2+S4bY7b5bh9jjvkuGOOO+W4c4675LhrjrvluHuOe+S4Z4575bh3jvvkuG+O++W4f44H5HhgjgfleHCOh+R4aI6H5Xh4jkfkeGSOR+V4dI7H5HhsjsfleHyOJ+R4Yo4n5XhyjuZ4So6n5nhajqfneEaOZ+Z4Vo5n53hOjufmeF6O5+d4QY4X5nhRjhfneEmOl+Z4WY6X53hFjlfmeFWOV+c4yDHIMcwxyjHOMckxzTHLMc+xyLHMscqxzrHJsc2xy7HP8Zocr83xuhyvz/GGHG/M8aYcb87xlhxvzfG2HG/P8Y4c78zxrhzvzvGeHO/N8b4c78/xgRwfzPGhHIfl+HCOj+T4aI6P5fh4jk/k+GSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lODzHETmOzHFUjqNzHJPj2BzHKXDcAscrcPwCJyhwwgInKnBIgRMXOLTASQqctMDJCpy8wCkKnLLAqQqcusBpCpy2wOkKnL7AGQqcscCZCpy5wFkKnLXA2QqcvcA5CpyzwLkKnLvAeQqct8D5Cpy/wAUKXLDAhQpcuMBFCly0wMUKXLzAJQpcssClCqTApQtcpsBlC1yuwOULXKHAFQtcqcCVC1ylwFULXK3A1Qtco8A1C1yrwLULXKfAdQtcr8D1C9ygwA0L3KjAjQvcpMBNC9yswM0L3KLALQvcqsCtC9ymwG0L3K7A7QvcocAdC9ypwJ0L3KXAXQvcrcDdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rsDjCzyhwBMLPKnAkwu0wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwo8t8DzCjy/wAsKvLDAiwq8uMBLCry0wMsKvLzAKwq8ssCrCry6wEGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYHXFHhtgdcVeH2BNxR4Y4E3FXhzgbcUeGuBtxV4e4F3FHhngXcVeHeB9xR4b4H3FXh/gQ8U+GCBDxU4rMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8DhBY4ocGSBowocXeCYAscWOE6J45Y4XonjlzhBiROWOFGJQ0qcuMShJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4owlzlTizCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlLioiUuVuLiJS5R4pIlLlUiJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWOJJJZ5coiWeUuKpJZ5W4uklnlHimSWeVeLZJZ5T4rklnlfi+SVeUOKFJV5U4sUlXlLipSVeVuLlJV5R4pUlXlXi1SUOSgxKDEuMSoxLTEpMS8xKzEssSixLrEqsS2xKbEvsSuxLvKbEa0u8rsTrS7yhxBtLvKnEm0u8pcRbS7ytxNtLvKPEO0u8q8S7S7ynxHtLvK/E+0t8oMQHS3yoxGElPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDi9xRIkjSxxV4ugSx5Q4tsRxKhy3wvEqHL/CCSqcsMKJKhxS4cQVDq1wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgpnrHCmCmeucJYKZ61wtgpnr3COCuescK4K565wngrnrXC+CuevcIEKF6xwoQoXrnCRChetcLEKF69wiQqXrHCpCqlw6QqXqXDZCpercPkKV6hwxQpXqnDlClepcNUKV6tw9QrXqHDNCteqcO0K16lw3QrXq3D9CjeocMMKN6pw4wo3qXDTCjercPMKt6hwywq3qnDrCrepcNsKt6tw+wp3qHDHCneqcOcKd6lw1wp3q3D3CveocM8K96pw7wr3qXDfCvercP8KD6jwwAoPqvDgCg+p8NAKD6vw8AqPqPDICo+q8OgKj6nw2AqPq/D4Ck+o8MQKT6rw5Aqt8JQKT63wtApPr/CMCs+s8KwKz67wnArPrfC8Cs+v8IIKL6zwogovrvCSCi+t8LIKL6/wigqvrPCqCq+ucFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+E1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0V3l3hPRXeW+F9Fd5f4QMVPljhQxUOq/DhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3B4hSMqHFnhqApHVzimwrEVjlPjuDWOV+P4NU5Q44Q1TlTjkBonrnFojZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jUvUuGSNS9VIjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1nhSjSfXaI2n1HhqjafVeHqNZ9R4Zo1n1Xh2jefUeG6N59V4fo0X1HhhjRfVeHGNl9R4aY2X1Xh5jVfUeGWNV9V4dY2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+qcViND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+Nw2scUePIGkfVOLrGMTWOrXGcBsdtcLwGx29wggYnbHCiBoc0OHGDQxucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocEZG5ypwZkbnKXBWRucrcHZG5yjwTkbnKvBuRucp8F5G5yvwfkbXKDBBRtcqMGFG1ykwUUbXKzBxRtcosElG1yqQRpcusFlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaXLvBdRpct8H1Gly/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tsHjGjy+wRMaPLHBkxo8uUEbPKXBUxs8rcHTGzyjwTMbPKvBsxs8p8FzGzyvwfMbvKDBCxu8qMGLG7ykwUsbvKzByxu8osErG7yqwasbHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDdzd4T4P3Nnhfg/c3+ECDDzb4UIPDhuDDDT7S4KMNPtbg4w0+0eCTDT7V4NMNPtPgsw0+1+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+DwBkc0OLLBUQ2ObnBMg2MbHKfFcVscr8XxW5ygxQlbnKjFIS1O3OLQFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2qRFpducZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u0RZPafHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2vx/BYvaPHCFi9q8eIWL2nx0hYva/HyFq9o8coWr2rx6hYHLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4rAWH27xkRYfbfGxFh9v8YkWn2zxqRafbvGZFp9t8bkWn2/xhRZfbPGlFl9u8ZUWX23xtRZfb/GNFt9s8a0W327xnRbfbfG9Ft9v8YMWP2zxoxY/bvGTFj9t8bMWP2/xixa/bPGrFr9u8ZsWv23xuxa/b/GHFn9s8acWf27xlxZ/bfG3Fn9v8Y8W/2zxrxb/bvGfFv9t8b8Wh7c4osWRLY5qcXSLY1oc2+I4HY7b4Xgdjt/hBB1O2OFEHQ7pcOIOh3Y4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh3S4dIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4cod2eEqHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3OOgw6DDsMOow7jDpMO0w6zDvsOiw7LDqsO6w6bDtsOuw7/CaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ6Hdfhwh490+GiHj3X4eIdPdPhkh091+HSHz3T4bIfPdfh8hy90+GKHL3X4coevdPhqh691+HqHb3T4Zodvdfh2h+90+G6H73X4focfdPhhhx91+HGHn3T4aYefdfh5h190+GWHX3X4dYffdPhth991+H2HP3T4Y4c/dfhzh790+GuHv3X4e4d/dPhnh391+HeH/3T4b4f/dTi8wxEdjuxwVIejOxzT4dgOx+lx3B7H63H8HifoccIeJ+pxSI8T9zi0x0l6nLTHyXqcvMcpepyyx6l6nLrHaXqctsfpepy+xxl6nLHHmXqcucdZepy1x9l6nL3HOXqcs8e5epy7x3l6nLfH+Xqcv8cFelywx4V6XLjHRXpctMfFely8xyV6XLLHpXqkx6V7XKbHZXtcrsfle1yhxxV7XKnHlXtcpcdVe1ytx9V7XKPHNXtcq8e1e1ynx3V7XK/H9XvcoMcNe9yox4173KTHTXvcrMfNe9yixy173KrHrXvcpsdte9yux+173KHHHXvcqcede9ylx1173K3H3Xvco8c9e9yrx7173KfHfXvcr8f9ezygxwN7PKjHg3s8pMdDezysx8N7PKLHI3s8qsejezymx2N7PK7H43s8occTezypx5N7tMdTejy1x9N6PL3HM3o8s8ezejy7x3N6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdBj0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj32P1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1OKzH/xEADwC0FQAAQ7Nt2162bdu2vWzbxrs2sm3btvWNzmMDfHyATwzwyQE+NcCnB/jMAJ8d4HMDfH6ALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPB/jJAD8d4GcD/HyAXwzwywF+NcCvB/jNAL8d4HcD/H6APwzwxwH+NMCfB/jLAH8d4G8D/H2AfwzwzwH+NcC/B/jPAP8d4H8DHDLAoQMcNsDhAxwxwJEDHDXA0QMcM8CxAxwnwHEDHC/A8QOcIMAJA5wowIkDnCTASQOcLMDJA5wiwCkDnCrAqQOcJsBpA5wuwOkDnCHAGQOcKcCZA5wlwFkDnC3A2QOcI8A5A5wrwLkDnCfAeQOcL8D5A1wgwAUDXCjAhQNcJMBFA1wswMUDXCLAJQNcKsClA1wmQAJcNsDlAlw+wBUCXDHAlQJcOcBVAlw1wNUCXD3ANQJcM8C1Alw7wHUCXDfA9QJcP8ANAtwwwI0C3DjATQLcNMDNAtw8wC0C3DLArQLcOsBtAtw2wO0C3D7AHQLcMcCdAtw5wF0C3DXA3QLcPcA9AtwzwL0C3DvAfQLcN8D9Atw/wAMCPDDAgwI8OMBDAjw0wMMCPDzAIwI8MsCjAjw6wGMCPDbA4wI8PsATAjwxwJMCPDnAUwI8NUADPC3A0wM8I8AzAzwrwLMDPCfAcwM8L8DzA7wgwAsDvCjAiwO8JMBLA7wswMsDvCLAKwO8KsCrA7wmwGsDvC7A6wO8IcAbA7wpwJsDvCXAWwO8LcDbA7wjwDsDvCvAuwO8J8B7AxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4X4D3B/hAgA8G+FCADwf4SICPBvhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAfwb4V4B/B/hPgP8G+F+AQwIcGuCwAIcHOCLAkQGOCnB0gGMCHBvgOCGOG+J4IY4f4gQhThjiRCFOHOIkIU4a4mQhTh7iFCFOGeJUIU4d4jQhThvidCFOH+IMIc4Y4kwhzhziLCHOGuJsIc4e4hwhzhniXCHOHeI8Ic4b4nwhzh/iAiEuGOJCIS4c4iIhLhriYiEuHuISIS4Z4lIhLh3iMiES4rIhLhfi8iGuEOKKIa4U4sohrhLiqiGuFuLqIa4R4pohrhXi2iGuE+K6Ia4X4vohbhDihiFuFOLGIW4S4qYhbhbi5iFuEeKWIW4V4tYhbhPitiFuF+L2Ie4Q4o4h7hTiziHuEuKuIe4W4u4h7hHiniHuFeLeIe4T4r4h7hfi/iEeEOKBIR4U4sEhHhLioSEeFuLhIR4R4pEhHhXi0SEeE+KxIR4X4vEhnhDiiSGeFOLJIZ4S4qkhGuJpIZ4e4hkhnhniWSGeHeI5IZ4b4nkhnh/iBSFeGOJFIV4c4iUhXhriZSFeHuIVIV4Z4lUhXh3iNSFeG+J1IV4f4g0h3hjiTSHeHOItId4a4m0h3h7iHSHeGeJdId4d4j0h3hviIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xPtCvD/EB0J8MMSHQnw4xEdCfDTEx0J8PMQnQnwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwS4tAQh4U4PMQRIY4McVSIo0McE+LYEMeJcNwIx4tw/AgniHDCCCeKcOIIJ4lw0ggni3DyCKeIcMoIp4pw6giniXDaCKeLcPoIZ4hwxghninDmCGeJcNYIZ4tw9gjniHDOCOeKcO4I54lw3gjni3D+CBeIcMEIF4pw4QgXiXDRCBeLcPEIl4hwyQiXinDpCJeJkAiXjXC5CJePcIUIV4xwpQhXjnCVCFeNcLUIV49wjQjXjHCtCNeOcJ0I141wvQjXj3CDCDeMcKMIN45wkwg3jXCzCDePcIsIt4xwqwi3jnCbCLeNcLsIt49whwh3jHCnCHeOcJcId41wtwh3j3CPCPeMcK8I945wnwj3jXC/CPeP8IAID4zwoAgPjvCQCA+N8LAID4/wiAiPjPCoCI+O8JgIj43wuAiPj/CECE+M8KQIT47wlAhPjdAIT4vw9AjPiPDMCM+K8OwIz4nw3AjPi/D8CC+I8MIIL4rw4ggvifDSCC+L8PIIr4jwygivivDqCK+J8NoIr4vw+ghviPDGCG+K8OYIb4nw1ghvi/D2CO+I8M4I74rw7gjvifDeCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hHeF+H9ET4Q4YMRPhThwxE+EuGjET4W4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhkAiHRjgswuERjohwZISjIhwd4ZgIx0Y4TozjxjhejOPHOEGME8Y4UYwTxzhJjJPGOFmMk8c4RYxTxjhVjFPHOE2M08Y4XYzTxzhDjDPGOFOMM8c4S4yzxjhbjLPHOEeMc8Y4V4xzxzhPjPPGOF+M88e4QIwLxrhQjAvHuEiMi8a4WIyLx7hEjEvGuFSMS8e4TIzEuGyMy8W4fIwrxLhijCvFuHKMq8S4aoyrxbh6jGvEuGaMa8W4dozrxLhujOvFuH6MG8S4YYwbxbhxjJvEuGmMm8W4eYxbxLhljFvFuHWM28S4bYzbxbh9jDvEuGOMO8W4c4y7xLhrjLvFuHuMe8S4Z4x7xbh3jPvEuG+M+8W4f4wHxHhgjAfFeHCMh8R4aIyHxXh4jEfEeGSMR8V4dIzHxHhsjMfFeHyMJ8R4YownxXhyjKfEeGqMxnhajKfHeEaMZ8Z4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xnhXjHfHeE+M98Y4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GIfEODTGYTEOj3FEjCNjHBXj6BjHxDg2xnESHDfB8RIcP8EJEpwwwYkSnDjBSRKcNMHJEpw8wSkSnDLBqRKcOsFpEpw2wekSnD7BGRKcMcGZEpw5wVkSnDXB2RKcPcE5EpwzwbkSnDvBeRKcN8H5Epw/wQUSXDDBhRJcOMFFElw0wcUSXDzBJRJcMsGlElw6wWUSJMFlE1wuweUTXCHBFRNcKcGVE1wlwVUTXC3B1RNcI8E1E1wrwbUTXCfBdRNcL8H1E9wgwQ0T3CjBjRPcJMFNE9wswc0T3CLBLRPcKsGtE9wmwW0T3C7B7RPcIcEdE9wpwZ0T3CXBXRPcLcHdE9wjwT0T3CvBvRPcJ8F9E9wvwf0TPCDBAxM8KMGDEzwkwUMTPCzBwxM8IsEjEzwqwaMTPCbBYxM8LsHjEzwhwRMTPCnBkxM8JcFTEzTB0xI8PcEzEjwzwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBuxK8O8F7Erw3wUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYL3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4JMGhCQ5LcHiCIxIcmeCoBEcnOCbBsQmOk+K4KY6X4vgpTpDihClOlOLEKU6S4qQpTpbi5ClOkeKUKU6V4tQpTpPitClOl+L0Kc6Q4owpzpTizCnOkuKsKc6W4uwpzpHinCnOleLcKc6T4rwpzpfi/CkukOKCKS6U4sIpLpLioikuluLiKS6R4pIpLpXi0ikukyIpLpvicikun+IKKa6Y4koprpziKimumuJqKa6e4hoprpniWimuneI6Ka6b4noprp/iBilumOJGKW6c4iYpbpriZilunuIWKW6Z4lYpbp3iNilum+J2KW6f4g4p7pjiTinunOIuKe6a4m4p7p7iHinumeJeKe6d4j4p7pvifinun+IBKR6Y4kEpHpziISkemuJhKR6e4hEpHpniUSkeneIxKR6b4nEpHp/iCSmemOJJKZ6c4ikpnpqiKZ6W4ukpnpHimSmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKd6V4t0p3pPivSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxSEpDk1xWIrDUxyR4sgUR6U4OsUxKY5NcZwMx81wvAzHz3CCDCfMcKIMJ85wkgwnzXCyDCfPcIoMp8xwqgynznCaDKfNcLoMp89whgxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQyXzHCpDJfOcJkMyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMT8rw5AxPyfDUDM3wtAxPz/CMDM/M8KwMz87wnAzPzfC8DM/P8IIML8zwogwvzvCSDC/N8LIML8/wigyvzPCqDK/O8JoMr83wugyvz/CGDG/M8KYMb87wlgxvzfC2DG/P8I4M78zwrgzvzvCeDO/NcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+F9Gd6f4QMZPpjhQxk+nOEjGT6a4WMZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxkOyXBohsMyHJ7hiAxHZjgqw9EZjslwbIbj5DhujuPlOH6OE+Q4YY4T5ThxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkuGSOS+W4dI7L5EiOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjifneEqOp+ZojqfleHqOZ+R4Zo5n5Xh2jufkeG6O5+V4fo4X5HhhjhfleHGOl+R4aY6X5Xh5jlfkeGWOV+V4dY7X5HhtjtfleH2ON+R4Y4435XhzjrfkeGuOt+V4e4535HhnjnfleHeO9+R4b46DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsc78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcUiOQ3McluPwHEfkODLHUTmOznFMjmNzHKfAcQscr8DxC5ygwAkLnKjAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcosAlC1yqwKULXKZACly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLHAkwo8ucBTCjy1QAs8rcDTCzyjwDMLPKvAsws8p8BzCzyvwPMLvKDACwu8qMCLC7ykwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF3hfgfcX+ECBDxb4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4R4F/FvhXgX8X+E+B/xb4X4FDChxa4LAChxc4osCRBY4qcHSBYwocW+A4JY5b4ngljl/iBCVOWOJEJU5c4iQlTlriZCVOXuIUJU5Z4lQlTl3iNCVOW+J0JU5f4gwlzljiTCXOXOIsJc5a4mwlzl7iHCXOWeJcJc5d4jwlzlvifCXOX+ICJS5Y4kIlLlziIiUuWuJiJS5e4hIlLlniUiUuXeIyJVLisiUuV+LyJa5Q4oolrlTiyiWuUuKqJa5W4uolrlHimiWuVeLaJa5T4rolrlfi+iVuUOKGJW5U4sYlblLipiVuVuLmJW5R4pYlblXi1iVuU+K2JW5X4vYl7lDijiXuVOLOJe5S4q4l7lbi7iXuUeKeJe5V4t4l7lPiviXuV+L+JR5Q4oElHlTiwSUeUuKhJR5W4uElHlHikSUeVeLRJR5T4rElHlfi8SWeUOKJJZ5U4sklnlLiqSVa4mklnl7iGSWeWeJZJZ5d4jklnlvieSWeX+IFJV5Y4kUlXlziJSVeWuJlJV5e4hUlXlniVSVeXeI1JV5b4nUlXl/iDSXeWOJNJd5c4i0l3lribSXeXuIdJd5Z4l0l3l3iPSXeW+KgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7E+0q8v8QHSnywxIdKfLjER0p8tMTHSny8xCdKfLLEp0p8usRnSny2xOdKfL7EF0p8scSXSny5xFdKfLXE10p8vcQ3SnyzxLdKfLvEd0p8t8T3Sny/xA9K/LDEj0r8uMRPSvy0xM9K/LzEL0r8ssSvSvy6xG9K/LbE70r8vsQfSvyxxJ9K/LnEX0r8tcTfSvy9xD9K/LPEv0r8u8R/Svy3xP9KHFLi0BKHlTi8xBEljixxVImjSxxT4tgSx6lw3ArHq3D8CieocMIKJ6pw4gonqXDSCiercPIKp6hwygqnqnDqCqepcNoKp6tw+gpnqHDGCmeqcOYKZ6lw1gpnq3D2CueocM4K56pw7grnqXDeCuercP4KF6hwwQoXqnDhChepcNEKF6tw8QqXqHDJCpeqcOkKl6mQCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67wmAqPrfC4Co+v8IQKT6zwpApPrvCUCk+t0ApPq/D0Cs+o8MwKz6rw7ArPqfDcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6vw8gqvqPDKCq+q8OoKr6nw2gqvq/D6Cm+o8MYKb6rw5gpvqfDWCm+r8PYK76jwzgrvqvDuCu+p8N4KBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2Fd5X4f0VPlDhgxU+VOHDFT5S4aMVPlbh4xU+UeGTFT5V4dMVPlPhsxU+V+HzFb5Q4YsVvlThyxW+UuGrFb5W4esVvlHhmxW+VeHbFb5T4bsVvlfh+xV+UOGHFX5U4ccVflLhpxV+VuHnFX5R4ZcVflXh1xV+U+G3FX5X4fcV/lDhjxX+VOHPFf5S4a8V/lbh7xX+UeGfFf5V4d8V/lPhvxX+V+GQCodWOKzC4RWOqHBkhaMqHF3hmArHVjhOjePWOF6N49c4QY0T1jhRjRPXOEmNk9Y4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjbPWOFuNs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNC9e4SI2L1rhYjYvXuESNS9a4VI1L17hMjdS4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGWNW9W4dY3b1LhtjdvVuH2NO9S4Y4071bhzjbvUuGuNu9W4e4171LhnjXvVuHeN+9S4b4371bh/jQfUeGCNB9V4cI2H1HhojYfVeHiNR9R4ZI1H1Xh0jcfUeGyNx9V4fI0n1HhijSfVeHKNp9R4ao3WeFqNp9d4Ro1n1nhWjWfXeE6N59Z4Xo3n13hBjRfWeFGNF9d4SY2X1nhZjZfXeEWNV9Z4VY1X13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331jioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xvhrvr/GBGh+s8aEaH67xkRofrfGxGh+v8Ykan6zxqRqfrvGZGp+t8bkan6/xhRpfrPGlGl+u8ZUaX63xtRpfr/GNGt+s8a0a367xnRrfrfG9Gt+v8YMaP6zxoxo/rvGTGj+t8bMaP6/xixq/rPGrGr+u8Zsav63xuxq/r/GHGn+s8acaf67xlxp/rfG3Gn+v8Y8a/6zxrxr/rvGfGv+t8b8ah9Q4tMZhNQ6vcUSNI2scVePoGsfUOLbGcRoct8HxGhy/wQkanLDBiRqcuMFJGpy0wckanLzBKRqcssGpGpy6wWkanLbB6RqcvsEZGpyxwZkanLnBWRqctcHZGpy9wTkanLPBuRqcu8F5Gpy3wfkanL/BBRpcsMGFGly4wUUaXLTBxRpcvMElGlyywaUaXLrBZRqkwWUbXK7B5RtcocEVG1ypwZUbXKXBVRtcrcHVG1yjwTUbXKvBtRtcp8F1G1yvwfUb3KDBDRvcqMGNG9ykwU0b3KzBzRvcosEtG9yqwa0b3KbBbRvcrsHtG9yhwR0b3KnBnRvcpcFdG9ytwd0b3KPBPRvcq8G9G9ynwX0b3K/B/Rs8oMEDGzyowYMbPKTBQxs8rMHDGzyiwSMbPKrBoxs8psFjGzyuweMbPKHBExs8qcGTGzylwVMbtMHTGjy9wTMaPLPBsxo8u8FzGjy3wfMaPL/BCxq8sMGLGry4wUsavLTByxq8vMErGryywasavLrBaxq8tsHrGry+wRsavLHBmxq8ucFbGry1wdsavL3BOxq8s8G7Gry7wXsavLfBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g/c1eH+DDzT4YIMPNfhwg480+GiDjzX4eINPNPhkg081+HSDzzT4bIPPNfh8gy80+GKDLzX4coOvNPhqg681+HqDbzT4ZoNvNfh2g+80+G6D7zX4foMfNPhhgx81+HGDnzT4aYOfNfh5g180+GWDXzX4dYPfNPhtg981+H2DPzT4Y4M/Nfhzg780+GuDvzX4e4N/NPhng381+HeD/zT4b4P/NTikwaENDmtweIMjGhzZ4KgGRzc4psGxDY7T4rgtjtfi+C1O0OKELU7U4sQtTtLipC1O1uLkLU7R4pQtTtXi1C1O0+K0LU7X4vQtztDijC3O1OLMLc7S4qwtztbi7C3O0eKcLc7V4twtztPivC3O1+L8LS7Q4oItLtTiwi0u0uKiLS7W4uItLtHiki0u1eLSLS7TIi0u2+JyLS7f4gotrtjiSi2u3OIqLa7a4motrt7iGi2u2eJaLa7d4jotrtviei2u3+IGLW7Y4kYtbtziJi1u2uJmLW7e4hYtbtniVi1u3eI2LW7b4nYtbt/iDi3u2OJOLe7c4i4t7tribi3u3uIeLe7Z4l4t7t3iPi3u2+J+Le7f4gEtHtjiQS0e3OIhLR7a4mEtHt7iES0e2eJRLR7d4jEtHtvicS0e3+IJLZ7Y4kktntziKS2e2qItntbi6S2e0eKZLZ7V4tktntPiuS2e1+L5LV7Q4oUtXtTixS1e0uKlLV7W4uUtXtHilS1e1eLVLV7T4rUtXtfi9S3e0OKNLd7U4s0t3tLirS3e1uLtLd7R4p0t3tXi3S3e0+K9LQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Fu8r8X7W3ygxQdbfKjFh1t8pMVHW3ysxcdbfKLFJ1t8qsWnW3ymxWdbfK7F51t8ocUXW3ypxZdbfKXFV1t8rcXXW3yjxTdbfKvFt1t8p8V3W3yvxfdb/KDFD1v8qMWPW/ykxU9b/KzFz1v8osUvW/yqxa9b/KbFb1v8rsXvW/yhxR9b/KnFn1v8pcVfW/ytxd9b/KPFP1v8q8W/W/ynxX9b/K/FIS0ObXFYi8NbHNHiyBZHtTi6xTEtjm1xnA7H7XC8DsfvcIIOJ+xwog4n7nCSDiftcLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDhfucJEOF+1wsQ4X73CJDpfscKkOl+5wmQ7pcNkOl+tw+Q5X6HDFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA5P6vDkDk/p8NQO7fC0Dk/v8IwOz+zwrA7P7vCcDs/t8LwOz+/wgg4v7PCiDi/u8JIOL+3wsg4v7/CKDq/s8KoOr+7wmg6v7fC6Dq/v8IYOb+zwpg5v7vCWDm/t8LYOb+/wjg7v7PCuDu/u8J4O7+1w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4X0d3t/hAx0+2OFDHT7c4SMdPtrhYx0+3uETHT7Z4VMdPt3hMx0+2+FzHT7f4QsdvtjhSx2+3OErHb7a4Wsdvt7hGx2+2eFbHb7d4Tsdvtvhex2+3+EHHX7Y4UcdftzhJx1+2uFnHX7e4RcdftnhVx1+3eE3HX7b4Xcdft/hDx3+2OFPHf7c4S8d/trhbx3+3uEfHf7Z4V8d/t3hPx3+2+F/HQ7pcGiHwzoc3uGIDkd2OKrD0R2O6XBsh+P0OG6P4/U4fo8T9DhhjxP1OHGPk/Q4aY+T9Th5j1P0OGWPU/U4dY/T9Dhtj9P1OH2PM/Q4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/S4ZI9L9bh0j8v0SI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2eFKPJ/d4So+n9miPp/V4eo9n9Hhmj2f1eHaP5/R4bo/n9Xh+jxf0eGGPF/V4cY+X9Hhpj5f1eHmPV/R4ZY9X9Xh1j9f0eG2P1/V4fY839Hhjjzf1eHOPt/R4a4+39Xh7j3f0eGePd/V4d4/39Hhvj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x7v6/H+Hh/o8cEeH+rx4R4f6fHRHv+n6Z7S8DwYBYqmSG3b9q5t27Zt79q2bbvfa6O2bdttnPOci38GawarGGA5wGqA9QCbAbYD7AbYD/CZAT47wOcG+PwAXxjgiwN8aYAvD/CVAb46wNcG+PoA3xjgmwN8a4BvD/CdAb47wPcG+P4APxjghwP8aIAfD/CTAX46wM8G+PkAvxjglwP8aoBfD/CbAX47wO8G+P0AfxjgjwP8aYA/D/CXAf46wN8G+PsA/xjgnwP8a4B/D/CfAf47wP8GOGyAwwc4YoAjBzhqgKMHOGaAYwc4JMBxAhw3wPECHD/AoQFOEOCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhHgkgEuFSABLh3gMgEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHDD0fxfSYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHKABnhLgqQGeFuDpAZ4R4JkBnhXg2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wEOAgwCDAOMAowDTAJMA8wCzAMsAiwDrAKsA2wCbAPsAuwDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTATwP8LMDPA/wiwC8D/CrArwP8JsBvA/wuwO8D/CHAHwP8KcCfA/wlwF8D/C3A3wP8I8A/A/wrwL8D/CfAfwP8L8BhAQ4PcESAIwMcFeDoAMcEODbAISGOE+K4IY4X4vghDg1xghAnDHGiECcOcZIQJw1xshAnD3GKEKcMcaoQpw5xmhCnDXG6EKcPcYYQZwxxphBnDnGWEGcNcbYQZw9xjhDnDHGuEOcOcZ4Q5w1xvhDnD3GBEBcMcaEQFw5xkRAXDXGxEBcPcYkQlwxxqRAJcekQlwlx2RCXC3H5EFcIccUQVwpx5RBXCXHVEFcLcfUQ1whxzRDXCnHtENcJcd0Q1wtx/RA3CHHDEDcKceMQNwlx0xA3C3HzELcIccsQtwpx6xC3CXHbELcLcfsQdwhxxxB3CnHnEHcJcdcQdwtx9xD3CHHPEPcKce8Q9wlx3xD3C3H/EA8I8cAQDwrx4BAPCfHQEA8L8fAQjwjxyBCPCvHoEI8J8dgQjwvx+BBPCPHEEE8K8eQQDfGUEE8N8bQQTw/xjBDPDPGsEM8O8ZwQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEO8M8a4Q7w7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8OcRBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+IzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIX4a4mchfh7iFyF+GeJXIX4d4jchfhvidyF+H+IPIf4Y4k8h/hziLyH+GuJvIf4e4h8h/hniXyH+HeI/If4b4n8hDgtxeIgjQhwZ4qgQR4c4JsSxIQ6JcJwIx41wvAjHj3BohBNEOGGEE0U4cYSTRDhphJNFOHmEU0Q4ZYRTRTh1hNNEOG2E00U4fYQzRDhjhDNFOHOEs0Q4a4SzRTh7hHNEOGeEc0U4d4TzRDhvhPNFOH+EC0S4YIQLRbhwhItEuGiEi0W4eIRLRLhkhEtFSIRLR7hMhMtGuFyEy0e4QoQrRrhShCtHuEqEq0a4WoSrR7hGhGtGuFaEa0e4ToTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRnhchMdHeEKEJ0Z4UoQnR2iEp0R4aoSnRXh6hGdEeGaEZ0V4doTnRHhuhOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dISDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsIn4nw2Qifi/D5CF+I8MUIX4rw5QhfifDVCF+L8PUI34jwzQjfivDtCN+J8N0I34vw/Qg/iPDDCD+K8OMIP4nw0wg/i/DzCL+I8MsIv4rw6wi/ifDbCL+L8PsIf4jwxwh/ivDnCH+J8NcIf4vw9wj/iPDPCP+K8O8I/4nw3wj/i3BYhMMjHBHhyAhHRTg6wjERjo1wSIzjxDhujOPFOH6MQ2OcIMYJY5woxoljnCTGSWOcLMbJY5wixiljnCrGqWOcJsZpY5wuxuljnCHGGWOcKcaZY5wlxlljnC3G2WOcI8Y5Y5wrxrljnCfGeWOcL8b5Y1wgxgVjXCjGhWNcJMZFY1wsxsVjXCLGJWNcKkZiXDrGZWJcNsblYlw+xhViXDHGlWJcOcZVYlw1xtViXD3GNWJcM8a1Ylw7xnViXDfG9WJcP8YNYtwwxo1i3DjGTWLcNMbNYtw8xi1i3DLGrWLcOsZtYtw2xu1i3D7GHWLcMcadYtw5xl1i3DXG3WLcPcY9Ytwzxr1i3DvGfWLcN8b9Ytw/xgNiPDDGg2I8OMZDYjw0xsNiPDzGI2I8MsajYjw6xmNiPDbG42I8PsYTYjwxxpNiPDlGYzwlxlNjPC3G02M8I8YzYzwrxrNjPCfGc2M8L8bzY7wgxgtjvCjGi2O8JMZLY7wsxstjvCLGK2O8KsarY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGx2N8IsYnY3wqxqdjHMQYxBjGGMUYx5jEmMaYxZjHWMRYxljFWMfYxNjG2MXYx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/G+F+Mw2IcHuOIGEfGOCrG0TGOiXFsjEMSHCfBcRMcL8HxExya4AQJTpjgRAlOnOAkCU6a4GQJTp7gFAlOmeBUCU6d4DQJTpvgdAlOn+AMCc6Y4EwJzpzgLAnOmuBsCc6e4BwJzpngXAnOneA8Cc6b4HwJzp/gAgkumOBCCS6c4CIJLprgYgkunuASCS6Z4FIJkuDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6R4JoJrpXg2gmuk+C6Ca6X4PoJbpDghglulODGCW6S4KYJbpbg5glukeCWCW6V4NYJbpPgtglul+D2Ce6Q4I4J7pTgzgnukuCuCe6W4O4J7pHgngnuleDeCe6T4L4J7pfg/gkekOCBCR6U4MEJHpLgoQkeluDhCR6R4JEJHpXg0Qkek+CxCR6X4PEJnpDgiQmelODJCZrgKQmemuBpCZ6e4BkJnpngWQmeneA5CZ6b4HkJnp/gBQlemOBFCV6c4CUJXprgZQlenuAVCV6Z4FUJXp3gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCT6e4BMJPpngUwk+neAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyW4PAERyQ4MsFRCY5OcEyCYxMckuI4KY6b4ngpjp/i0BQnSHHCFCdKceIUJ0lx0hQnS3HyFKdIccoUp0px6hSnSXHaFKdLcfoUZ0hxxhRnSnHmFGdJcdYUZ0tx9hTnSHHOFOdKce4U50lx3hTnS3H+FBdIccEUF0px4RQXSXHRFBdLcfEUl0hxyRSXSpEUl05xmRSXTXG5FJdPcYUUV0xxpRRXTnGVFFdNcbUUV09xjRTXTHGtFNdOcZ0U101xvRTXT3GDFDdMcaMUN05xkxQ3TXGzFDdPcYsUt0xxqxS3TnGbFLdNcbsUt09xhxR3THGnFHdOcZcUd01xtxR3T3GPFPdMca8U905xnxT3TXG/FPdP8YAUD0zxoBQPTvGQFA9N8bAUD0/xiBSPTPGoFI9O8ZgUj03xuBSPT/GEFE9M8aQUT07RFE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUBykGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2KT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfisBSHpzgixZEpjkpxdIpjUhyb4pAMx8lw3AzHy3D8DIdmOEGGE2Y4UYYTZzhJhpNmOFmGk2c4RYZTZjhVhlNnOE2G02Y4XYbTZzhDhjNmOFOGM2c4S4azZjhbhrNnOEeGc2Y4V4ZzZzhPhvNmOF+G82e4QIYLZrhQhgtnuEiGi/6/bciQIYtnuESGS2a4VIZkuHSGy2S4bIbLZbh8hitkuGKGK2W4coarZLhqhqtluHqGa2S4ZoZrZbh2hutkuG6G62W4foYbZLhhhhtluHGGm2S4aYabZbh5hltkuGWGW2W4dYbbZLhthttluH2GO2S4Y4Y7ZbhzhrtkuGuGu2W4e4Z7ZLhnhntluHeG+2S4b4b7Zbh/hgdkeGCGB2V4cIaHZHhohodleHiGR2R4ZIZHZXh0hsdkeGyGx2V4fIYnZHhihidleHKGZnhKhqdmeFqGp2d4RoZnZnhWhmdneE6G52Z4XobnZ3hBhhdmeFGGF2d4SYaXZnhZhpdneEWGV2Z4VYZXZ3hNhtdmeF2G12d4Q4Y3ZnhThjdneEuGt2Z4W4a3Z3hHhndmeFeGd2d4T4b3Znhfhvdn+ECGD2b4UIYPZ/hIho9m+FiGj2f4RIZPZvhUhk9nOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/CZDJ/N8LkMn8/whQxfzPClDF/O8JUMX83wtQxfz/CNDN/M8K0M387wnQzfzfC9DN/P8IMMP8zwoww/zvCTDD/N8LMMP8/wiwy/zPCrDL/O8JsMv83wuwy/z/CHDH/M8KcMf87wlwx/zfC3DH/P8I8M/8zwrwz/zvCfDP/N8L8Mh2U4PMMRGY7McFSGozMck+HYDIfkOE6O4+Y4Xo7j5zg0xwlynDDHiXKcOMdJcpw0x8lynDzHKXKcMsepcpw6x2lynDbH6XKcPscZcpwxx5lynDnHWXKcNcfZcpw9xzlynDPHuXKcO8d5cpw3x/lynD/HBXJcMMeFclw4x0VyXDTHxXJcPMclclwyx6VyJMelc1wmx2VzXC7H5XNcIccVc1wpx5VzXCXHVXNcLcfVc1wjxzVzXCvHtXNcJ8d1c1wvx/Vz3CDHDXPcKMeNc9wkx01z3CzHzXPcIsctc9wqx61z3CbHbXPcLsftc9whxx1z3CnHnXPcJcddc9wtx91z3CPHPXPcK8e9c9wnx31z3C/H/XM8IMcDczwox4NzPCTHQ3M8LMfDczwixyNzPCrHo3M8Jsdjczwux+NzPCHHE3M8KceTczTHU3I8NcfTcjw9xzNyPDPHs3I8O8dzcjw3x/NyPD/HC3K8MMeLcrw4x0tyvDTHy3K8PMcrcrwyx6tyvDrHa3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHcnw8xydyfDLHp3J8OsdBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2Oz+T4bI7P5fh8ji/k+GKOL+X4co6v5Phqjq/l+HqOb+T4Zo5v5fh2ju/k+G6O7+X4fo4f5Phhjh/l+HGOn+T4aY6f5fh5jl/k+GWOX+X4dY7f5Phtjt/l+H2OP+T4Y44/5fhzjr/k+GuOv+X4e45/5Phnjn/l+HeO/+T4b47/5Tgsx+E5jshxZI6jchyd45gcx+Y4pMBxChy3wPEKHL/AoQVOUOCEBU5U4MQFTlLgpAVOVuDkBU5R4JQFTlXg1AVOU+C0BU5X4PQFzlDgjAXOVODMBc5S4KwFzlbg7AXOUeCcBc5V4NwFzlPgvAXOV+D8BS5Q4IIFLlTgwgUuUuCiBS5W4OIFLlHgkgUuVSAFLl3gMgUuW+ByBS5f4AoFrljgSgWuXOAqBa5a4GoFrl7gGgWuWeBaBa5d4DoFrlvgegWuX+AGBW5Y4EYFblzgJgVuWuBmBW5e4BYFblngVgVuXeA2BW5b4HYFbl/gDgXuWOBOBe5c4C4F7lrgbgXuXuAeBe5Z4F4F7l3gPgXuW+B+Be5f4AEFHljgQQUeXOAhBR5a4GEFHl7gEQUeWeBRBR5d4DEFHlvgcQUeX+AJBZ5Y4EkFnlygBZ5S4KkFnlbg6QWeUeCZBZ5V4NkFnlPguQWeV+D5BV5Q4IUFXlTgxQVeUuClBV5W4OUFXlHglQVeVeDVBV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbg4wU+UeCTBT5V4NMFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsC3ymwGcLfK7A5wt8ocAXC3ypwJcLfKXAVwt8rcDXC3yjwDcLfKvAtwt8p8B3C3yvwPcL/KDADwv8qMCPC/ykwE8L/KzAzwv8osAvC/yqwK8L/KbAbwv8rsDvC/yhwB8L/KnAnwv8pcBfC/ytwN8L/KPAPwv8q8C/C/ynwH8L/K/AYQUOL3BEgSMLHFXg6ALHFDi2wCEljlPiuCWOV+L4JQ4tcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSKXHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEi3xlBJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSzy/xghIvLPGiEi8u8ZISLy3xshIvL/GKEq8s8aoSry7xmhKvLfG6Eq8v8YYSbyzxphJvLvGWEm8t8bYSby/xjhLvLPGuEu8u8Z4S7y3xvhLvL/GBEh8s8aESHy7xkRIfLfGxEh8v8YkSnyzxqRKfLnFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iMyU+W+JzJT5f4gslvljiSyW+XOIrJb5a4mslvl7iGyW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ4rcXiJI0ocWeKoEkeXOKbEsSUOqXCcCsetcLwKx69waIUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVUiFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1dohadUeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVXh+hRdUeGGFF1V4cYWXVHhphZdVeHmFV1R4ZYVXVXh1hddUeG2F11V4fYU3VHhjhTdVeHOFt1R4a4W3VXh7hXdUeGeFd1V4d4X3VHhvhfdVeH+FD1T4YIUPVfhwhY9U+GiFj1X4eIVPVPhkhU9V+HSFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Cp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twWIXDKxxR4cgKR1U4usIxFY6tcEiN49Q4bo3j1Th+jUNrnKDGCWucqMaJa5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKpGaly6xmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3LTGzWrcvMYtatyyxq1q3LrGbWrctsbtaty+xh1q3LHGnWrcucZdaty1xt1q3L3GPWrcs8a9aty7xn1q3LfG/Wrcv8YDajywxoNqPLjGQ2o8tMbDajy8xiNqPLLGo2o8usZjajy2xuNqPL7GE2o8scaTajy5Rms8pcZTazytxtNrPKPGM2s8q8azazynxnNrPK/G82u8oMYLa7yoxotrvKTGS2u8rMbLa7yixitrvKrGq2u8psZra7yuxutrvKHGG2u8qcaba7ylxltrvK3G22u8o8Y7a7yrxrtrvKfGe2u8r8b7a3ygxgdrfKjGh2t8pMZHa3ysxsdrfKLGJ2t8qsanaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nf4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjcNqHF7jiBpH1jiqxtE1jqlxbI1DGhynwXEbHK/B8Rsc2uAEDU7Y4EQNTtzgJA1O2uBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GINLt7gEg0u2eBSDdLg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ3a4CkNntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DZ7f4AUNXtjgRQ1e3OAlDV7a4GUNXt7gFQ1e2eBVDV7d4DUNXtvgdQ1e3+ANDd7Y4E0N3tzgLQ3e2uBtDd7e4B0N3tngXQ3e3eA9Dd7b4H0N3t/gAw0+2OBDDT7c4CMNPtrgYw0+3uATDT7Z4FMNPt3goMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc1uDwBkc0OLLBUQ2ObnBMg2MbHNLiOC2O2+J4LY7f4tAWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2qRFpducZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u0RZPafHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2vx/BYvaPHCFi9q8eIWL2nx0hYva/HyFq9o8coWr2rx6havafHaFq9r8foWb2jxxhZvavHmFm9p8dYWb2vx9hbvaPHOFu9q8e4W72nx3hbva/H+Fh9o8cEWH2rx4RYfafHRFh9r8fEWn2jxyRafavHpFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i0+0+KzLT7X4vMtvtDiiy2+1OLLLb7S4qstvtbi6y2+0eKbLb7V4tstvtPiuy2+1+L7LX7Q4octftTixy1+0uKnLX7W4uctftHily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf7X4rAWh7c4osWRLY5qcXSLY1oc2+KQDsfpcNwOx+tw/A6HdjhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh3S4dIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4cod2eEqHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHd3Z4V4d3d3hPh/d2eF+H93f4QIcPdvhQhw93+EiHj3b4WIePd/hEh092+FSHT3c46DDoMOww6jDuMOkw7TDrMO+w6LDssOqw7rDpsO2w67Dv8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw6HdTi8wxEdjuxwVIejOxzT4dgOh/Q4To/j9jhej+P3OLTHCXqcsMeJepy4x0l6nLTHyXqcvMcpepyyx6l6nLrHaXqctsfpepy+xxl6nLHHmXqcucdZepy1x9l6nL3HOXqcs8e5epy7x3l6nLfH+Xqcv8cFelywx4V6XLjHRXpctMfFely8xyV6XLLHpXqkx6V7XKbHZXtcrsfle1yhxxV7XKnHlXtcpcdVe1ytx9V7XKPHNXtcq8e1e1ynx3V7XK/H9XvcoMcNe9yox4173KTHTXvcrMfNe9yixy173KrHrXvcpsdte9yux+173KHHHXvcqcede9ylx1173K3H3Xvco8c9e9yrx7173KfHfXvcr8f9ezygxwN7PKjHg3s8pMdDezysx8N7PKLHI3s8qsejezymx2N7PK7H43s8occTezypx5N7tMdTejy1x9N6PL3HM3o8s8ezejy7x3N6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7eryzx7t6vLvHe3q8t8f7ery/xwd6fLDHh3p8uMdHeny0x8d6fLzHJ3p8sseneny6x0GP/xcAAP//Kl7h/A==") 58.145765125s ago: executing program 0 (id=377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) 58.145301535s ago: executing program 3 (id=378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) 57.827292209s ago: executing program 3 (id=379): openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18b841, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='.\x02\x00', 0x2000c0, &(0x7f0000002380)=ANY=[@ANYBLOB="747970653d629bfeaa2c747970653d75699e3e2c666f7263652c6465636f6d706f73652c666f7263652c6e6c733d69736f383835392d392c00fb96ab4c9493d7be8b39915215ec88b35cc6fc60097459"], 0x1, 0x6fd, &(0x7f0000000900)="$eJzs3U1sHFcdAPD/7K7H3lRyt23SFoQUqxERNJDYWUqChERACPlQoUhcejWJ01hZu5HtIidCZAsUbpQTyqGHImQOPaEekIo4IMoZCYkryj0S94gDi2Z2dr27tte7ib8Sfj9pdt7MvK/5+83b2dlEG8D/rfm3YqIZScyfe3Mj236wWW882Kwvd9IRMRkRpYhKexXJSkTyWcSVaC/xuWxnUV2yWztvPPz0w7P3P663tyrFkucvDSu3pTWkhWaxxExElIv1mCq71Xdth/ruRdHxkSTdfmcBO9MJHBy11jbNcYqPcN0Cx929iPLEDvtrESciYqq4D4hidui89aWH2MV9NdYsBwAAAMdTea8Mzz+KR7ER04fTHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg2JO3fDEyKpdRJz0TS+f3/tNiXSY/3D/9/ZY/j7984pI4AAAAAAAAAwIH4pPji/vSjeBQbMd3Z30ry7/xfyzdO5q/PxbuxFouxGudjIxZiPdZjNeYiJqZ7Kkw3FtbXV+e2l/xNZCVbrda9ouTFiKjF5EDJi4dy2gAAAAAAAADwTClvJX8a8zF9lH0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBSUS5vcqXk510LUqViJiKiDTL14z4cyf9NPvLUXcAAAAADl61WE8n/20nWkn+mf/l/HP/VLwbK7EeS7EejViM6/mzgPan/tI/muWicH25XbTtXr7x7X+P1Y+8xogox3u7tDyb5zjVLTEf34sfxLmYiauxGkvxo1iI9ViMmahmJxELkUSt2n56UXuwWV/uXfobv9K3dXWwb6cHtl/Ne1KNG7GU9+18XEuj/dgkP4eszVd7WvtjGjHQ4ntZdJJvFUaM0fWev9evi+cyhdbzI9ZxMGr5mU90IzKbxb6IxgvDYz/mOBlsaS5K3WdQJ7daia1R2dWJ+Q/HifmJYp3F+hf9Md9vYz5KG4zExSgVoy/i5f6Y3/7i/Rf7C3/5n3+9erO0cuvmjbVzB3hKB2qikxiMRL0nEq8MH31FJBpZJJqjR2JicMfUE5zHPkqLaLQn5tFmy+/mqYV4rWcIvhPXYzEuxWzMxeWYjW/Exaj3jbBTfXGt1Jf7Y5Jfa6Xt81t1SOfPfKkn0y/3yHy4sri80BPX3pmulh8r9lz5IGZ7ovTi8NE39rtA1v7ni3TWxs+67zjHQV8kirm507uXigh8kO4Yid+2ste1xsqt1ZsLt0ds72yxzi7b9/vn5t/tx/k8vmy8ZDNuJd/KY1LtjJfs2Evd3vbHKy2+cWmXK207dqp7rBbTsRTf3/VKTYt7uO01tY+90nvsX1szZ1rc33SO9d3lxDvRyO9CBswcTlQBGNmJ10+k1YfVv1c/qv68erP65tR3Ji9PfiGNib9V/lT+Q+n3pW8mr8dH8ZOYPuqeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAs2Dtzt1bC43G4mo3EVODe540ke7a1vBElPbMs/ncaBVGLWJ4W0mRSPf33J/GRDUOqOZPImJInvSJm0jGHmNjJ7KBvC8Vdn44Ld/TKo9RvNIptXOeSqxN7fYXnNy6CqJ2a6Hxn1Zfnmr0XDI7/eAd8Ay5sL58+8LanbtfXVpeeHvx7cWVi5cvXb5U//rc1y7cWGoszrZfj7qXwEFYu3O3PDzHr9wEAAAAAAAAAAAAwDFT/Ov/9cf+zwyVPfKkq2s7t3z6sE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeErNvxUTzUhibvb8bLb9YLPeSDfrjU56K2clIkoRkfw4Ivks4kq0l6j1VJfs1s4bDz/98Oz9j+tbdVU6+UvDyo2mWSwxExHlYr23yR2q2V7ftZ76mo/VvaR7hlnAznQCB0ftfwEAAP//pQj73Q==") setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0xa8) mknod(0x0, 0x8000, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create(0x3ff) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 56.043866172s ago: executing program 0 (id=383): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) 56.016707288s ago: executing program 3 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, 0x0, 0x0) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) socket$xdp(0x2c, 0x3, 0x0) 53.393751406s ago: executing program 3 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7f}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x60}}, 0x10) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0x12) close(r4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) syz_read_part_table(0x5bf, &(0x7f0000000280)="$eJzs079LJHcUAPDvrFkmJphdgsQijeCWJgFTaLELEVmXbbIiJtgE0gULUxhSWIiiFld55z9w4q/GRq48EK459EAU1kosrhDrA8XGag935zwRiwP1TuXzKfbtfN97+2Z4s4EHLRVeJd9qcQghDi3JZXy5aurKSbr+2Rz+WCv2l9sHegeHQojCu7ctf0dJRT02fex4kcRK8ivluKu6uN13spbd6djbyi2nkvxGqjFt9HAlUz/4Z/6Wn5jHZL2wmZmZHSvNjRdG9ksTR7+GbxqJ7qX85J9t+eHkxdpoxJd3PT9X7VndrVWOQ/bDn6ChdtuDuReu7n+hdfpg+uz3KPz/S+f3B68nnyXvwGn0pe8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47NabQ2Zmdqw0N14Y+e9JCH8t/1T88Wnx3/nupfxk3JYfTjXqNlLXtn914/mFzYv5U6WJo1y1Z3W3Vjl+3vJzeqt61vUmqeuMbjqJ+yjZfzjf/35p4mih9euLXO3Szk+jEH642vztZ7tNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOABKfaX2wd6B4dCiOrXfals+jzW4kY+SurSSawk5+W4q7q43Xeylt3p2NvKLQ/Eob3elwphKoQweriSCeG360Y2NcJ3d/pcfJr3AQAA///v6nWP") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getpid() 50.206099222s ago: executing program 1 (id=390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xf, 0xa, 0x2, "020000000000006825052e8bd9e6660201000000000000000000000200", 0x30314442}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) 50.000739114s ago: executing program 3 (id=391): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0), 0x0, 0x38b6, 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r1, &(0x7f0000000100)=ANY=[], 0x1d, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000004000000000000009000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fdatasync(0xffffffffffffffff) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe, 0x11, r2, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) read(r2, &(0x7f0000001400)=""/4096, 0x1000) 47.692955451s ago: executing program 1 (id=395): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 46.437359767s ago: executing program 5 (id=396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000008000000000000000000850006006d000000f8490fc477aa8495"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='netfs_rreq_ref\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 44.716633075s ago: executing program 3 (id=399): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) 44.616156995s ago: executing program 1 (id=400): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() waitid(0x2, r2, 0x0, 0x8, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_getscheduler(r2) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c8, 0x12) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000200)={0x0, 0x20, 0x100, 0x200, 0x1, 0x6, 0x0, 0xffff, 0x1, 0x101, 0x2, 0x9, &(0x7f0000000040), 0x0, 0x0}) 40.780937502s ago: executing program 41 (id=383): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) 40.000431111s ago: executing program 1 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 39.398125725s ago: executing program 5 (id=406): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$tun(0xffffff9c, 0x0, 0x80, 0x0) socket(0x28, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, 0x0, &(0x7f0000000000)) geteuid() quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000702, r0, &(0x7f0000000480)) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r6, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/123, 0x7b}], 0x1, 0x15b, 0x0) 38.425431354s ago: executing program 1 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) io_setup(0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 37.570765028s ago: executing program 1 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000008000000000000000000850006006d000000f8490fc477aa8495"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='netfs_rreq_ref\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 37.427431418s ago: executing program 5 (id=409): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000300)={0xd, "684a54aef8b161b1359ac4d728263bebda8bff1ccf964259c1bf9249ef3dfc05c0aa7b65e4655023e8b95b766e8975db688c81f36a05f9495fec1ff5b1a11475af641979470eb9dec6f577230837a90c694deeab12e9d3146a3bca996be9af149f5fcd176be04a5d369f4a4870d9832639ca97607fcbae27b1991f8ac6df0c3b"}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) ioctl$FITRIM(r8, 0xff0a, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) 33.912493168s ago: executing program 5 (id=411): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, 0x0, 0x0) write$binfmt_misc(r5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x1c3, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) 31.798339558s ago: executing program 5 (id=413): syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(0x0, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 30.218881416s ago: executing program 42 (id=399): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) 30.162125619s ago: executing program 5 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000008000000000000000000850006006d000000f8490fc477aa8495"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='netfs_rreq_ref\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 22.194938574s ago: executing program 43 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000008000000000000000000850006006d000000f8490fc477aa8495"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='netfs_rreq_ref\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 15.218088879s ago: executing program 44 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000008000000000000000000850006006d000000f8490fc477aa8495"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='netfs_rreq_ref\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 10.830846332s ago: executing program 9 (id=440): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10.641706299s ago: executing program 2 (id=441): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) 9.688763744s ago: executing program 2 (id=442): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x148640, 0x78e22799f4a46f1e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000000)='\t\x00\x00\x00', 0x4, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff038768441a8cb89e14f00800", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.687452509s ago: executing program 9 (id=450): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.302095558s ago: executing program 2 (id=443): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) 7.297792979s ago: executing program 9 (id=452): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) getegid() ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) 4.06473895s ago: executing program 2 (id=444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xf, 0xa, 0x2, "020000000000006825052e8bd9e6660201000000000000000000000200", 0x30314442}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4433, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 4.057467892s ago: executing program 9 (id=454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x4, 0x4002) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fbf, @loopback}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 2.749809541s ago: executing program 9 (id=445): socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) gettid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) 1.473365172s ago: executing program 2 (id=446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="42f7"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 139.299584ms ago: executing program 2 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10000, 0x102) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="170000005500e50100000000000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0100fe0f000002ff000000f2d2baad0812a2771e000000000000000086dd000078d5c49e72ca5fa34d3ada38633edcee00ad08a6735460323623579c2bbf4b222b0b870995a9c469ef297183ad0945ac36fe6de1aacb3e6e0d3bff455817405c925c"], 0x38}, 0x1, 0xffe}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r3, 0x1) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 0s ago: executing program 9 (id=448): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') kernel console output (not intermixed with test programs): 50:50:50 [ 255.691238][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.763094][ T6832] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.514018][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.44'. [ 261.524314][ T6859] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 261.587659][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.845596][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.700660][ T6894] loop7: detected capacity change from 0 to 4096 [ 268.791300][ T6894] ntfs3(loop7): ino=0, mi_enum_attr [ 269.082109][ T6906] loop8: detected capacity change from 0 to 32768 [ 269.297522][ T6906] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.160 (6906) [ 269.316229][ T6906] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.326406][ T6906] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 269.706008][ T6894] ntfs3(loop7): ino=0, mi_enum_attr [ 270.894458][ T6894] ntfs3(loop7): Failed to read $UpCase (-4). [ 270.952405][ T6906] BTRFS info (device loop8): enabling ssd optimizations [ 270.960579][ T6906] BTRFS info (device loop8): turning on async discard [ 270.967476][ T6906] BTRFS info (device loop8): enabling free space tree [ 270.975801][ T5834] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 270.984617][ T5834] Bluetooth: hci2: Injecting HCI hardware error event [ 270.993339][ T5848] Bluetooth: hci2: hardware error 0x00 [ 274.015140][ T6604] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.373387][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.385925][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.393660][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.403743][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.413402][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.927048][ T5848] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 276.512820][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.522208][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.531311][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.583576][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.595099][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.028419][ T6943] chnl_net:caif_netlink_parms(): no params data found [ 277.354219][ T5848] Bluetooth: hci5: command tx timeout [ 278.564446][ T5848] Bluetooth: hci7: command tx timeout [ 282.897087][ T5848] Bluetooth: hci5: command tx timeout [ 282.902775][ T5848] Bluetooth: hci7: command tx timeout [ 285.012422][ T5848] Bluetooth: hci5: command tx timeout [ 285.017875][ T5848] Bluetooth: hci7: command tx timeout [ 287.175052][ T5848] Bluetooth: hci5: command tx timeout [ 287.180576][ T5843] Bluetooth: hci7: command tx timeout [ 291.770199][ T6070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.890844][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.969115][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.977281][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.066498][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.074425][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.938923][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.737024][ T5848] Bluetooth: hci0: command tx timeout [ 295.744619][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.769419][ T6943] bridge_slave_0: entered allmulticast mode [ 295.786605][ T6943] bridge_slave_0: entered promiscuous mode [ 296.883603][ T6070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.022010][ T5843] Bluetooth: hci0: command tx timeout [ 299.011093][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.111973][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.119239][ T6943] bridge_slave_1: entered allmulticast mode [ 299.153617][ T6943] bridge_slave_1: entered promiscuous mode [ 299.243368][ T7066] loop6: detected capacity change from 0 to 128 [ 299.358387][ T31] audit: type=1800 audit(305.282:2): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.190" name="bus" dev="loop6" ino=1048638 res=0 errno=0 [ 299.402768][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.414222][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.422414][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.432205][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.455652][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.515672][ T6070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.559240][ T7070] syz.6.190: attempt to access beyond end of device [ 299.559240][ T7070] loop6: rw=2049, sector=721, nr_sectors = 320 limit=128 [ 299.821497][ T6070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.936108][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.983838][ T6954] chnl_net:caif_netlink_parms(): no params data found [ 300.050816][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.426038][ T5843] Bluetooth: hci1: command tx timeout [ 303.868876][ T5848] Bluetooth: hci1: command tx timeout [ 304.872612][ T6943] team0: Port device team_slave_0 added [ 305.213095][ T7104] dlm: Unknown command passed to DLM device : 0 [ 305.213095][ T7104] [ 305.301349][ T6943] team0: Port device team_slave_1 added [ 306.235743][ T5848] Bluetooth: hci1: command tx timeout [ 306.501370][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.707344][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.883710][ T6954] bridge_slave_0: entered allmulticast mode [ 306.891614][ T6954] bridge_slave_0: entered promiscuous mode [ 307.131353][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.142515][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.377763][ T6954] bridge_slave_1: entered allmulticast mode [ 307.395067][ T6954] bridge_slave_1: entered promiscuous mode [ 308.053235][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.061377][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.094312][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.248983][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.256413][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.303560][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.422609][ T5848] Bluetooth: hci1: command tx timeout [ 309.746956][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.785545][ T7025] chnl_net:caif_netlink_parms(): no params data found [ 310.813177][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.091766][ T6070] bridge_slave_1: left allmulticast mode [ 311.111439][ T6070] bridge_slave_1: left promiscuous mode [ 311.144250][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.203210][ T6070] bridge_slave_0: left allmulticast mode [ 311.219713][ T6070] bridge_slave_0: left promiscuous mode [ 311.226539][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.155297][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.173429][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.201234][ T6070] bond0 (unregistering): Released all slaves [ 313.918384][ T6954] team0: Port device team_slave_0 added [ 314.081897][ T6943] hsr_slave_0: entered promiscuous mode [ 314.133202][ T6943] hsr_slave_1: entered promiscuous mode [ 314.222076][ T6954] team0: Port device team_slave_1 added [ 316.429532][ T7025] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.437360][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.445324][ T7025] bridge_slave_0: entered allmulticast mode [ 316.454227][ T7025] bridge_slave_0: entered promiscuous mode [ 316.469083][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.476204][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.532979][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.203621][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.211142][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.237188][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.303997][ T6954] hsr_slave_0: entered promiscuous mode [ 317.310793][ T6954] hsr_slave_1: entered promiscuous mode [ 317.317352][ T6954] debugfs: 'hsr0' already exists in 'hsr' [ 317.323093][ T6954] Cannot create hsr debugfs directory [ 317.456225][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.471820][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.481716][ T7025] bridge_slave_1: entered allmulticast mode [ 317.493898][ T7025] bridge_slave_1: entered promiscuous mode [ 317.813936][ T7178] loop6: detected capacity change from 0 to 16 [ 319.363779][ T7178] erofs (device loop6): mounted with root inode @ nid 36. [ 319.802716][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.809056][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.867256][ T6070] hsr_slave_0: left promiscuous mode [ 319.895209][ T6070] hsr_slave_1: left promiscuous mode [ 319.901333][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.949028][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.991029][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.998418][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.122647][ T6070] veth1_macvtap: left promiscuous mode [ 320.138236][ T6070] veth0_macvtap: left promiscuous mode [ 320.148207][ T6070] veth1_vlan: left promiscuous mode [ 320.167030][ T6070] veth0_vlan: left promiscuous mode [ 321.690814][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 321.739262][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 323.879600][ T7025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.152371][ T7025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.466469][ T7209] loop7: detected capacity change from 0 to 16 [ 325.169525][ T7209] erofs (device loop7): mounted with root inode @ nid 36. [ 326.742526][ T7225] loop7: detected capacity change from 0 to 2048 [ 326.866804][ T7025] team0: Port device team_slave_0 added [ 326.907818][ T7225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.018286][ T7025] team0: Port device team_slave_1 added [ 330.298047][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.305027][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.359123][ T7025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.378573][ T6539] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.439428][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.459182][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.535783][ T7025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.557614][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.566898][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.574596][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.585844][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.593799][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.669424][ T5848] Bluetooth: hci4: command tx timeout [ 332.926102][ T7025] hsr_slave_0: entered promiscuous mode [ 333.213938][ T7025] hsr_slave_1: entered promiscuous mode [ 333.229325][ T7025] debugfs: 'hsr0' already exists in 'hsr' [ 333.238251][ T7025] Cannot create hsr debugfs directory [ 333.244669][ T7068] chnl_net:caif_netlink_parms(): no params data found [ 333.486585][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.495042][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.505447][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.516785][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.524620][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.659986][ T5848] Bluetooth: hci4: command tx timeout [ 335.488666][ T5848] Bluetooth: hci6: command tx timeout [ 336.326644][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 336.736646][ T5848] Bluetooth: hci4: command tx timeout [ 337.469651][ T5848] Bluetooth: hci6: command tx timeout [ 338.851392][ T5843] Bluetooth: hci4: command tx timeout [ 339.291046][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.301724][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.321048][ T7068] bridge_slave_0: entered allmulticast mode [ 339.330823][ T7068] bridge_slave_0: entered promiscuous mode [ 339.345917][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.353114][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.360827][ T7068] bridge_slave_1: entered allmulticast mode [ 339.368679][ T7068] bridge_slave_1: entered promiscuous mode [ 339.451380][ T5843] Bluetooth: hci6: command tx timeout [ 339.548366][ T6070] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.576906][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.612069][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.701272][ T6070] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.751235][ T7068] team0: Port device team_slave_0 added [ 339.801076][ T7068] team0: Port device team_slave_1 added [ 339.920539][ T6070] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.950578][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.957692][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.984965][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.002978][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.010342][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.036511][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.095459][ T6070] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.112241][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 340.269775][ T7068] hsr_slave_0: entered promiscuous mode [ 340.279796][ T7068] hsr_slave_1: entered promiscuous mode [ 340.286814][ T7068] debugfs: 'hsr0' already exists in 'hsr' [ 340.293183][ T7068] Cannot create hsr debugfs directory [ 340.351372][ T7275] chnl_net:caif_netlink_parms(): no params data found [ 340.503705][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.511308][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.520074][ T7246] bridge_slave_0: entered allmulticast mode [ 340.528430][ T7246] bridge_slave_0: entered promiscuous mode [ 340.590942][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.600143][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.607717][ T7246] bridge_slave_1: entered allmulticast mode [ 340.615540][ T7246] bridge_slave_1: entered promiscuous mode [ 340.694843][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.733006][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.809831][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.817991][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.825746][ T7275] bridge_slave_0: entered allmulticast mode [ 340.833534][ T7275] bridge_slave_0: entered promiscuous mode [ 340.892930][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.900249][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.907389][ T7275] bridge_slave_1: entered allmulticast mode [ 340.916349][ T7275] bridge_slave_1: entered promiscuous mode [ 340.941893][ T6070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.971034][ T7246] team0: Port device team_slave_0 added [ 341.010804][ T7246] team0: Port device team_slave_1 added [ 341.082763][ T6070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.108160][ T7275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.126688][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.135487][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.161943][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.182412][ T7275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.193030][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.200313][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.229039][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.242402][ T7025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 341.263436][ T6070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.327346][ T7025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 341.371745][ T6070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.387957][ T7025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 341.401355][ T7275] team0: Port device team_slave_0 added [ 341.432892][ T5843] Bluetooth: hci6: command tx timeout [ 341.443659][ T7025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 341.480996][ T7275] team0: Port device team_slave_1 added [ 341.545729][ T7246] hsr_slave_0: entered promiscuous mode [ 341.553422][ T7246] hsr_slave_1: entered promiscuous mode [ 341.560090][ T7246] debugfs: 'hsr0' already exists in 'hsr' [ 341.566229][ T7246] Cannot create hsr debugfs directory [ 341.617441][ T7275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.626261][ T7275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.653483][ T7275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.684370][ T7275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.694341][ T7275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.721724][ T7275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.929667][ T7275] hsr_slave_0: entered promiscuous mode [ 341.936380][ T7275] hsr_slave_1: entered promiscuous mode [ 341.943042][ T7275] debugfs: 'hsr0' already exists in 'hsr' [ 341.948837][ T7275] Cannot create hsr debugfs directory [ 341.977339][ T6070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.091824][ T6070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.224335][ T6070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.239313][ T7068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.266605][ T7068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.330739][ T6070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.350266][ T7068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.381989][ T7068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.532326][ T7246] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 342.549836][ T7246] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 342.574785][ T7246] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 342.626692][ T7246] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 342.714366][ T6070] bridge_slave_1: left allmulticast mode [ 342.721256][ T6070] bridge_slave_1: left promiscuous mode [ 342.727026][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.742458][ T6070] bridge_slave_0: left allmulticast mode [ 342.748363][ T6070] bridge_slave_0: left promiscuous mode [ 342.754152][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.768168][ T6070] bridge_slave_1: left allmulticast mode [ 342.773833][ T6070] bridge_slave_1: left promiscuous mode [ 342.780410][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.795842][ T6070] bridge_slave_0: left allmulticast mode [ 342.801899][ T6070] bridge_slave_0: left promiscuous mode [ 342.808837][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.822395][ T6070] bridge_slave_1: left allmulticast mode [ 342.828224][ T6070] bridge_slave_1: left promiscuous mode [ 342.835508][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.858025][ T6070] bridge_slave_0: left allmulticast mode [ 342.864092][ T6070] bridge_slave_0: left promiscuous mode [ 342.869836][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.886577][ T6070] bridge_slave_1: left allmulticast mode [ 342.892749][ T6070] bridge_slave_1: left promiscuous mode [ 342.899057][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.912595][ T6070] bridge_slave_0: left allmulticast mode [ 342.918249][ T6070] bridge_slave_0: left promiscuous mode [ 342.924851][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.244934][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.257395][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.277581][ T6070] bond0 (unregistering): Released all slaves [ 343.517085][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.529271][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.539774][ T6070] bond0 (unregistering): Released all slaves [ 343.738207][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.749622][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.759783][ T6070] bond0 (unregistering): Released all slaves [ 343.986699][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.997769][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.008406][ T6070] bond0 (unregistering): Released all slaves [ 344.080235][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.133803][ T7275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.172871][ T7275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.225389][ T7275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.268820][ T7275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.320167][ T7025] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.373740][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.380895][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.412596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.419730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.606424][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.728431][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.762869][ T7068] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.856520][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.863723][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.908727][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.931730][ T7275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.953720][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.960902][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.978431][ T6070] hsr_slave_0: left promiscuous mode [ 344.984407][ T6070] hsr_slave_1: left promiscuous mode [ 344.990562][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.998806][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.011641][ T6070] hsr_slave_0: left promiscuous mode [ 345.018414][ T6070] hsr_slave_1: left promiscuous mode [ 345.024761][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.032141][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.040684][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.049205][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.062186][ T6070] hsr_slave_0: left promiscuous mode [ 345.068111][ T6070] hsr_slave_1: left promiscuous mode [ 345.074534][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.082221][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.090076][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.098132][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.113780][ T6070] hsr_slave_0: left promiscuous mode [ 345.119917][ T6070] hsr_slave_1: left promiscuous mode [ 345.125850][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.133459][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.142659][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.150109][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.202083][ T6070] veth1_macvtap: left promiscuous mode [ 345.208236][ T6070] veth0_macvtap: left promiscuous mode [ 345.213827][ T6070] veth1_vlan: left promiscuous mode [ 345.219284][ T6070] veth0_vlan: left promiscuous mode [ 345.226927][ T6070] veth1_macvtap: left promiscuous mode [ 345.232444][ T6070] veth0_macvtap: left promiscuous mode [ 345.238581][ T6070] veth1_vlan: left promiscuous mode [ 345.244158][ T6070] veth0_vlan: left promiscuous mode [ 345.251758][ T6070] veth1_macvtap: left promiscuous mode [ 345.257720][ T6070] veth0_macvtap: left promiscuous mode [ 345.263640][ T6070] veth1_vlan: left promiscuous mode [ 345.268939][ T6070] veth0_vlan: left promiscuous mode [ 345.661804][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 345.685982][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 346.059265][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 346.090447][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 346.579907][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 346.609394][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 346.878680][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.895160][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.904497][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.918721][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.929654][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.204253][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 347.235297][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 347.512515][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.519704][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.531165][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.538300][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.622322][ T7275] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.660262][ T7068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.691802][ T7068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.790654][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.797857][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.875302][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.882509][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.521958][ T7361] chnl_net:caif_netlink_parms(): no params data found [ 348.602230][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.665558][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.799890][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.816920][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.824379][ T7361] bridge_slave_0: entered allmulticast mode [ 348.836108][ T7361] bridge_slave_0: entered promiscuous mode [ 348.863566][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.871098][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.886621][ T7361] bridge_slave_1: entered allmulticast mode [ 348.895419][ T7361] bridge_slave_1: entered promiscuous mode [ 348.901447][ T5843] Bluetooth: hci5: command tx timeout [ 349.020038][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.038540][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.139220][ T7361] team0: Port device team_slave_0 added [ 349.177428][ T7361] team0: Port device team_slave_1 added [ 349.263118][ T7275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.279887][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.293850][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.320026][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.337020][ T7068] veth0_vlan: entered promiscuous mode [ 349.347987][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.355428][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.382584][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.446709][ T7068] veth1_vlan: entered promiscuous mode [ 349.515929][ T7361] hsr_slave_0: entered promiscuous mode [ 349.524023][ T7361] hsr_slave_1: entered promiscuous mode [ 349.682517][ T7246] veth0_vlan: entered promiscuous mode [ 349.734581][ T7275] veth0_vlan: entered promiscuous mode [ 349.810376][ T7275] veth1_vlan: entered promiscuous mode [ 349.820402][ T7246] veth1_vlan: entered promiscuous mode [ 349.829890][ T7068] veth0_macvtap: entered promiscuous mode [ 349.868132][ T7068] veth1_macvtap: entered promiscuous mode [ 349.950116][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.992847][ T7275] veth0_macvtap: entered promiscuous mode [ 350.005538][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.031373][ T7275] veth1_macvtap: entered promiscuous mode [ 350.042929][ T7246] veth0_macvtap: entered promiscuous mode [ 350.057386][ T6118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.068194][ T6118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.077857][ T6118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.091821][ T7246] veth1_macvtap: entered promiscuous mode [ 350.111250][ T6118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.184903][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.201400][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.286779][ T6070] bridge_slave_1: left allmulticast mode [ 350.292689][ T6070] bridge_slave_1: left promiscuous mode [ 350.298441][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.313445][ T6070] bridge_slave_0: left allmulticast mode [ 350.319104][ T6070] bridge_slave_0: left promiscuous mode [ 350.325839][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.338223][ T6070] bridge_slave_1: left allmulticast mode [ 350.344033][ T6070] bridge_slave_1: left promiscuous mode [ 350.351411][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.360851][ T6070] bridge_slave_0: left allmulticast mode [ 350.366482][ T6070] bridge_slave_0: left promiscuous mode [ 350.372302][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.598927][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.611322][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.622054][ T6070] bond0 (unregistering): Released all slaves [ 350.727376][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.739596][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.752638][ T6070] bond0 (unregistering): Released all slaves [ 350.769717][ T7275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.794173][ T6085] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.812366][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.844255][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.883828][ T5843] Bluetooth: hci5: command tx timeout [ 350.885907][ T7275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.909497][ T6085] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.935281][ T6085] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.944634][ T6085] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.984699][ T6070] hsr_slave_0: left promiscuous mode [ 350.990691][ T6070] hsr_slave_1: left promiscuous mode [ 350.999851][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.009830][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.021539][ T6070] hsr_slave_0: left promiscuous mode [ 351.027557][ T6070] hsr_slave_1: left promiscuous mode [ 351.033441][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.042788][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.255737][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 351.284321][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 351.652239][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 351.681210][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 351.819794][ T6085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.838148][ T2980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.854433][ T2980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.865182][ T6111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.875510][ T6111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.900233][ T2980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.091889][ T5843] Bluetooth: hci5: command tx timeout [ 356.911375][ T5843] Bluetooth: hci5: command tx timeout [ 356.991499][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.004752][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.480603][ T7361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.488484][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.540284][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.642002][ T7419] loop3: detected capacity change from 0 to 16 [ 358.708611][ T7419] erofs (device loop3): mounted with root inode @ nid 36. [ 358.877220][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.086666][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.659493][ T7361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.877544][ T7425] blktrace: Concurrent blktraces are not allowed on sg0 [ 360.529493][ T7361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.675001][ T7361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.978844][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.986717][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.585389][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.434105][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.534357][ T7455] loop0: detected capacity change from 0 to 2048 [ 365.579790][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.586996][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.072238][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.079453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.080221][ T7455] NILFS (loop0): error -4 creating segctord thread [ 368.592770][ T7473] loop0: detected capacity change from 0 to 16 [ 368.622505][ T7473] erofs (device loop0): mounted with root inode @ nid 36. [ 369.182848][ T5843] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 371.434092][ T7491] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 372.739078][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.764779][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.773801][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.781655][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.789664][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.798287][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.058892][ T5848] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 373.067774][ T5848] Bluetooth: hci3: Injecting HCI hardware error event [ 373.075833][ T5843] Bluetooth: hci3: hardware error 0x00 [ 374.783701][ T5848] Bluetooth: hci0: command tx timeout [ 375.203425][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 375.305080][ T7519] loop0: detected capacity change from 0 to 40427 [ 375.336143][ T7519] F2FS-fs (loop0): invalid crc value [ 375.435497][ T7519] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 375.464597][ T7519] F2FS-fs (loop0): Start checkpoint disabled! [ 375.481464][ T7519] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 375.489401][ T7519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 376.502947][ T31] audit: type=1800 audit(386.284:3): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.259" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 376.564910][ T7532] syz.0.259: attempt to access beyond end of device [ 376.564910][ T7532] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 376.587307][ T7532] syz.0.259: attempt to access beyond end of device [ 376.587307][ T7532] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 376.603164][ T7532] syz.0.259: attempt to access beyond end of device [ 376.603164][ T7532] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 376.618833][ T7532] syz.0.259: attempt to access beyond end of device [ 376.618833][ T7532] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 376.634586][ T7532] syz.0.259: attempt to access beyond end of device [ 376.634586][ T7532] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 376.655075][ T7532] syz.0.259: attempt to access beyond end of device [ 376.655075][ T7532] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 376.670166][ T7532] syz.0.259: attempt to access beyond end of device [ 376.670166][ T7532] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 376.847840][ T7533] loop3: detected capacity change from 0 to 256 [ 376.856091][ T7533] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 376.866749][ T7533] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 376.875551][ T5843] Bluetooth: hci0: command tx timeout [ 376.928454][ T7533] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 377.028622][ T7533] exFAT-fs (loop3): failed to load alloc-bitmap [ 377.065916][ T7533] exFAT-fs (loop3): failed to recognize exfat type [ 378.469529][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.477491][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.573965][ T6111] kworker/u8:19: attempt to access beyond end of device [ 378.573965][ T6111] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 378.606680][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 378.606726][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.606756][ T6111] Workqueue: writeback wb_workfn (flush-7:0) [ 378.606808][ T6111] Call Trace: [ 378.606819][ T6111] [ 378.606833][ T6111] dump_stack_lvl+0x16c/0x1f0 [ 378.606894][ T6111] f2fs_handle_critical_error+0x624/0x9f0 [ 378.606938][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.606983][ T6111] ? f2fs_build_fault_attr+0x53/0x1f0 [ 378.607054][ T6111] f2fs_write_end_io+0x958/0xcf0 [ 378.607104][ T6111] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 378.607155][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.607210][ T6111] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 378.607253][ T6111] bio_endio+0x751/0x8a0 [ 378.607313][ T6111] submit_bio_noacct+0x306/0x1f40 [ 378.607369][ T6111] __submit_merged_bio+0x33c/0x710 [ 378.607420][ T6111] __submit_merged_write_cond+0x315/0x3f0 [ 378.607478][ T6111] f2fs_write_cache_pages+0x2075/0x2570 [ 378.607560][ T6111] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 378.607615][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.607662][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.607707][ T6111] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.607763][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.607813][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.607883][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.607927][ T6111] ? __lock_acquire+0x436/0x2890 [ 378.607992][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.608035][ T6111] ? lock_acquire+0x179/0x330 [ 378.608124][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.608168][ T6111] ? __lock_acquire+0x436/0x2890 [ 378.608211][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.608264][ T6111] f2fs_write_data_pages+0x5ac/0x1080 [ 378.608329][ T6111] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 378.608396][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.608440][ T6111] ? __lock_acquire+0x436/0x2890 [ 378.608481][ T6111] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 378.608536][ T6111] do_writepages+0x27a/0x600 [ 378.608585][ T6111] ? __pfx_do_writepages+0x10/0x10 [ 378.608628][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.608672][ T6111] ? reacquire_held_locks+0xcd/0x1f0 [ 378.608722][ T6111] __writeback_single_inode+0x168/0x14a0 [ 378.608773][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.608821][ T6111] ? __pfx___writeback_single_inode+0x10/0x10 [ 378.608860][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.608903][ T6111] ? do_raw_spin_unlock+0x172/0x230 [ 378.608956][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609008][ T6111] writeback_sb_inodes+0x72e/0x1ce0 [ 378.609072][ T6111] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 378.609110][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609153][ T6111] ? arch_stack_walk+0x94/0x100 [ 378.609271][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609315][ T6111] ? rcu_is_watching+0x12/0xc0 [ 378.609349][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609393][ T6111] ? queue_io+0x3f6/0x4f0 [ 378.609457][ T6111] wb_writeback+0x419/0xae0 [ 378.609508][ T6111] ? __pfx_wb_writeback+0x10/0x10 [ 378.609544][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609602][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609646][ T6111] ? mark_held_locks+0x49/0x80 [ 378.609698][ T6111] wb_workfn+0x14d/0xbb0 [ 378.609748][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609791][ T6111] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 378.609850][ T6111] ? __pfx_wb_workfn+0x10/0x10 [ 378.609896][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609945][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.609995][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610038][ T6111] ? rcu_is_watching+0x12/0xc0 [ 378.610081][ T6111] process_one_work+0x9ba/0x1b20 [ 378.610151][ T6111] ? __pfx_process_one_work+0x10/0x10 [ 378.610201][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610258][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610301][ T6111] ? assign_work+0x1a0/0x250 [ 378.610353][ T6111] worker_thread+0x6c8/0xf10 [ 378.610413][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610459][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610503][ T6111] ? __kthread_parkme+0x19e/0x250 [ 378.610537][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610585][ T6111] ? __pfx_worker_thread+0x10/0x10 [ 378.610634][ T6111] kthread+0x3c5/0x780 [ 378.610680][ T6111] ? __pfx_kthread+0x10/0x10 [ 378.610727][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610777][ T6111] ? rcu_is_watching+0x12/0xc0 [ 378.610811][ T6111] ? __pfx_kthread+0x10/0x10 [ 378.610858][ T6111] ret_from_fork+0x983/0xb10 [ 378.610900][ T6111] ? __pfx_ret_from_fork+0x10/0x10 [ 378.610946][ T6111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.610989][ T6111] ? __switch_to+0x7af/0x10d0 [ 378.611039][ T6111] ? __pfx_kthread+0x10/0x10 [ 378.611089][ T6111] ret_from_fork_asm+0x1a/0x30 [ 378.611174][ T6111] [ 379.296160][ T5843] Bluetooth: hci0: command tx timeout [ 379.358182][ T6111] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 380.134300][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 380.156826][ T7545] loop3: detected capacity change from 0 to 128 [ 380.166168][ T7545] ext4: Unknown parameter 'seclabel' [ 381.298096][ T5843] Bluetooth: hci0: command tx timeout [ 382.224849][ T6118] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.680649][ T6118] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.877715][ T7578] loop0: detected capacity change from 0 to 4096 [ 383.958843][ T7578] EXT4-fs (loop0): Test dummy encryption mode enabled [ 384.079685][ T7578] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 384.093998][ T7578] System zones: 0-5 [ 384.134478][ T7578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.832848][ T6118] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.944423][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.955021][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.962749][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.974925][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.982675][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.101529][ T7275] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.111581][ T6118] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.291754][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.329865][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.365187][ T7499] bridge_slave_0: entered allmulticast mode [ 386.373197][ T7499] bridge_slave_0: entered promiscuous mode [ 386.676820][ T7604] loop9: detected capacity change from 0 to 16 [ 386.720990][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.744010][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.434396][ T7499] bridge_slave_1: entered allmulticast mode [ 387.688949][ T5848] Bluetooth: hci3: command tx timeout [ 387.762064][ T7604] erofs (device loop9): mounted with root inode @ nid 36. [ 387.778698][ T7499] bridge_slave_1: entered promiscuous mode [ 388.259503][ T7616] loop3: detected capacity change from 0 to 512 [ 388.280449][ T7616] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 388.288766][ T7616] System zones: 0-2, 18-18, 34-34 [ 388.294055][ T7616] EXT4-fs (loop3): orphan cleanup on readonly fs [ 388.302426][ T7616] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.269: bad orphan inode 13 [ 388.313273][ T7616] ext4_test_bit(bit=12, block=18) = 1 [ 388.318970][ T7616] is_bad_inode(inode)=0 [ 388.323163][ T7616] NEXT_ORPHAN(inode)=2130706432 [ 388.328058][ T7616] max_ino=32 [ 388.331266][ T7616] i_nlink=1 [ 388.336590][ T7616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 388.465103][ T7361] veth0_vlan: entered promiscuous mode [ 388.830860][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.890037][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.964295][ T7068] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.175197][ T7633] loop3: detected capacity change from 0 to 16 [ 389.184394][ T7633] erofs (device loop3): mounted with root inode @ nid 36. [ 389.265503][ T7361] veth1_vlan: entered promiscuous mode [ 389.497026][ T7499] team0: Port device team_slave_0 added [ 389.553694][ T7499] team0: Port device team_slave_1 added [ 390.984383][ T5843] Bluetooth: hci3: command tx timeout [ 391.411239][ T6118] bridge_slave_1: left allmulticast mode [ 391.452479][ T6118] bridge_slave_1: left promiscuous mode [ 391.458201][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.669631][ T7648] loop3: detected capacity change from 0 to 2048 [ 392.222918][ T7649] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.034359][ T6118] bridge_slave_0: left allmulticast mode [ 393.061170][ T5843] Bluetooth: hci3: command tx timeout [ 393.067697][ T6118] bridge_slave_0: left promiscuous mode [ 393.089606][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.508813][ T7657] loop9: detected capacity change from 0 to 32768 [ 394.550489][ T7661] loop0: detected capacity change from 0 to 4096 [ 394.737234][ T7657] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 395.026936][ T7657] XFS (loop9): Ending clean mount [ 395.059346][ T5843] Bluetooth: hci3: command tx timeout [ 395.081496][ T7657] XFS (loop9): Quotacheck needed: Please wait. [ 395.612635][ T7661] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 395.645640][ T7657] XFS (loop9): Quotacheck: Done. [ 395.704836][ T7661] ntfs3(loop0): ino=1a, mi_enum_attr [ 395.725980][ T7661] ntfs3(loop0): ino=1a, mi_enum_attr [ 395.885306][ T7661] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 398.096996][ T7246] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 398.146552][ T7687] loop0: detected capacity change from 0 to 16 [ 398.156964][ T7687] erofs (device loop0): mounted with root inode @ nid 36. [ 398.506144][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.539734][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.562983][ T6118] bond0 (unregistering): Released all slaves [ 398.665118][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.383446][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.454058][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.467178][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.475356][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.502242][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.656733][ T7699] loop3: detected capacity change from 0 to 16 [ 399.665352][ T7699] erofs (device loop3): mounted with root inode @ nid 36. [ 400.948039][ T7707] loop9: detected capacity change from 0 to 8 [ 401.102469][ T7707] SQUASHFS error: xz decompression failed, data probably corrupt [ 401.110581][ T7707] SQUASHFS error: Failed to read block 0x108: -5 [ 401.116997][ T7707] SQUASHFS error: Unable to read metadata cache entry [106] [ 401.124580][ T7707] SQUASHFS error: Unable to read inode 0x11f [ 404.327550][ T7730] hub 2-0:1.0: USB hub found [ 404.382107][ T7730] hub 2-0:1.0: 1 port detected [ 404.785135][ T7499] hsr_slave_0: entered promiscuous mode [ 404.815080][ T7499] hsr_slave_1: entered promiscuous mode [ 404.855117][ T7499] debugfs: 'hsr0' already exists in 'hsr' [ 404.892271][ T7499] Cannot create hsr debugfs directory [ 404.912949][ T7361] veth0_macvtap: entered promiscuous mode [ 408.506041][ T7737] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 408.550176][ T7746] loop3: detected capacity change from 0 to 16 [ 408.565906][ T7746] erofs (device loop3): mounted with root inode @ nid 36. [ 409.833403][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.845933][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.853701][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.914539][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.922500][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.443315][ T5848] Bluetooth: hci2: command tx timeout [ 412.664908][ T6118] hsr_slave_0: left promiscuous mode [ 412.702171][ T6118] hsr_slave_1: left promiscuous mode [ 412.768368][ T7769] loop9: detected capacity change from 0 to 32768 [ 412.849693][ T7769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.298 (7769) [ 413.147043][ T7775] loop0: detected capacity change from 0 to 8 [ 413.189066][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.196574][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.332152][ T7775] SQUASHFS error: xz decompression failed, data probably corrupt [ 413.340162][ T7775] SQUASHFS error: Failed to read block 0x108: -5 [ 413.346598][ T7775] SQUASHFS error: Unable to read metadata cache entry [106] [ 413.353962][ T7775] SQUASHFS error: Unable to read inode 0x11f [ 413.654784][ T7769] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 413.665034][ T7769] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 413.723601][ T7769] BTRFS info (device loop9): enabling ssd optimizations [ 413.730584][ T7769] BTRFS info (device loop9): turning on async discard [ 413.737411][ T7769] BTRFS info (device loop9): enabling free space tree [ 413.762181][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.769599][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.122273][ T6118] veth1_macvtap: left promiscuous mode [ 414.162908][ T3558] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared) [ 414.243155][ T6118] veth0_macvtap: left promiscuous mode [ 414.265446][ T6118] veth1_vlan: left promiscuous mode [ 414.270798][ T6118] veth0_vlan: left promiscuous mode [ 414.379925][ T5848] Bluetooth: hci2: command tx timeout [ 414.630582][ T30] libceph: connect (1)[c::]:6789 error -101 [ 414.649549][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 414.763277][ T7795] ceph: No mds server is up or the cluster is laggy [ 414.837376][ T7246] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.609402][ T5848] Bluetooth: hci2: command tx timeout [ 416.835833][ T7812] loop9: detected capacity change from 0 to 32768 [ 416.937106][ T7812] JBD2: Ignoring recovery information on journal [ 417.037008][ T7812] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 417.079511][ T31] audit: type=1800 audit(428.896:4): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.301" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 417.159224][ T7824] loop0: detected capacity change from 0 to 16 [ 417.372622][ T7824] erofs (device loop0): mounted with root inode @ nid 36. [ 417.515442][ T7246] ocfs2: Unmounting device (7,9) on (node local) [ 418.764252][ T7837] loop3: detected capacity change from 0 to 8 [ 419.035295][ T7837] Page size > filesystem block size (3769). This is currently not supported! [ 419.075122][ T5848] Bluetooth: hci2: command tx timeout [ 419.190279][ T7830] loop0: detected capacity change from 0 to 4096 [ 419.275662][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 419.296923][ T7830] ntfs3: Unknown parameter 'hide_çízô¸¥áeFÎfV!iid0x0000000000000000' [ 421.992958][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 422.471025][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 425.756511][ T7870] block device autoloading is deprecated and will be removed. [ 426.371347][ T7587] chnl_net:caif_netlink_parms(): no params data found [ 431.007278][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.020117][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.028860][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.037227][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.045683][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.131918][ T7900] loop3: detected capacity change from 0 to 40427 [ 432.911564][ T7900] F2FS-fs (loop3): invalid crc value [ 433.006760][ T7900] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 433.018055][ T7900] F2FS-fs (loop3): Start checkpoint disabled! [ 433.025437][ T7900] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 433.040432][ T5848] Bluetooth: hci5: command tx timeout [ 433.040480][ T7900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 433.145497][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.162970][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.182280][ T7587] bridge_slave_0: entered allmulticast mode [ 433.191944][ T7587] bridge_slave_0: entered promiscuous mode [ 433.275567][ T31] audit: type=1800 audit(445.892:5): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 433.304925][ T7914] syz.3.320: attempt to access beyond end of device [ 433.304925][ T7914] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 433.321061][ T7914] syz.3.320: attempt to access beyond end of device [ 433.321061][ T7914] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.337205][ T7914] syz.3.320: attempt to access beyond end of device [ 433.337205][ T7914] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.352500][ T7914] syz.3.320: attempt to access beyond end of device [ 433.352500][ T7914] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.367921][ T7914] syz.3.320: attempt to access beyond end of device [ 433.367921][ T7914] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.385697][ T7914] syz.3.320: attempt to access beyond end of device [ 433.385697][ T7914] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 433.400000][ T7914] syz.3.320: attempt to access beyond end of device [ 433.400000][ T7914] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.415551][ T7914] syz.3.320: attempt to access beyond end of device [ 433.415551][ T7914] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 433.433956][ T7914] syz.3.320: attempt to access beyond end of device [ 433.433956][ T7914] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 433.450288][ T7914] syz.3.320: attempt to access beyond end of device [ 433.450288][ T7914] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 433.749036][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.774422][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.781751][ T7587] bridge_slave_1: entered allmulticast mode [ 433.847006][ T7587] bridge_slave_1: entered promiscuous mode [ 434.222582][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 434.222629][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.222653][ T6165] Workqueue: writeback wb_workfn (flush-7:3) [ 434.222705][ T6165] Call Trace: [ 434.222716][ T6165] [ 434.222729][ T6165] dump_stack_lvl+0x16c/0x1f0 [ 434.222788][ T6165] f2fs_handle_critical_error+0x624/0x9f0 [ 434.222831][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.222874][ T6165] ? f2fs_build_fault_attr+0x53/0x1f0 [ 434.222944][ T6165] f2fs_write_end_io+0x958/0xcf0 [ 434.222992][ T6165] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 434.223043][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223097][ T6165] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 434.223140][ T6165] bio_endio+0x751/0x8a0 [ 434.223200][ T6165] submit_bio_noacct+0x306/0x1f40 [ 434.223256][ T6165] __submit_merged_bio+0x33c/0x710 [ 434.223307][ T6165] __submit_merged_write_cond+0x315/0x3f0 [ 434.223374][ T6165] f2fs_write_cache_pages+0x2075/0x2570 [ 434.223462][ T6165] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 434.223519][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223566][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223609][ T6165] ? do_raw_spin_lock+0x12c/0x2b0 [ 434.223660][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223710][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223759][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223803][ T6165] ? do_raw_spin_unlock+0x172/0x230 [ 434.223870][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223915][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.223960][ T6165] ? f2fs_available_free_memory+0x279/0xa30 [ 434.224093][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.224137][ T6165] ? lock_acquire+0x179/0x330 [ 434.224180][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.224234][ T6165] f2fs_write_data_pages+0x5ac/0x1080 [ 434.224283][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.224349][ T6165] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 434.224417][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.224466][ T6165] ? __lock_acquire+0x436/0x2890 [ 434.224508][ T6165] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 434.224563][ T6165] do_writepages+0x27a/0x600 [ 434.224612][ T6165] ? __pfx_do_writepages+0x10/0x10 [ 434.224656][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.224699][ T6165] ? reacquire_held_locks+0xcd/0x1f0 [ 434.224749][ T6165] __writeback_single_inode+0x168/0x14a0 [ 434.224793][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.224841][ T6165] ? __pfx___writeback_single_inode+0x10/0x10 [ 434.224880][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.224924][ T6165] ? do_raw_spin_unlock+0x172/0x230 [ 434.224977][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.225028][ T6165] writeback_sb_inodes+0x72e/0x1ce0 [ 434.225090][ T6165] ? do_raw_spin_lock+0x12c/0x2b0 [ 434.225142][ T6165] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 434.225179][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.225223][ T6165] ? find_held_lock+0x2b/0x80 [ 434.225358][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.225407][ T6165] ? rcu_is_watching+0x12/0xc0 [ 434.225442][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.225493][ T6165] ? queue_io+0x3f6/0x4f0 [ 434.225557][ T6165] wb_writeback+0x419/0xae0 [ 434.225608][ T6165] ? __pfx_wb_writeback+0x10/0x10 [ 434.225645][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.225703][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.225749][ T6165] ? mark_held_locks+0x49/0x80 [ 434.225800][ T6165] wb_workfn+0x14d/0xbb0 [ 434.225845][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.225889][ T6165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 434.225946][ T6165] ? __pfx_wb_workfn+0x10/0x10 [ 434.225993][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226043][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226094][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226138][ T6165] ? rcu_is_watching+0x12/0xc0 [ 434.226182][ T6165] process_one_work+0x9ba/0x1b20 [ 434.226251][ T6165] ? __pfx_process_one_work+0x10/0x10 [ 434.226301][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226369][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226411][ T6165] ? assign_work+0x1a0/0x250 [ 434.226455][ T6165] worker_thread+0x6c8/0xf10 [ 434.226505][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226540][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226572][ T6165] ? __kthread_parkme+0x19e/0x250 [ 434.226598][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226634][ T6165] ? __pfx_worker_thread+0x10/0x10 [ 434.226670][ T6165] kthread+0x3c5/0x780 [ 434.226704][ T6165] ? __pfx_kthread+0x10/0x10 [ 434.226739][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226772][ T6165] ? rcu_is_watching+0x12/0xc0 [ 434.226797][ T6165] ? __pfx_kthread+0x10/0x10 [ 434.226833][ T6165] ret_from_fork+0x983/0xb10 [ 434.226865][ T6165] ? __pfx_ret_from_fork+0x10/0x10 [ 434.226899][ T6165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.226931][ T6165] ? __switch_to+0x7af/0x10d0 [ 434.226968][ T6165] ? __pfx_kthread+0x10/0x10 [ 434.227003][ T6165] ret_from_fork_asm+0x1a/0x30 [ 434.227066][ T6165] [ 434.227077][ T6165] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 434.849125][ T7925] loop0: detected capacity change from 0 to 128 [ 434.909346][ T7925] FAT-fs (loop0): bogus logical sector size 65535 [ 434.946517][ T7925] FAT-fs (loop0): Can't find a valid FAT filesystem [ 435.012660][ T5848] Bluetooth: hci5: command tx timeout [ 435.587294][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.706753][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.134700][ T7757] chnl_net:caif_netlink_parms(): no params data found [ 436.159561][ T7932] loop0: detected capacity change from 0 to 256 [ 436.184776][ T7587] team0: Port device team_slave_0 added [ 436.197776][ T7932] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.248216][ T7932] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 436.309153][ T7932] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 436.386261][ T7932] exFAT-fs (loop0): failed to load alloc-bitmap [ 436.392539][ T7932] exFAT-fs (loop0): failed to recognize exfat type [ 436.445701][ T7587] team0: Port device team_slave_1 added [ 437.111851][ T7942] loop0: detected capacity change from 0 to 128 [ 437.119694][ T7942] ext4: Unknown parameter 'seclabel' [ 437.536139][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.543057][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.551908][ T5848] Bluetooth: hci5: command tx timeout [ 439.384575][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.392679][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.420423][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.608656][ T5848] Bluetooth: hci5: command tx timeout [ 439.819447][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.935965][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.070405][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.486622][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.519310][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.558369][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.575286][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.584162][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.858052][ T7996] loop9: detected capacity change from 0 to 16 [ 445.862848][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.871960][ T7996] erofs (device loop9): mounted with root inode @ nid 36. [ 445.899806][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.908032][ T7757] bridge_slave_0: entered allmulticast mode [ 445.991500][ T7757] bridge_slave_0: entered promiscuous mode [ 446.052574][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.061083][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.105546][ T7757] bridge_slave_1: entered allmulticast mode [ 446.364924][ T7757] bridge_slave_1: entered promiscuous mode [ 446.648621][ T5843] Bluetooth: hci0: command tx timeout [ 447.383121][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 447.656517][ T8009] loop9: detected capacity change from 0 to 32768 [ 447.674749][ T8009] (syz.9.337,8009,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 447.690929][ T8009] (syz.9.337,8009,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 447.722850][ T8009] JBD2: Ignoring recovery information on journal [ 447.791052][ T8009] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 447.911938][ T31] audit: type=1800 audit(461.261:6): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.337" name="file1" dev="loop9" ino=16978 res=0 errno=0 [ 447.969186][ T31] audit: type=1800 audit(461.324:7): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.337" name="file1" dev="loop9" ino=16978 res=0 errno=0 [ 448.568936][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 448.582191][ T5843] Bluetooth: hci0: command tx timeout [ 449.295469][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.515885][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.286690][ T7246] ocfs2: Unmounting device (7,9) on (node local) [ 450.567550][ T5848] Bluetooth: hci0: command tx timeout [ 451.586098][ T8033] loop3: detected capacity change from 0 to 4096 [ 451.682081][ T8033] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 451.704270][ T8033] ntfs3(loop3): ino=1a, mi_enum_attr [ 451.730131][ T8033] ntfs3(loop3): ino=1a, mi_enum_attr [ 451.735497][ T8033] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 453.053653][ T5834] Bluetooth: hci0: command tx timeout [ 453.463374][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 456.104879][ T7757] team0: Port device team_slave_0 added [ 458.277016][ T7757] team0: Port device team_slave_1 added [ 458.579145][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.607837][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.627425][ T7904] bridge_slave_0: entered allmulticast mode [ 458.655265][ T7904] bridge_slave_0: entered promiscuous mode [ 458.962783][ T8077] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 459.514911][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.526750][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.534009][ T7904] bridge_slave_1: entered allmulticast mode [ 459.545506][ T7904] bridge_slave_1: entered promiscuous mode [ 459.579601][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.586574][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.671190][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.713766][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.726190][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.861253][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.100017][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.402660][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.738941][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.750714][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.758745][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.779228][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.789410][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.025606][ T6118] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.293508][ T7904] team0: Port device team_slave_0 added [ 463.587849][ T7904] team0: Port device team_slave_1 added [ 463.622622][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 463.951560][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.958604][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.991160][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.028308][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.035312][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.069439][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.698999][ T8127] loop9: detected capacity change from 0 to 40427 [ 464.745853][ T5834] Bluetooth: hci3: command tx timeout [ 464.787460][ T8127] F2FS-fs (loop9): invalid crc value [ 464.967596][ T8127] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 464.984402][ T8127] F2FS-fs (loop9): Start checkpoint disabled! [ 465.093574][ T8127] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 465.171155][ T8127] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 466.629473][ T31] audit: type=1800 audit(480.913:8): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.350" name="bus" dev="loop9" ino=10 res=0 errno=0 [ 466.658813][ T8127] bio_check_eod: 29 callbacks suppressed [ 466.658831][ T8127] syz.9.350: attempt to access beyond end of device [ 466.658831][ T8127] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 466.680060][ T8127] syz.9.350: attempt to access beyond end of device [ 466.680060][ T8127] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.694215][ T8127] syz.9.350: attempt to access beyond end of device [ 466.694215][ T8127] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.708314][ T8127] syz.9.350: attempt to access beyond end of device [ 466.708314][ T8127] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.722430][ T8127] syz.9.350: attempt to access beyond end of device [ 466.722430][ T8127] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.736715][ T8127] syz.9.350: attempt to access beyond end of device [ 466.736715][ T8127] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 466.750612][ T8127] syz.9.350: attempt to access beyond end of device [ 466.750612][ T8127] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.764760][ T8127] syz.9.350: attempt to access beyond end of device [ 466.764760][ T8127] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 466.780227][ T8127] syz.9.350: attempt to access beyond end of device [ 466.780227][ T8127] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 466.794325][ T8127] syz.9.350: attempt to access beyond end of device [ 466.794325][ T8127] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 466.842260][ T5834] Bluetooth: hci3: command tx timeout [ 468.771053][ T5834] Bluetooth: hci3: command tx timeout [ 469.346644][ T6118] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.361438][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 469.361491][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.361516][ T6054] Workqueue: writeback wb_workfn (flush-7:9) [ 469.361571][ T6054] Call Trace: [ 469.361583][ T6054] [ 469.361596][ T6054] dump_stack_lvl+0x16c/0x1f0 [ 469.361656][ T6054] f2fs_handle_critical_error+0x624/0x9f0 [ 469.361700][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.361744][ T6054] ? f2fs_build_fault_attr+0x53/0x1f0 [ 469.361816][ T6054] f2fs_write_end_io+0x958/0xcf0 [ 469.361866][ T6054] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 469.361917][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.361972][ T6054] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 469.362016][ T6054] bio_endio+0x751/0x8a0 [ 469.362075][ T6054] submit_bio_noacct+0x306/0x1f40 [ 469.362131][ T6054] __submit_merged_bio+0x33c/0x710 [ 469.362182][ T6054] __submit_merged_write_cond+0x315/0x3f0 [ 469.362240][ T6054] f2fs_write_cache_pages+0x2075/0x2570 [ 469.362341][ T6054] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 469.362397][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.362443][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.362492][ T6054] ? do_raw_spin_lock+0x12c/0x2b0 [ 469.362542][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.362593][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.362642][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.362685][ T6054] ? do_raw_spin_unlock+0x172/0x230 [ 469.362751][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.362797][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.362841][ T6054] ? f2fs_available_free_memory+0x279/0xa30 [ 469.362973][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363017][ T6054] ? lock_acquire+0x179/0x330 [ 469.363061][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363113][ T6054] f2fs_write_data_pages+0x5ac/0x1080 [ 469.363162][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363220][ T6054] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 469.363287][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363343][ T6054] ? __lock_acquire+0x436/0x2890 [ 469.363384][ T6054] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 469.363457][ T6054] do_writepages+0x27a/0x600 [ 469.363513][ T6054] ? __pfx_do_writepages+0x10/0x10 [ 469.363556][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363600][ T6054] ? reacquire_held_locks+0xcd/0x1f0 [ 469.363650][ T6054] __writeback_single_inode+0x168/0x14a0 [ 469.363693][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363740][ T6054] ? __pfx___writeback_single_inode+0x10/0x10 [ 469.363779][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363823][ T6054] ? do_raw_spin_unlock+0x172/0x230 [ 469.363875][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.363926][ T6054] writeback_sb_inodes+0x72e/0x1ce0 [ 469.363987][ T6054] ? do_raw_spin_lock+0x12c/0x2b0 [ 469.364038][ T6054] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 469.364076][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364120][ T6054] ? find_held_lock+0x2b/0x80 [ 469.364247][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364290][ T6054] ? rcu_is_watching+0x12/0xc0 [ 469.364332][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364376][ T6054] ? queue_io+0x3f6/0x4f0 [ 469.364440][ T6054] wb_writeback+0x419/0xae0 [ 469.364495][ T6054] ? __pfx_wb_writeback+0x10/0x10 [ 469.364530][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364589][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364632][ T6054] ? mark_held_locks+0x49/0x80 [ 469.364683][ T6054] wb_workfn+0x14d/0xbb0 [ 469.364728][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364771][ T6054] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 469.364830][ T6054] ? __pfx_wb_workfn+0x10/0x10 [ 469.364876][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364924][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.364975][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365019][ T6054] ? rcu_is_watching+0x12/0xc0 [ 469.365062][ T6054] process_one_work+0x9ba/0x1b20 [ 469.365132][ T6054] ? __pfx_process_one_work+0x10/0x10 [ 469.365181][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365238][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365281][ T6054] ? assign_work+0x1a0/0x250 [ 469.365342][ T6054] worker_thread+0x6c8/0xf10 [ 469.365401][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365447][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365495][ T6054] ? __kthread_parkme+0x19e/0x250 [ 469.365529][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365577][ T6054] ? __pfx_worker_thread+0x10/0x10 [ 469.365626][ T6054] kthread+0x3c5/0x780 [ 469.365672][ T6054] ? __pfx_kthread+0x10/0x10 [ 469.365718][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365762][ T6054] ? rcu_is_watching+0x12/0xc0 [ 469.365797][ T6054] ? __pfx_kthread+0x10/0x10 [ 469.365844][ T6054] ret_from_fork+0x983/0xb10 [ 469.365888][ T6054] ? __pfx_ret_from_fork+0x10/0x10 [ 469.365929][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.365973][ T6054] ? rcu_is_watching+0x12/0xc0 [ 469.366007][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.366051][ T6054] ? __switch_to+0x7af/0x10d0 [ 469.366099][ T6054] ? __pfx_kthread+0x10/0x10 [ 469.366146][ T6054] ret_from_fork_asm+0x1a/0x30 [ 469.366231][ T6054] [ 469.922947][ T6054] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 470.433631][ T7904] hsr_slave_0: entered promiscuous mode [ 470.491925][ T7904] hsr_slave_1: entered promiscuous mode [ 470.521253][ T7904] debugfs: 'hsr0' already exists in 'hsr' [ 470.761351][ T5834] Bluetooth: hci3: command tx timeout [ 470.854982][ T7904] Cannot create hsr debugfs directory [ 471.202220][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.916741][ T8162] program syz.9.367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.204199][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.256945][ T7983] bridge_slave_0: entered allmulticast mode [ 473.276767][ T7983] bridge_slave_0: entered promiscuous mode [ 473.350680][ T6118] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.467286][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.488938][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.505439][ T7983] bridge_slave_1: entered allmulticast mode [ 473.526557][ T7983] bridge_slave_1: entered promiscuous mode [ 473.747620][ T8169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 474.450825][ T6118] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.563770][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.595183][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.702695][ T7983] team0: Port device team_slave_0 added [ 474.718379][ T7983] team0: Port device team_slave_1 added [ 475.627529][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.635978][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.669964][ T7983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.726987][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.733948][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.822055][ T7983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.958899][ T8103] chnl_net:caif_netlink_parms(): no params data found [ 476.148966][ T7983] hsr_slave_0: entered promiscuous mode [ 476.155958][ T7983] hsr_slave_1: entered promiscuous mode [ 476.169408][ T7983] debugfs: 'hsr0' already exists in 'hsr' [ 476.176214][ T7983] Cannot create hsr debugfs directory [ 477.319190][ T8200] loop3: detected capacity change from 0 to 32768 [ 477.443233][ T8200] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 478.264648][ T8204] loop9: detected capacity change from 0 to 4096 [ 478.401179][ T8200] XFS (loop3): Ending clean mount [ 478.411308][ T8200] XFS (loop3): Quotacheck needed: Please wait. [ 478.423077][ T8204] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 478.478090][ T8204] ntfs3(loop9): ino=1a, mi_enum_attr [ 478.509497][ T8200] XFS (loop3): Quotacheck: Done. [ 478.514223][ T8204] ntfs3(loop9): ino=1a, mi_enum_attr [ 478.527901][ T8204] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 481.944630][ T8229] loop9: detected capacity change from 0 to 1024 [ 482.001540][ T6118] bridge_slave_1: left allmulticast mode [ 482.041818][ T6118] bridge_slave_1: left promiscuous mode [ 482.079641][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.351307][ T6118] bridge_slave_0: left allmulticast mode [ 482.368348][ T6118] bridge_slave_0: left promiscuous mode [ 482.419089][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.960909][ T6118] bridge_slave_1: left allmulticast mode [ 482.977896][ T6118] bridge_slave_1: left promiscuous mode [ 482.993190][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.016730][ T6118] bridge_slave_0: left allmulticast mode [ 483.041941][ T6118] bridge_slave_0: left promiscuous mode [ 483.057821][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.083593][ T6118] bridge_slave_1: left allmulticast mode [ 483.097302][ T6118] bridge_slave_1: left promiscuous mode [ 483.115821][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.138444][ T6118] bridge_slave_0: left allmulticast mode [ 483.144121][ T6118] bridge_slave_0: left promiscuous mode [ 483.160027][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.200457][ T7241] hfsplus: b-tree write err: -5, ino 4 [ 483.408298][ T7068] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 484.532421][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.550317][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.563175][ T6118] bond0 (unregistering): Released all slaves [ 484.856956][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.869492][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.880744][ T6118] bond0 (unregistering): Released all slaves [ 485.087798][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.100963][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.111921][ T6118] bond0 (unregistering): Released all slaves [ 485.160613][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.171788][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.179178][ T8103] bridge_slave_0: entered allmulticast mode [ 485.188052][ T8103] bridge_slave_0: entered promiscuous mode [ 485.294748][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.306644][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.315619][ T8103] bridge_slave_1: entered allmulticast mode [ 485.326492][ T8103] bridge_slave_1: entered promiscuous mode [ 485.478694][ T8103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.535773][ T8103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.612586][ T8103] team0: Port device team_slave_0 added [ 485.626412][ T6118] hsr_slave_0: left promiscuous mode [ 485.636440][ T6118] hsr_slave_1: left promiscuous mode [ 485.644422][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.652319][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.664178][ T6118] hsr_slave_0: left promiscuous mode [ 485.670112][ T6118] hsr_slave_1: left promiscuous mode [ 485.676031][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.683960][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.696420][ T6118] hsr_slave_0: left promiscuous mode [ 485.703756][ T6118] hsr_slave_1: left promiscuous mode [ 485.709948][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.718133][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.725945][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.733881][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.765862][ T6118] veth0_macvtap: left promiscuous mode [ 485.771492][ T6118] veth1_vlan: left promiscuous mode [ 485.777267][ T6118] veth0_vlan: left promiscuous mode [ 485.783113][ T6118] veth1_macvtap: left promiscuous mode [ 485.788696][ T6118] veth0_macvtap: left promiscuous mode [ 485.794649][ T6118] veth1_vlan: left promiscuous mode [ 485.801005][ T6118] veth0_vlan: left promiscuous mode [ 486.114331][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 486.139964][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 486.511178][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 486.541075][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 487.033824][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 487.067039][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 487.345022][ T8103] team0: Port device team_slave_1 added [ 487.461491][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.468435][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.495828][ T8103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.509942][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.516887][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.543019][ T8103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.631416][ T8103] hsr_slave_0: entered promiscuous mode [ 487.637969][ T8103] hsr_slave_1: entered promiscuous mode [ 487.945094][ T7983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 487.962143][ T7983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 487.992955][ T7983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.007274][ T7983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.171432][ T7904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 488.225989][ T7904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 488.561567][ T7983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.618868][ T6118] bridge_slave_1: left allmulticast mode [ 488.640811][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 488.652612][ T6118] bridge_slave_1: left promiscuous mode [ 488.658366][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 488.666949][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 488.679479][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.686798][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 488.708645][ T6118] bridge_slave_0: left allmulticast mode [ 488.714515][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.723268][ T6118] bridge_slave_0: left promiscuous mode [ 488.746120][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.767976][ T6118] bridge_slave_1: left allmulticast mode [ 488.773663][ T6118] bridge_slave_1: left promiscuous mode [ 488.794332][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.823471][ T6118] bridge_slave_0: left allmulticast mode [ 488.829162][ T6118] bridge_slave_0: left promiscuous mode [ 488.851198][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.061652][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.073097][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.083467][ T6118] bond0 (unregistering): Released all slaves [ 489.172959][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.184356][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.194857][ T6118] bond0 (unregistering): Released all slaves [ 489.217152][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.323974][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.331130][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.354625][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.361803][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.371881][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.383064][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.391165][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.398981][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.456036][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 489.478374][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 489.659762][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 489.683190][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 489.892114][ T8103] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 489.905738][ T8103] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 489.923441][ T8103] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 489.945261][ T8103] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.267922][ T8274] chnl_net:caif_netlink_parms(): no params data found [ 490.486457][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.506459][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.515700][ T8274] bridge_slave_0: entered allmulticast mode [ 490.525344][ T8274] bridge_slave_0: entered promiscuous mode [ 490.538948][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.546072][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.555867][ T8274] bridge_slave_1: entered allmulticast mode [ 490.563374][ T8274] bridge_slave_1: entered promiscuous mode [ 490.593852][ T8103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.637596][ T8274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.661878][ T8274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.718119][ T5848] Bluetooth: hci2: command tx timeout [ 490.725976][ T8274] team0: Port device team_slave_0 added [ 490.736524][ T8103] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.748649][ T8274] team0: Port device team_slave_1 added [ 490.822438][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.829978][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.856959][ T8274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.874938][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.882074][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.911697][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.920106][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.946441][ T8274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.971554][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.006590][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.013780][ T7895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.094616][ T8274] hsr_slave_0: entered promiscuous mode [ 491.101449][ T8274] hsr_slave_1: entered promiscuous mode [ 491.107780][ T8274] debugfs: 'hsr0' already exists in 'hsr' [ 491.114092][ T8274] Cannot create hsr debugfs directory [ 491.457002][ T6118] bridge_slave_1: left allmulticast mode [ 491.464593][ T6118] bridge_slave_1: left promiscuous mode [ 491.471870][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.481667][ T6118] bridge_slave_0: left allmulticast mode [ 491.487435][ T6118] bridge_slave_0: left promiscuous mode [ 491.493922][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.624560][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.645392][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.664713][ T6118] bond0 (unregistering): Released all slaves [ 491.835813][ T6118] hsr_slave_0: left promiscuous mode [ 491.851460][ T6118] hsr_slave_1: left promiscuous mode [ 491.862932][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.875753][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.134030][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 492.177401][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 492.443144][ T7983] veth0_vlan: entered promiscuous mode [ 492.521995][ T7983] veth1_vlan: entered promiscuous mode [ 492.691095][ T8103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.699386][ T5848] Bluetooth: hci2: command tx timeout [ 492.808430][ T7983] veth0_macvtap: entered promiscuous mode [ 492.849600][ T8274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 492.890605][ T8274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 492.911452][ T7983] veth1_macvtap: entered promiscuous mode [ 492.930225][ T8274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.954110][ T8274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.016677][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.055358][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.116018][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.163668][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.176659][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.192024][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.390198][ T8274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.400289][ T7895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.429791][ T7895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.431694][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.519986][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.527151][ T7895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.550084][ T8103] veth0_vlan: entered promiscuous mode [ 493.571084][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.578250][ T7895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.590947][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.596436][ T8103] veth1_vlan: entered promiscuous mode [ 493.605967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.800754][ T8274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.795783][ T5848] Bluetooth: hci2: command tx timeout [ 494.832661][ T8103] veth0_macvtap: entered promiscuous mode [ 496.019946][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.026809][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.588212][ T8103] veth1_macvtap: entered promiscuous mode [ 496.862057][ T5834] Bluetooth: hci2: command tx timeout [ 496.911419][ T8375] loop1: detected capacity change from 0 to 40427 [ 496.923417][ T8375] F2FS-fs (loop1): invalid crc value [ 497.011777][ T8375] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 497.023456][ T8375] F2FS-fs (loop1): Start checkpoint disabled! [ 497.031111][ T8375] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 497.119611][ T8375] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 497.934972][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.974947][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.600142][ T3833] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.669468][ T3833] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.727826][ T3833] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.834823][ T8389] bio_check_eod: 46 callbacks suppressed [ 498.840655][ T8389] syz.1.370: attempt to access beyond end of device [ 498.840655][ T8389] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 498.858996][ T8389] syz.1.370: attempt to access beyond end of device [ 498.858996][ T8389] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 498.907027][ T8389] syz.1.370: attempt to access beyond end of device [ 498.907027][ T8389] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 498.926007][ T8389] syz.1.370: attempt to access beyond end of device [ 498.926007][ T8389] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 498.943844][ T8389] syz.1.370: attempt to access beyond end of device [ 498.943844][ T8389] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 498.967711][ T8389] syz.1.370: attempt to access beyond end of device [ 498.967711][ T8389] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 498.975030][ T31] audit: type=1800 audit(514.686:9): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.370" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 499.008509][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 499.024985][ T8389] syz.1.370: attempt to access beyond end of device [ 499.024985][ T8389] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 499.042107][ T8389] syz.1.370: attempt to access beyond end of device [ 499.042107][ T8389] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 499.059153][ T8389] syz.1.370: attempt to access beyond end of device [ 499.059153][ T8389] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 499.076620][ T8389] syz.1.370: attempt to access beyond end of device [ 499.076620][ T8389] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 499.141603][ T3833] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.780974][ T8394] loop9: detected capacity change from 0 to 8 [ 499.852705][ T8394] SQUASHFS error: xz decompression failed, data probably corrupt [ 499.860723][ T8394] SQUASHFS error: Failed to read block 0x108: -5 [ 499.867161][ T8394] SQUASHFS error: Unable to read metadata cache entry [106] [ 499.874563][ T8394] SQUASHFS error: Unable to read inode 0x11f [ 500.477716][ T3521] CPU: 0 UID: 0 PID: 3521 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 500.477767][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.477792][ T3521] Workqueue: writeback wb_workfn (flush-7:1) [ 500.477858][ T3521] Call Trace: [ 500.477870][ T3521] [ 500.477885][ T3521] dump_stack_lvl+0x16c/0x1f0 [ 500.477947][ T3521] f2fs_handle_critical_error+0x624/0x9f0 [ 500.477992][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.478038][ T3521] ? f2fs_build_fault_attr+0x53/0x1f0 [ 500.478111][ T3521] f2fs_write_end_io+0x958/0xcf0 [ 500.478162][ T3521] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 500.478213][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.478270][ T3521] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 500.478314][ T3521] bio_endio+0x751/0x8a0 [ 500.478375][ T3521] submit_bio_noacct+0x306/0x1f40 [ 500.478432][ T3521] __submit_merged_bio+0x33c/0x710 [ 500.478482][ T3521] __submit_merged_write_cond+0x315/0x3f0 [ 500.478541][ T3521] f2fs_write_cache_pages+0x2075/0x2570 [ 500.478626][ T3521] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 500.478681][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.478731][ T3521] ? __lock_acquire+0x12c2/0x2890 [ 500.478814][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.478858][ T3521] ? mark_held_locks+0x49/0x80 [ 500.478969][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.479013][ T3521] ? __lock_acquire+0x436/0x2890 [ 500.479059][ T3521] ? ret_from_fork_asm+0x1a/0x30 [ 500.479117][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.479171][ T3521] f2fs_write_data_pages+0x5ac/0x1080 [ 500.479237][ T3521] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 500.479305][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.479349][ T3521] ? __lock_acquire+0x436/0x2890 [ 500.479392][ T3521] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 500.479448][ T3521] do_writepages+0x27a/0x600 [ 500.479497][ T3521] ? __pfx_do_writepages+0x10/0x10 [ 500.479541][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.479586][ T3521] ? reacquire_held_locks+0xcd/0x1f0 [ 500.479636][ T3521] __writeback_single_inode+0x168/0x14a0 [ 500.479682][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.479734][ T3521] ? __pfx___writeback_single_inode+0x10/0x10 [ 500.479774][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.479818][ T3521] ? do_raw_spin_unlock+0x172/0x230 [ 500.479872][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.479924][ T3521] writeback_sb_inodes+0x72e/0x1ce0 [ 500.479990][ T3521] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 500.480104][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480149][ T3521] ? rcu_is_watching+0x12/0xc0 [ 500.480183][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480227][ T3521] ? queue_io+0x3f6/0x4f0 [ 500.480292][ T3521] wb_writeback+0x419/0xae0 [ 500.480344][ T3521] ? __pfx_wb_writeback+0x10/0x10 [ 500.480381][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480440][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480484][ T3521] ? mark_held_locks+0x49/0x80 [ 500.480536][ T3521] wb_workfn+0x14d/0xbb0 [ 500.480581][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480626][ T3521] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 500.480686][ T3521] ? __pfx_wb_workfn+0x10/0x10 [ 500.480736][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480786][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480838][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.480882][ T3521] ? rcu_is_watching+0x12/0xc0 [ 500.480926][ T3521] process_one_work+0x9ba/0x1b20 [ 500.480997][ T3521] ? __pfx_process_one_work+0x10/0x10 [ 500.481047][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.481104][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.481149][ T3521] ? assign_work+0x1a0/0x250 [ 500.481201][ T3521] worker_thread+0x6c8/0xf10 [ 500.481275][ T3521] ? __pfx_worker_thread+0x10/0x10 [ 500.481325][ T3521] kthread+0x3c5/0x780 [ 500.481371][ T3521] ? __pfx_kthread+0x10/0x10 [ 500.481419][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.481467][ T3521] ? rcu_is_watching+0x12/0xc0 [ 500.481502][ T3521] ? __pfx_kthread+0x10/0x10 [ 500.481550][ T3521] ret_from_fork+0x983/0xb10 [ 500.481594][ T3521] ? __pfx_ret_from_fork+0x10/0x10 [ 500.481640][ T3521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.481684][ T3521] ? __switch_to+0x7af/0x10d0 [ 500.481740][ T3521] ? __pfx_kthread+0x10/0x10 [ 500.481787][ T3521] ret_from_fork_asm+0x1a/0x30 [ 500.481872][ T3521] [ 500.963951][ T3521] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 501.200109][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.217980][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.353203][ T8274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.375942][ T8406] loop3: detected capacity change from 0 to 1024 [ 501.559496][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.749480][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.426431][ T12] hfsplus: b-tree write err: -5, ino 4 [ 503.464602][ T8274] veth0_vlan: entered promiscuous mode [ 503.480040][ T8274] veth1_vlan: entered promiscuous mode [ 503.515384][ T8274] veth0_macvtap: entered promiscuous mode [ 503.641300][ T8274] veth1_macvtap: entered promiscuous mode [ 503.789037][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.868074][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.132655][ T3833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.165220][ T3833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.210760][ T8427] loop9: detected capacity change from 0 to 256 [ 505.227891][ T3833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.260075][ T3833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.332916][ T8427] exFAT-fs (loop9): failed to test first cluster bit of root dir(5) [ 505.465046][ T31] audit: type=1800 audit(521.688:10): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.385" name="file1" dev="loop9" ino=1048664 res=0 errno=0 [ 507.276433][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.557523][ T8452] loop3: detected capacity change from 0 to 2048 [ 508.021695][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.792102][ T8173] loop3: p1 p3 p4 [ 508.792102][ T8173] p1: [ 508.823323][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.860183][ T8173] loop3: p4 size 589824 extends beyond EOD, truncated [ 508.880885][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.960517][ T8452] loop3: p1 p3 p4 [ 508.960517][ T8452] p1: [ 508.972534][ T8452] loop3: p4 size 589824 extends beyond EOD, truncated [ 510.211897][ T7247] udevd[7247]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 510.259623][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 510.270942][ T7252] udevd[7252]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 510.548228][ T7253] udevd[7253]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 511.815863][ T8478] loop3: detected capacity change from 0 to 32768 [ 511.851839][ T8478] (syz.3.391,8478,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 511.865989][ T8478] (syz.3.391,8478,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 511.926494][ T8478] JBD2: Ignoring recovery information on journal [ 512.324871][ T8478] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 512.798978][ T8489] loop9: detected capacity change from 0 to 16 [ 512.878521][ T8489] erofs (device loop9): mounted with root inode @ nid 36. [ 512.936477][ T8489] bio_check_eod: 106 callbacks suppressed [ 512.936527][ T8489] syz.9.394: attempt to access beyond end of device [ 512.936527][ T8489] loop9: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 513.496380][ T8489] syz.9.394: attempt to access beyond end of device [ 513.496380][ T8489] loop9: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 513.517568][ T8489] erofs (device loop9): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 513.527323][ T8489] erofs (device loop9): read error -117 @ 1 of nid 89 [ 513.534440][ T31] audit: type=1800 audit(530.160:11): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.394" name="file3" dev="loop9" ino=89 res=0 errno=0 [ 513.611068][ T8489] syz.9.394 (8489) used greatest stack depth: 19992 bytes left [ 514.743362][ T7068] ocfs2: Unmounting device (7,3) on (node local) [ 518.315043][ T8510] loop2: detected capacity change from 0 to 2048 [ 518.487868][ T8516] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 518.616816][ T31] audit: type=1800 audit(535.472:12): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="bus" dev="loop2" ino=2097152 res=0 errno=0 [ 518.730176][ T8517] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 518.791723][ T8517] Remounting filesystem read-only [ 519.326620][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.338039][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.346920][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.356662][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.365872][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.489809][ T7252] udevd[7252]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 519.526069][ T7247] udevd[7247]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 519.536691][ T7253] udevd[7253]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 519.548111][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 519.799894][ T31] audit: type=1800 audit(536.731:13): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.405" name="file1" dev="tmpfs" ino=29 res=0 errno=0 [ 520.790180][ T8536] netlink: 52 bytes leftover after parsing attributes in process `syz.2.405'. [ 521.371460][ T5843] Bluetooth: hci5: command tx timeout [ 524.038023][ T5843] Bluetooth: hci5: command tx timeout [ 525.839097][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 525.949815][ T8572] loop5: detected capacity change from 0 to 128 [ 526.035089][ T5843] Bluetooth: hci5: command tx timeout [ 526.751511][ T8574] trusted_key: encrypted_key: insufficient parameters specified [ 528.566739][ T5843] Bluetooth: hci5: command tx timeout [ 531.125111][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.169170][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.881844][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 531.891153][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 531.900369][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 531.909505][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 532.144709][ T8524] bridge_slave_0: entered allmulticast mode [ 532.681145][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 532.711641][ T8524] bridge_slave_0: entered promiscuous mode [ 532.761676][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.878616][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.885901][ T8524] bridge_slave_1: entered allmulticast mode [ 532.948007][ T8524] bridge_slave_1: entered promiscuous mode [ 533.027260][ T8622] loop9: detected capacity change from 0 to 128 [ 533.394364][ T8622] FAT-fs (loop9): bogus logical sector size 65535 [ 533.439244][ T8622] FAT-fs (loop9): Can't find a valid FAT filesystem [ 534.693589][ T5843] Bluetooth: hci7: command tx timeout [ 534.700659][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.723151][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.948926][ T8639] fuse: Bad value for 'fd' [ 536.137982][ T8524] team0: Port device team_slave_0 added [ 536.853587][ T5843] Bluetooth: hci7: command tx timeout [ 536.891068][ T8524] team0: Port device team_slave_1 added [ 537.246063][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.256858][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.264598][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.282622][ T8656] loop9: detected capacity change from 0 to 1024 [ 537.292296][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.310315][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.812807][ T5848] Bluetooth: hci7: command tx timeout [ 539.264580][ T5848] Bluetooth: hci1: command tx timeout [ 539.352431][ T6054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.538335][ T6356] hfsplus: bad catalog file entry [ 539.558492][ T6356] hfsplus: b-tree write err: -5, ino 3 [ 541.673664][ T5843] Bluetooth: hci1: command tx timeout [ 541.679239][ T5848] Bluetooth: hci7: command tx timeout [ 541.908764][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.937258][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.963247][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.119803][ T6054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.227393][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.260997][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.368495][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.501293][ T6054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.576733][ T88] libceph: connect (1)[c::]:6789 error -101 [ 542.588015][ T88] libceph: mon0 (1)[c::]:6789 connect error [ 542.632927][ T8689] ceph: No mds server is up or the cluster is laggy [ 542.906048][ T6054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.619341][ T5848] Bluetooth: hci1: command tx timeout [ 543.988128][ T8524] hsr_slave_0: entered promiscuous mode [ 544.038949][ T8524] hsr_slave_1: entered promiscuous mode [ 544.063379][ T8524] debugfs: 'hsr0' already exists in 'hsr' [ 544.069126][ T8524] Cannot create hsr debugfs directory [ 545.621989][ T5843] Bluetooth: hci1: command tx timeout [ 546.305945][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 546.325737][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 546.333582][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 546.343657][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 546.362269][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 546.500833][ T8716] loop9: detected capacity change from 0 to 1024 [ 546.534573][ T8716] EXT4-fs: Ignoring removed mblk_io_submit option [ 546.605020][ T8716] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 546.708202][ T8716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.994201][ T7246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.130909][ T8733] netlink: 'syz.2.439': attribute type 25 has an invalid length. [ 548.340733][ T5848] Bluetooth: hci8: command tx timeout [ 548.354082][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 548.406282][ T6054] bridge_slave_1: left allmulticast mode [ 548.411966][ T6054] bridge_slave_1: left promiscuous mode [ 548.434260][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.475190][ T6054] bridge_slave_0: left allmulticast mode [ 548.480875][ T6054] bridge_slave_0: left promiscuous mode [ 548.525724][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.943980][ T5848] Bluetooth: hci8: command tx timeout [ 552.901206][ T5848] Bluetooth: hci8: command tx timeout [ 553.397182][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.425095][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.455553][ T6054] bond0 (unregistering): Released all slaves [ 553.834277][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 553.844056][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 553.938303][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 554.892058][ T5848] Bluetooth: hci8: command tx timeout [ 554.998671][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.010486][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.080123][ T8610] bridge_slave_0: entered allmulticast mode [ 555.090726][ T8610] bridge_slave_0: entered promiscuous mode [ 557.461398][ T6054] hsr_slave_0: left promiscuous mode [ 557.480668][ T6054] hsr_slave_1: left promiscuous mode [ 557.504078][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.521471][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.530129][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.702061][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.108248][ T6054] veth1_macvtap: left promiscuous mode [ 559.124401][ T6054] veth0_macvtap: left promiscuous mode [ 559.140563][ T6054] veth1_vlan: left promiscuous mode [ 559.157058][ T6054] veth0_vlan: left promiscuous mode [ 561.863556][ T8170] ================================================================== [ 561.871667][ T8170] BUG: KASAN: use-after-free in __mutex_lock+0x1a24/0x1ca0 [ 561.878861][ T8170] Read of size 8 at addr ffff88802a5880a8 by task khidpd_10000008/8170 [ 561.887086][ T8170] [ 561.889398][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: khidpd_10000008 Not tainted syzkaller #0 PREEMPT(full) [ 561.889430][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.889448][ T8170] Call Trace: [ 561.889458][ T8170] [ 561.889468][ T8170] dump_stack_lvl+0x116/0x1f0 [ 561.889514][ T8170] print_report+0xcd/0x630 [ 561.889556][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.889591][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.889624][ T8170] ? __phys_addr+0xe8/0x180 [ 561.889652][ T8170] ? __mutex_lock+0x1a24/0x1ca0 [ 561.889675][ T8170] kasan_report+0xe0/0x110 [ 561.889706][ T8170] ? __mutex_lock+0x1a24/0x1ca0 [ 561.889736][ T8170] __mutex_lock+0x1a24/0x1ca0 [ 561.889762][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 561.889789][ T8170] ? __lock_acquire+0x12c2/0x2890 [ 561.889824][ T8170] ? __pfx___mutex_lock+0x10/0x10 [ 561.889852][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.889887][ T8170] ? find_held_lock+0x2b/0x80 [ 561.889931][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.889968][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 561.889994][ T8170] l2cap_unregister_user+0x71/0x240 [ 561.890023][ T8170] hidp_session_thread+0x45e/0x680 [ 561.890062][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 561.890099][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 561.890139][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 561.890174][ T8170] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.890218][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.890251][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.890284][ T8170] ? __kthread_parkme+0x19e/0x250 [ 561.890312][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 561.890349][ T8170] kthread+0x3c5/0x780 [ 561.890381][ T8170] ? __pfx_kthread+0x10/0x10 [ 561.890414][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.890447][ T8170] ? rcu_is_watching+0x12/0xc0 [ 561.890473][ T8170] ? __pfx_kthread+0x10/0x10 [ 561.890506][ T8170] ret_from_fork+0x983/0xb10 [ 561.890540][ T8170] ? __pfx_ret_from_fork+0x10/0x10 [ 561.890572][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.890605][ T8170] ? __switch_to+0x7af/0x10d0 [ 561.890642][ T8170] ? __pfx_kthread+0x10/0x10 [ 561.890674][ T8170] ret_from_fork_asm+0x1a/0x30 [ 561.890727][ T8170] [ 561.890737][ T8170] [ 562.109778][ T8170] The buggy address belongs to the physical page: [ 562.116171][ T8170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a58ad80 pfn:0x2a588 [ 562.126220][ T8170] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 562.133325][ T8170] raw: 00fff00000000000 ffffea0000de3d08 ffff8880b85410c0 0000000000000000 [ 562.141900][ T8170] raw: ffff88802a58ad80 0000000000000000 00000000ffffffff 0000000000000000 [ 562.150464][ T8170] page dumped because: kasan: bad access detected [ 562.156870][ T8170] page_owner tracks the page as freed [ 562.162215][ T8170] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 8103, tgid 8103 (syz-executor), ts 462697026380, free_ts 561863327901 [ 562.180271][ T8170] post_alloc_hook+0x1af/0x220 [ 562.185043][ T8170] get_page_from_freelist+0xd0b/0x31a0 [ 562.190507][ T8170] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 562.196412][ T8170] alloc_pages_mpol+0x1fb/0x550 [ 562.201255][ T8170] ___kmalloc_large_node+0x10c/0x150 [ 562.206539][ T8170] __kmalloc_large_node_noprof+0x1c/0x70 [ 562.212167][ T8170] __kmalloc_noprof.cold+0xc/0x62 [ 562.217198][ T8170] hci_alloc_dev_priv+0x1d/0x28a0 [ 562.222224][ T8170] __vhci_create_device+0xf0/0x880 [ 562.227341][ T8170] vhci_write+0x2c0/0x480 [ 562.231674][ T8170] vfs_write+0x7d3/0x11d0 [ 562.235995][ T8170] ksys_write+0x12a/0x250 [ 562.240315][ T8170] do_syscall_64+0xcd/0xf80 [ 562.244826][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.250710][ T8170] page last free pid 8603 tgid 8595 stack trace: [ 562.257017][ T8170] __free_frozen_pages+0x7df/0x1170 [ 562.262223][ T8170] hci_release_dev+0x4ef/0x640 [ 562.266987][ T8170] bt_host_release+0x6a/0xb0 [ 562.271583][ T8170] device_release+0xa4/0x240 [ 562.276181][ T8170] kobject_put+0x1ef/0x6f0 [ 562.280583][ T8170] put_device+0x1f/0x30 [ 562.284741][ T8170] vhci_release+0x185/0x230 [ 562.289246][ T8170] __fput+0x402/0xb70 [ 562.293227][ T8170] task_work_run+0x150/0x240 [ 562.297818][ T8170] do_exit+0x87f/0x2bd0 [ 562.301964][ T8170] do_group_exit+0xd3/0x2a0 [ 562.306460][ T8170] get_signal+0x2671/0x26d0 [ 562.310971][ T8170] arch_do_signal_or_restart+0x8f/0x7e0 [ 562.316524][ T8170] exit_to_user_mode_loop+0x8c/0x540 [ 562.321815][ T8170] do_syscall_64+0x4ee/0xf80 [ 562.326412][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.332299][ T8170] [ 562.334602][ T8170] Memory state around the buggy address: [ 562.340212][ T8170] ffff88802a587f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 562.348261][ T8170] ffff88802a588000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 562.356317][ T8170] >ffff88802a588080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 562.364363][ T8170] ^ [ 562.369717][ T8170] ffff88802a588100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 562.377764][ T8170] ffff88802a588180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 562.385807][ T8170] ================================================================== [ 562.394905][ T8170] Disabling lock debugging due to kernel taint [ 562.402935][ T8170] ================================================================== [ 562.410981][ T8170] BUG: KASAN: use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 562.418357][ T8170] Read of size 4 at addr ffff88802a588064 by task khidpd_10000008/8170 [ 562.426579][ T8170] [ 562.428891][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: khidpd_10000008 Tainted: G B syzkaller #0 PREEMPT(full) [ 562.428931][ T8170] Tainted: [B]=BAD_PAGE [ 562.428941][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.428958][ T8170] Call Trace: [ 562.428967][ T8170] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.428977][ T8170] dump_stack_lvl+0x116/0x1f0 [ 562.429021][ T8170] print_report+0xcd/0x630 [ 562.429050][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.429084][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.429117][ T8170] ? __phys_addr+0xe8/0x180 [ 562.429144][ T8170] ? do_raw_spin_lock+0x26f/0x2b0 [ 562.429181][ T8170] kasan_report+0xe0/0x110 [ 562.429212][ T8170] ? do_raw_spin_lock+0x26f/0x2b0 [ 562.429254][ T8170] do_raw_spin_lock+0x26f/0x2b0 [ 562.429291][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.429325][ T8170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.429363][ T8170] ? lock_acquire+0x2cd/0x330 [ 562.429394][ T8170] ? __mutex_lock+0x1a24/0x1ca0 [ 562.429422][ T8170] _raw_spin_lock_irqsave+0x42/0x60 [ 562.429460][ T8170] ? __mutex_lock+0xca5/0x1ca0 [ 562.429484][ T8170] __mutex_lock+0xca5/0x1ca0 [ 562.429510][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 562.429542][ T8170] ? __lock_acquire+0x12c2/0x2890 [ 562.429576][ T8170] ? __pfx___mutex_lock+0x10/0x10 [ 562.429604][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.429639][ T8170] ? find_held_lock+0x2b/0x80 [ 562.429682][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.429718][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 562.429744][ T8170] l2cap_unregister_user+0x71/0x240 [ 562.429772][ T8170] hidp_session_thread+0x45e/0x680 [ 562.429809][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 562.429847][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 562.429886][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 562.429922][ T8170] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.429964][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.429998][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.430031][ T8170] ? __kthread_parkme+0x19e/0x250 [ 562.430059][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 562.430096][ T8170] kthread+0x3c5/0x780 [ 562.430128][ T8170] ? __pfx_kthread+0x10/0x10 [ 562.430160][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.430193][ T8170] ? rcu_is_watching+0x12/0xc0 [ 562.430219][ T8170] ? __pfx_kthread+0x10/0x10 [ 562.430251][ T8170] ret_from_fork+0x983/0xb10 [ 562.430282][ T8170] ? __pfx_ret_from_fork+0x10/0x10 [ 562.430312][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.430345][ T8170] ? __switch_to+0x7af/0x10d0 [ 562.430381][ T8170] ? __pfx_kthread+0x10/0x10 [ 562.430414][ T8170] ret_from_fork_asm+0x1a/0x30 [ 562.430464][ T8170] [ 562.430473][ T8170] [ 562.690641][ T8170] The buggy address belongs to the physical page: [ 562.697033][ T8170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a58ad80 pfn:0x2a588 [ 562.707084][ T8170] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 562.714194][ T8170] raw: 00fff00000000000 ffffea0001db5008 ffff8880b85410c0 0000000000000000 [ 562.722768][ T8170] raw: ffff88802a58ad80 0000000000000000 00000000ffffffff 0000000000000000 [ 562.731329][ T8170] page dumped because: kasan: bad access detected [ 562.737721][ T8170] page_owner tracks the page as freed [ 562.743074][ T8170] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 8170, tgid 8170 (khidpd_10000008), ts 562401545631, free_ts 562401578451 [ 562.763303][ T8170] post_alloc_hook+0x1af/0x220 [ 562.768079][ T8170] get_page_from_freelist+0xd0b/0x31a0 [ 562.773543][ T8170] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 562.779444][ T8170] alloc_pages_mpol+0x1fb/0x550 [ 562.784299][ T8170] alloc_pages_noprof+0x131/0x390 [ 562.789320][ T8170] stack_depot_save_flags+0x8fe/0x9b0 [ 562.794692][ T8170] kasan_save_stack+0x42/0x60 [ 562.799358][ T8170] kasan_save_track+0x14/0x30 [ 562.804023][ T8170] __kasan_slab_alloc+0x89/0x90 [ 562.808871][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 562.814768][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 562.819594][ T8170] __alloc_skb+0x186/0x410 [ 562.824007][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 562.829203][ T8170] tcp_send_ack+0x84/0xa0 [ 562.833535][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 562.838652][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 562.844110][ T8170] page last free pid 8170 tgid 8170 stack trace: [ 562.850415][ T8170] __free_frozen_pages+0x7df/0x1170 [ 562.855619][ T8170] stack_depot_save_flags+0x352/0x9b0 [ 562.861011][ T8170] kasan_save_stack+0x42/0x60 [ 562.865683][ T8170] kasan_save_track+0x14/0x30 [ 562.870349][ T8170] __kasan_slab_alloc+0x89/0x90 [ 562.875213][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 562.881114][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 562.885881][ T8170] __alloc_skb+0x186/0x410 [ 562.890291][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 562.895488][ T8170] tcp_send_ack+0x84/0xa0 [ 562.899842][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 562.904957][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 562.910412][ T8170] tcp_v4_do_rcv+0x68e/0x10a0 [ 562.915086][ T8170] tcp_v4_rcv+0x3077/0x4db0 [ 562.919584][ T8170] ip_protocol_deliver_rcu+0xba/0x4c0 [ 562.924959][ T8170] ip_local_deliver_finish+0x3f2/0x720 [ 562.930421][ T8170] [ 562.932724][ T8170] Memory state around the buggy address: [ 562.938347][ T8170] ffff88802a587f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 562.946483][ T8170] ffff88802a587f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 562.954540][ T8170] >ffff88802a588000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 562.962584][ T8170] ^ [ 562.969762][ T8170] ffff88802a588080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 562.977808][ T8170] ffff88802a588100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 562.985850][ T8170] ================================================================== [ 562.993890][ T8170] ================================================================== [ 563.001937][ T8170] BUG: KASAN: use-after-free in do_raw_spin_lock+0x27f/0x2b0 [ 563.009332][ T8170] Read of size 8 at addr ffff88802a588070 by task khidpd_10000008/8170 [ 563.017555][ T8170] [ 563.019870][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: khidpd_10000008 Tainted: G B syzkaller #0 PREEMPT(full) [ 563.019910][ T8170] Tainted: [B]=BAD_PAGE [ 563.019919][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.019937][ T8170] Call Trace: [ 563.019947][ T8170] [ 563.019956][ T8170] dump_stack_lvl+0x116/0x1f0 [ 563.020002][ T8170] print_report+0xcd/0x630 [ 563.020032][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.020066][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.020098][ T8170] ? __phys_addr+0xe8/0x180 [ 563.020125][ T8170] ? do_raw_spin_lock+0x27f/0x2b0 [ 563.020163][ T8170] kasan_report+0xe0/0x110 [ 563.020194][ T8170] ? do_raw_spin_lock+0x27f/0x2b0 [ 563.020236][ T8170] do_raw_spin_lock+0x27f/0x2b0 [ 563.020273][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.020308][ T8170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 563.020345][ T8170] ? lock_acquire+0x2cd/0x330 [ 563.020377][ T8170] ? __mutex_lock+0x1a24/0x1ca0 [ 563.020404][ T8170] _raw_spin_lock_irqsave+0x42/0x60 [ 563.020442][ T8170] ? __mutex_lock+0xca5/0x1ca0 [ 563.020466][ T8170] __mutex_lock+0xca5/0x1ca0 [ 563.020492][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 563.020523][ T8170] ? __lock_acquire+0x12c2/0x2890 [ 563.020556][ T8170] ? __pfx___mutex_lock+0x10/0x10 [ 563.020584][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.020620][ T8170] ? find_held_lock+0x2b/0x80 [ 563.020663][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.020699][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 563.020725][ T8170] l2cap_unregister_user+0x71/0x240 [ 563.020754][ T8170] hidp_session_thread+0x45e/0x680 [ 563.020792][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 563.020830][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 563.020868][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 563.020904][ T8170] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.020946][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.020980][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.021013][ T8170] ? __kthread_parkme+0x19e/0x250 [ 563.021040][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 563.021078][ T8170] kthread+0x3c5/0x780 [ 563.021110][ T8170] ? __pfx_kthread+0x10/0x10 [ 563.021142][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.021176][ T8170] ? rcu_is_watching+0x12/0xc0 [ 563.021202][ T8170] ? __pfx_kthread+0x10/0x10 [ 563.021234][ T8170] ret_from_fork+0x983/0xb10 [ 563.021265][ T8170] ? __pfx_ret_from_fork+0x10/0x10 [ 563.021296][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.021329][ T8170] ? __switch_to+0x7af/0x10d0 [ 563.021364][ T8170] ? __pfx_kthread+0x10/0x10 [ 563.021397][ T8170] ret_from_fork_asm+0x1a/0x30 [ 563.021447][ T8170] [ 563.021456][ T8170] [ 563.281234][ T8170] The buggy address belongs to the physical page: [ 563.287624][ T8170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a58ad80 pfn:0x2a588 [ 563.297677][ T8170] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 563.304783][ T8170] raw: 00fff00000000000 ffffea0001db5008 ffff8880b85410c0 0000000000000000 [ 563.313358][ T8170] raw: ffff88802a58ad80 0000000000000000 00000000ffffffff 0000000000000000 [ 563.321923][ T8170] page dumped because: kasan: bad access detected [ 563.328319][ T8170] page_owner tracks the page as freed [ 563.333666][ T8170] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 8170, tgid 8170 (khidpd_10000008), ts 562401545631, free_ts 562401578451 [ 563.353900][ T8170] post_alloc_hook+0x1af/0x220 [ 563.358673][ T8170] get_page_from_freelist+0xd0b/0x31a0 [ 563.364137][ T8170] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 563.370039][ T8170] alloc_pages_mpol+0x1fb/0x550 [ 563.374883][ T8170] alloc_pages_noprof+0x131/0x390 [ 563.379900][ T8170] stack_depot_save_flags+0x8fe/0x9b0 [ 563.385273][ T8170] kasan_save_stack+0x42/0x60 [ 563.389939][ T8170] kasan_save_track+0x14/0x30 [ 563.394606][ T8170] __kasan_slab_alloc+0x89/0x90 [ 563.399449][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 563.405351][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 563.410156][ T8170] __alloc_skb+0x186/0x410 [ 563.414565][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 563.419763][ T8170] tcp_send_ack+0x84/0xa0 [ 563.424093][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 563.429209][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 563.434663][ T8170] page last free pid 8170 tgid 8170 stack trace: [ 563.440970][ T8170] __free_frozen_pages+0x7df/0x1170 [ 563.446170][ T8170] stack_depot_save_flags+0x352/0x9b0 [ 563.451534][ T8170] kasan_save_stack+0x42/0x60 [ 563.456198][ T8170] kasan_save_track+0x14/0x30 [ 563.460956][ T8170] __kasan_slab_alloc+0x89/0x90 [ 563.465800][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 563.471707][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 563.476495][ T8170] __alloc_skb+0x186/0x410 [ 563.480939][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 563.486144][ T8170] tcp_send_ack+0x84/0xa0 [ 563.490477][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 563.495708][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 563.501165][ T8170] tcp_v4_do_rcv+0x68e/0x10a0 [ 563.505837][ T8170] tcp_v4_rcv+0x3077/0x4db0 [ 563.510342][ T8170] ip_protocol_deliver_rcu+0xba/0x4c0 [ 563.515805][ T8170] ip_local_deliver_finish+0x3f2/0x720 [ 563.521267][ T8170] [ 563.523574][ T8170] Memory state around the buggy address: [ 563.529186][ T8170] ffff88802a587f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 563.537232][ T8170] ffff88802a587f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 563.545298][ T8170] >ffff88802a588000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 563.553365][ T8170] ^ [ 563.561071][ T8170] ffff88802a588080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 563.569117][ T8170] ffff88802a588100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 563.577246][ T8170] ================================================================== [ 563.585287][ T8170] ================================================================== [ 563.593327][ T8170] BUG: KASAN: use-after-free in do_raw_spin_lock+0x265/0x2b0 [ 563.600703][ T8170] Read of size 4 at addr ffff88802a588068 by task khidpd_10000008/8170 [ 563.608948][ T8170] [ 563.611265][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: khidpd_10000008 Tainted: G B syzkaller #0 PREEMPT(full) [ 563.611304][ T8170] Tainted: [B]=BAD_PAGE [ 563.611314][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.611331][ T8170] Call Trace: [ 563.611341][ T8170] [ 563.611351][ T8170] dump_stack_lvl+0x116/0x1f0 [ 563.611395][ T8170] print_report+0xcd/0x630 [ 563.611425][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.611459][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.611492][ T8170] ? __phys_addr+0xe8/0x180 [ 563.611527][ T8170] ? do_raw_spin_lock+0x265/0x2b0 [ 563.611568][ T8170] kasan_report+0xe0/0x110 [ 563.611599][ T8170] ? do_raw_spin_lock+0x265/0x2b0 [ 563.611641][ T8170] do_raw_spin_lock+0x265/0x2b0 [ 563.611678][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.611712][ T8170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 563.611750][ T8170] ? lock_acquire+0x2cd/0x330 [ 563.611782][ T8170] ? __mutex_lock+0x1a24/0x1ca0 [ 563.611810][ T8170] _raw_spin_lock_irqsave+0x42/0x60 [ 563.611848][ T8170] ? __mutex_lock+0xca5/0x1ca0 [ 563.611872][ T8170] __mutex_lock+0xca5/0x1ca0 [ 563.611897][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 563.611924][ T8170] ? __lock_acquire+0x12c2/0x2890 [ 563.611957][ T8170] ? __pfx___mutex_lock+0x10/0x10 [ 563.611985][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.612020][ T8170] ? find_held_lock+0x2b/0x80 [ 563.612063][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.612100][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 563.612126][ T8170] l2cap_unregister_user+0x71/0x240 [ 563.612154][ T8170] hidp_session_thread+0x45e/0x680 [ 563.612192][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 563.612230][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 563.612269][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 563.612304][ T8170] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.612346][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.612380][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.612413][ T8170] ? __kthread_parkme+0x19e/0x250 [ 563.612441][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 563.612478][ T8170] kthread+0x3c5/0x780 [ 563.612510][ T8170] ? __pfx_kthread+0x10/0x10 [ 563.612547][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.612580][ T8170] ? rcu_is_watching+0x12/0xc0 [ 563.612605][ T8170] ? __pfx_kthread+0x10/0x10 [ 563.612638][ T8170] ret_from_fork+0x983/0xb10 [ 563.612668][ T8170] ? __pfx_ret_from_fork+0x10/0x10 [ 563.612700][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.612732][ T8170] ? __switch_to+0x7af/0x10d0 [ 563.612769][ T8170] ? __pfx_kthread+0x10/0x10 [ 563.612801][ T8170] ret_from_fork_asm+0x1a/0x30 [ 563.612851][ T8170] [ 563.612860][ T8170] [ 563.873427][ T8170] The buggy address belongs to the physical page: [ 563.879820][ T8170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a58ad80 pfn:0x2a588 [ 563.889871][ T8170] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 563.896979][ T8170] raw: 00fff00000000000 ffffea0001db5008 ffff8880b85410c0 0000000000000000 [ 563.905554][ T8170] raw: ffff88802a58ad80 0000000000000000 00000000ffffffff 0000000000000000 [ 563.914132][ T8170] page dumped because: kasan: bad access detected [ 563.920529][ T8170] page_owner tracks the page as freed [ 563.925872][ T8170] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 8170, tgid 8170 (khidpd_10000008), ts 562401545631, free_ts 562401578451 [ 563.946102][ T8170] post_alloc_hook+0x1af/0x220 [ 563.950880][ T8170] get_page_from_freelist+0xd0b/0x31a0 [ 563.956354][ T8170] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 563.962255][ T8170] alloc_pages_mpol+0x1fb/0x550 [ 563.967138][ T8170] alloc_pages_noprof+0x131/0x390 [ 563.972173][ T8170] stack_depot_save_flags+0x8fe/0x9b0 [ 563.977649][ T8170] kasan_save_stack+0x42/0x60 [ 563.982332][ T8170] kasan_save_track+0x14/0x30 [ 563.987007][ T8170] __kasan_slab_alloc+0x89/0x90 [ 563.991859][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 563.997761][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 564.002541][ T8170] __alloc_skb+0x186/0x410 [ 564.007129][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 564.012331][ T8170] tcp_send_ack+0x84/0xa0 [ 564.016681][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 564.021825][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 564.027283][ T8170] page last free pid 8170 tgid 8170 stack trace: [ 564.033627][ T8170] __free_frozen_pages+0x7df/0x1170 [ 564.038832][ T8170] stack_depot_save_flags+0x352/0x9b0 [ 564.044224][ T8170] kasan_save_stack+0x42/0x60 [ 564.048894][ T8170] kasan_save_track+0x14/0x30 [ 564.053566][ T8170] __kasan_slab_alloc+0x89/0x90 [ 564.058419][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 564.064337][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 564.069105][ T8170] __alloc_skb+0x186/0x410 [ 564.073515][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 564.078716][ T8170] tcp_send_ack+0x84/0xa0 [ 564.083064][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 564.088184][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 564.093640][ T8170] tcp_v4_do_rcv+0x68e/0x10a0 [ 564.098332][ T8170] tcp_v4_rcv+0x3077/0x4db0 [ 564.102853][ T8170] ip_protocol_deliver_rcu+0xba/0x4c0 [ 564.108244][ T8170] ip_local_deliver_finish+0x3f2/0x720 [ 564.113724][ T8170] [ 564.116036][ T8170] Memory state around the buggy address: [ 564.121749][ T8170] ffff88802a587f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.129829][ T8170] ffff88802a587f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.138111][ T8170] >ffff88802a588000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 564.146161][ T8170] ^ [ 564.153601][ T8170] ffff88802a588080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 564.161658][ T8170] ffff88802a588100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 564.169710][ T8170] ================================================================== [ 564.177751][ T8170] ================================================================== [ 564.185797][ T8170] BUG: KASAN: use-after-free in do_raw_spin_lock+0x11d/0x2b0 [ 564.193178][ T8170] Write of size 4 at addr ffff88802a588060 by task khidpd_10000008/8170 [ 564.201492][ T8170] [ 564.203811][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: khidpd_10000008 Tainted: G B syzkaller #0 PREEMPT(full) [ 564.203851][ T8170] Tainted: [B]=BAD_PAGE [ 564.203861][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.203878][ T8170] Call Trace: [ 564.203889][ T8170] [ 564.203900][ T8170] dump_stack_lvl+0x116/0x1f0 [ 564.203945][ T8170] print_report+0xcd/0x630 [ 564.203975][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.204009][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.204042][ T8170] ? __phys_addr+0xe8/0x180 [ 564.204069][ T8170] ? do_raw_spin_lock+0x11d/0x2b0 [ 564.204107][ T8170] kasan_report+0xe0/0x110 [ 564.204138][ T8170] ? do_raw_spin_lock+0x11d/0x2b0 [ 564.204180][ T8170] kasan_check_range+0x100/0x1b0 [ 564.204218][ T8170] do_raw_spin_lock+0x11d/0x2b0 [ 564.204256][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.204290][ T8170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 564.204327][ T8170] ? lock_acquire+0x2cd/0x330 [ 564.204359][ T8170] ? __mutex_lock+0x1a24/0x1ca0 [ 564.204386][ T8170] _raw_spin_lock_irqsave+0x42/0x60 [ 564.204425][ T8170] ? __mutex_lock+0xca5/0x1ca0 [ 564.204450][ T8170] __mutex_lock+0xca5/0x1ca0 [ 564.204475][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 564.204503][ T8170] ? __lock_acquire+0x12c2/0x2890 [ 564.204541][ T8170] ? __pfx___mutex_lock+0x10/0x10 [ 564.204570][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.204605][ T8170] ? find_held_lock+0x2b/0x80 [ 564.204649][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.204685][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 564.204711][ T8170] l2cap_unregister_user+0x71/0x240 [ 564.204740][ T8170] hidp_session_thread+0x45e/0x680 [ 564.204778][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 564.204816][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 564.204855][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 564.204890][ T8170] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.204933][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.204967][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.205000][ T8170] ? __kthread_parkme+0x19e/0x250 [ 564.205028][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 564.205065][ T8170] kthread+0x3c5/0x780 [ 564.205097][ T8170] ? __pfx_kthread+0x10/0x10 [ 564.205130][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.205163][ T8170] ? rcu_is_watching+0x12/0xc0 [ 564.205189][ T8170] ? __pfx_kthread+0x10/0x10 [ 564.205222][ T8170] ret_from_fork+0x983/0xb10 [ 564.205252][ T8170] ? __pfx_ret_from_fork+0x10/0x10 [ 564.205283][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.205316][ T8170] ? __switch_to+0x7af/0x10d0 [ 564.205353][ T8170] ? __pfx_kthread+0x10/0x10 [ 564.205386][ T8170] ret_from_fork_asm+0x1a/0x30 [ 564.205438][ T8170] [ 564.205447][ T8170] [ 564.470576][ T8170] The buggy address belongs to the physical page: [ 564.476970][ T8170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a58ad80 pfn:0x2a588 [ 564.487026][ T8170] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 564.494134][ T8170] raw: 00fff00000000000 ffffea0001db5008 ffff8880b85410c0 0000000000000000 [ 564.502708][ T8170] raw: ffff88802a58ad80 0000000000000000 00000000ffffffff 0000000000000000 [ 564.511362][ T8170] page dumped because: kasan: bad access detected [ 564.517761][ T8170] page_owner tracks the page as freed [ 564.523113][ T8170] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 8170, tgid 8170 (khidpd_10000008), ts 562401545631, free_ts 562401578451 [ 564.543350][ T8170] post_alloc_hook+0x1af/0x220 [ 564.548123][ T8170] get_page_from_freelist+0xd0b/0x31a0 [ 564.553586][ T8170] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 564.559487][ T8170] alloc_pages_mpol+0x1fb/0x550 [ 564.564341][ T8170] alloc_pages_noprof+0x131/0x390 [ 564.569455][ T8170] stack_depot_save_flags+0x8fe/0x9b0 [ 564.574831][ T8170] kasan_save_stack+0x42/0x60 [ 564.579586][ T8170] kasan_save_track+0x14/0x30 [ 564.584254][ T8170] __kasan_slab_alloc+0x89/0x90 [ 564.589098][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 564.595003][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 564.599866][ T8170] __alloc_skb+0x186/0x410 [ 564.604279][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 564.609477][ T8170] tcp_send_ack+0x84/0xa0 [ 564.613812][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 564.618951][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 564.624493][ T8170] page last free pid 8170 tgid 8170 stack trace: [ 564.630809][ T8170] __free_frozen_pages+0x7df/0x1170 [ 564.636011][ T8170] stack_depot_save_flags+0x352/0x9b0 [ 564.641377][ T8170] kasan_save_stack+0x42/0x60 [ 564.646046][ T8170] kasan_save_track+0x14/0x30 [ 564.650711][ T8170] __kasan_slab_alloc+0x89/0x90 [ 564.655555][ T8170] kmem_cache_alloc_node_noprof+0x298/0x800 [ 564.661454][ T8170] kmalloc_reserve+0x18b/0x2c0 [ 564.666225][ T8170] __alloc_skb+0x186/0x410 [ 564.670634][ T8170] __tcp_send_ack.part.0+0x67/0x910 [ 564.675833][ T8170] tcp_send_ack+0x84/0xa0 [ 564.680165][ T8170] __tcp_ack_snd_check+0x1fe/0xa00 [ 564.685280][ T8170] tcp_rcv_state_process+0x1121/0x6540 [ 564.690734][ T8170] tcp_v4_do_rcv+0x68e/0x10a0 [ 564.695434][ T8170] tcp_v4_rcv+0x3077/0x4db0 [ 564.699934][ T8170] ip_protocol_deliver_rcu+0xba/0x4c0 [ 564.705311][ T8170] ip_local_deliver_finish+0x3f2/0x720 [ 564.710774][ T8170] [ 564.713088][ T8170] Memory state around the buggy address: [ 564.718702][ T8170] ffff88802a587f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.726749][ T8170] ffff88802a587f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.734803][ T8170] >ffff88802a588000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 564.742850][ T8170] ^ [ 564.750028][ T8170] ffff88802a588080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 564.758077][ T8170] ffff88802a588100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 564.766134][ T8170] ================================================================== [ 564.774178][ T8170] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 564.781896][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: khidpd_10000008 Tainted: G B syzkaller #0 PREEMPT(full) [ 564.793188][ T8170] Tainted: [B]=BAD_PAGE [ 564.797331][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.807372][ T8170] Call Trace: [ 564.810637][ T8170] [ 564.813555][ T8170] dump_stack_lvl+0x3d/0x1f0 [ 564.818166][ T8170] vpanic+0x640/0x6f0 [ 564.822146][ T8170] panic+0xca/0xd0 [ 564.825861][ T8170] ? __pfx_panic+0x10/0x10 [ 564.830276][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.835911][ T8170] ? rcu_is_watching+0x12/0xc0 [ 564.840669][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.846307][ T8170] ? lock_release+0x201/0x2d0 [ 564.851009][ T8170] ? print_report+0x2bd/0x630 [ 564.855689][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.861416][ T8170] end_report+0x13f/0x160 [ 564.865751][ T8170] kasan_report+0xee/0x110 [ 564.870174][ T8170] ? do_raw_spin_lock+0x11d/0x2b0 [ 564.875208][ T8170] kasan_check_range+0x100/0x1b0 [ 564.880243][ T8170] do_raw_spin_lock+0x11d/0x2b0 [ 564.885106][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.890742][ T8170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 564.896183][ T8170] ? lock_acquire+0x2cd/0x330 [ 564.901212][ T8170] ? __mutex_lock+0x1a24/0x1ca0 [ 564.906060][ T8170] _raw_spin_lock_irqsave+0x42/0x60 [ 564.911266][ T8170] ? __mutex_lock+0xca5/0x1ca0 [ 564.916020][ T8170] __mutex_lock+0xca5/0x1ca0 [ 564.920603][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 564.925973][ T8170] ? __lock_acquire+0x12c2/0x2890 [ 564.931002][ T8170] ? __pfx___mutex_lock+0x10/0x10 [ 564.936024][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.941660][ T8170] ? find_held_lock+0x2b/0x80 [ 564.946346][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.951985][ T8170] ? l2cap_unregister_user+0x71/0x240 [ 564.957348][ T8170] l2cap_unregister_user+0x71/0x240 [ 564.962546][ T8170] hidp_session_thread+0x45e/0x680 [ 564.967664][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 564.973298][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 564.979545][ T8170] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 564.985801][ T8170] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.991012][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.996649][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.002279][ T8170] ? __kthread_parkme+0x19e/0x250 [ 565.007338][ T8170] ? __pfx_hidp_session_thread+0x10/0x10 [ 565.012974][ T8170] kthread+0x3c5/0x780 [ 565.017041][ T8170] ? __pfx_kthread+0x10/0x10 [ 565.021631][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.027269][ T8170] ? rcu_is_watching+0x12/0xc0 [ 565.032041][ T8170] ? __pfx_kthread+0x10/0x10 [ 565.036630][ T8170] ret_from_fork+0x983/0xb10 [ 565.041217][ T8170] ? __pfx_ret_from_fork+0x10/0x10 [ 565.046328][ T8170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.052047][ T8170] ? __switch_to+0x7af/0x10d0 [ 565.056725][ T8170] ? __pfx_kthread+0x10/0x10 [ 565.061319][ T8170] ret_from_fork_asm+0x1a/0x30 [ 565.066096][ T8170] [ 565.069201][ T8170] Kernel Offset: disabled [ 565.073508][ T8170] Rebooting in 86400 seconds..