last executing test programs:

15.512270436s ago: executing program 3 (id=188):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1170}}], 0x1, 0x4008004)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8)
write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458)

12.212198617s ago: executing program 3 (id=196):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
umount2(0x0, 0x8)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0004}]})
syslog(0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

11.811132611s ago: executing program 3 (id=198):
unshare(0x2040600)
syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5d75, &(0x7f000000bb40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x1000000201009)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x10, 0x2, 0x7f, 0x8, 0x5636, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)

10.962861501s ago: executing program 1 (id=200):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r3 = syz_io_uring_setup(0x160d, &(0x7f0000000140)={0x0, 0xaa6a, 0x80}, &(0x7f0000000240)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x28, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0xffe0}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0)

9.415897187s ago: executing program 4 (id=202):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1170}}], 0x1, 0x4008004)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240))
write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458)

9.412656691s ago: executing program 0 (id=203):
r0 = syz_open_dev$I2C(&(0x7f00000022c0), 0x0, 0x800)
readv(r0, &(0x7f0000004800)=[{&(0x7f0000004740)=""/154, 0x9a}], 0x1)

9.162630422s ago: executing program 0 (id=205):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

9.023758131s ago: executing program 1 (id=206):
r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0)
setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r2, &(0x7f0000004b80), 0x0, 0xc080)
sendto$inet6(r2, &(0x7f0000000300), 0x5a9, 0x3b00, 0x0, 0xfffffffffffffdfd)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r4, 0x0, 0x0, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x83, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000000080)=0x18)
syz_mount_image$ubifs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000000140)={[{@bulk_read}, {}, {@no_bulk_read}, {@compr_none}]}, 0xfd, 0x9dc3, &(0x7f0000009ec0)="$eJwEwAMAbQUAwNBs27aXbdu2bS/3ro1s27Zt27a/0blvgPcP8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMGOHSAwwY4fIAjBjhygKMGOHqAYwY4doDjBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwW4dIDLBEiAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHeEqApwZogKcFeHqAZwR4ZoBnBXh2gOcEeG6AgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwjwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiAQwMcFuDwAEcEODLAUQGODnBMgGMDHCfEcUMcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqxKVDXCZEQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OcRTQjw1REM8LcTTQzwjxDNDPCvEs0M8J8RzQxyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYhXh3hNiNeGeF2I14d4Q4g3hnhTiDeHeEuIt4Z4W4i3h3hHiHeGeFeId4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDQhwa4rAQh4c4IsSRIY4KcXSIY0IcG+I4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhEuHeEyERLhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRnhLhqREa4WkRnh7hGRGeGeFZEZ4d4TkRnhvhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLh0AiHRTg8whERjoxwVISjIxwT4dgIx4lx3BjHi3H8GCeIccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKcekYl4mRGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjvGUGE+N0RhPi/H0GM+I8cwYz4rx7BjPifHcGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQGIfGOCzG4TGOiHFkjKNiHB3jmBjHxjhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgiS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCpyR4aoImeFqCpyd4RoJnJnhWgmcneE6C5yY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8EhyQ4NMFhCQ5PcESCIxMcleDoBMckODbBcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDrFZVIkxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlxVNTNMXTUjw9xTNSPDPFs1I8O8VzUjw3xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYrnpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkxaEpDktxeIojUhyZ4qgUR6c4JsWxKY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGS6TIRkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRmemqEZnpbh6RmekeGZGZ6V4dkZnpPhuRkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DIRkOzXBYhsMzHJHhyAxHZTg6wzEZjs1wnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl85xmRzJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQczfG0HE/P8Ywcz8zxrBzPzvGcHM/NcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OQ7JcWiOw3IcnuOIHEfmOCrH0TmOyXFsjuMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUSIHLFrhcgcsXuEKBKxa4UoErF7hKgasWuFqBqxe4RoFrFrhWgWsXuE6B6xa4XoHrF7hBgRsWuFGBGxe4SYGbFrhZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZ4XIHHF3hCgScWeFKBJxd4SoGnFmiBpxV4eoFnFHhmgWcVeHaB5xR4boGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSIFDCxxW4PACRxQ4ssBRBY4ucEyBYwscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS1yixCVLXKrEpUtcpkRKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSjy2xONKPL7EE0o8scSTSjy5xFNKPLVESzytxNNLPKPEM0s8q8SzSzynxHNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUNKHFrisBKHlziixJEljipxdIljShxb4jgVjlvheBWOX+EEFU5Y4UQVTlzhJBVOWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFVrhaRWeXuEZFZ5Z4VkVnl3hORWeW+GgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7C8yo8v8ILKrywwosqvLjCSyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuHQCodVOLzCERWOrHBUhaMrHFPh2ArHqXHcGsercfwaJ6hxwhonqnHiGiepcdIaJ6tx8hqnqHHKGqeqceoap6lx2hqnq3H6GmeoccYaZ6px5hpnqXHWGmercfYa56hxzhrnqnHuGuepcd4a56tx/hoXqHHBGheqceEaF6lx0RoXq3HxGpeocckal6px6RqXqZEal61xuRqXr3GFGlescaUaV65xlRpXrXG1GlevcY0a16xxrRrXrnGdGtetcb0a169xgxo3rHGjGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u8ZQaT63RGk+r8fQaz6jxzBrPqvHsGs+p8dwaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45Aah9Y4rMbhNY6ocWSNo2ocXeOYGsfWOE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUg0s3uEyDNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coOnNHhqgzZ4WoOnN3hGg2c2eFaDZzd4ToPnNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHNDi0wWENDm9wRIMjGxzV4OgGxzQ4tsFxWhy3xfFaHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWqTFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTWzypxZNbPKXFU1u0xdNaPL3FM1o8s8WzWjy7xXNaPLfFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKTFoS0Oa3F4iyNaHNniqBZHtzimxbEtjtPhuB2O1+H4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0eGSHS7V4dIdLtMhHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3OEpHZ7aoR2e1uHpHZ7R4ZkdntXh2R2e0+G5HQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MhHQ7tcFiHwzsc0eHIDkd1OLrDMR2O7XCcHsftcbwex+9xgh4n7HGiHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B5P6PHEHk/q8eQeT+nx1B7t8bQeT+/xjB7P7PGsHs/u8Zwez+1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvj/wTAAwBtBQDA0Gzbtpdt27ZtL9t810a2bdu27fpG574B3j/ABwb44AAfGuDDA3xkgI8O8LEBPj7AJwb45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8O8L8BDhng0AEOG+DwAY4Y4MgBjhrg6AGOGeDYAY4T4LgBjhfg+AFOEOCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhHgkgEuFeDSAS4TIAEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJAZ4Y4EkBnhzgKQGeGqABnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBDgIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8D/C/AIQEODXBYgMMDHBHgyABHBTg6wDEBjg1wnBDHDXG8EMcPcYIQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEJcMcakQlw5xmRAJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBBPCvHkEE8J8dQQDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDXEQYhBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh/idSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iAyE+GOJDIT4c4iMhPhriYyE+HuITIT4Z4lMhPh3iMyE+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyH+G+J/IQ4JcWiIw0IcHuKIEEeGOCrE0SGOCXFsiONEOG6E40U4foQTRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0S4ZIRLRbh0hMtESITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEG0e4SYSbRrhZhJtHuEWEW0a4VYRbR7hNhNtGuF2E20e4Q4Q7RrhThDtHuEuEu0a4W4S7R7hHhHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR3hChCdGeFKEJ0d4SoSnRmiEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2EgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CK+L8PoIb4jwxghvivDmCG+J8NYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+J8N8I/4twSIRDIxwW4fAIR0Q4MsJREY6OcEyEYyMcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLMbFY1wixiVjXCrGpWNcJkZiXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD7GE2I8McaTYjw5xlNiPDVGYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrYxzEGMQYxhjFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Md4XYzXx3hDjDfGeFOMN8d4S4y3xnhbjLfHeEeMd8Z4V4x3x3hPjPfGeF+M98f4QIwPxvhQjA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xvhfjENiHBrjsBiHxzgixpExjopxdIxjYhwb4zgJjpvgeAmOn+AECU6Y4EQJTpzgJAlOmuBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJLp7gEgkumeBSCS6d4DIJkuCyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZ6Q4IkJnpTgyQmekuCpCZrgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgIMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wesSvD7BGxK8McGbErw5wVsSvDXB2xK8PcE7ErwzwbsSvDvBexK8N8H7Erw/wQcSfDDBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfB/xIckuDQBIclODzBEQmOTHBUgqMTHJPg2ATHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSZEUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O8ZQUT03RFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFAcpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ilel+L1Kd6Q4o0p3pTizSnekuKtKd6W4u0p3pHinSneleLdKd6T4r0p3pfi/Sk+kOKDKT6U4sMpPpLioyk+luLjKT6R4pMpPpXi0yk+k+KzKT6X4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4pAUh6Y4LMXhKY5IcWSKo1IcneKYFMemOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGi2e4RIZLZrhUhktnuEyGZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGx2R4bIbHZXh8hidkeGKGJ2V4coanZHhqhmZ4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Y4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M787wngzvzfC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/83wvwyHZDg0w2EZDs9wRIYjMxyV4egMx2Q4NsNxchw3x/FyHD/HCXKcMMeJcpw4x0lynDTHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFclw8xyVyXDLHpXJcOsdlciTHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczwpx5NzPCXHU3M0x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Xh3jvfkeG+O9+V4f44P5Phgjg/l+HCOj+T4aI6P5fh4jk/k+GSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lOCTHoTkOy3F4jiNyHJnjqBxH5zgmx7E5jlPguAWOV+D4BU5Q4IQFTlTgxAVOUuCkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBS5S4KIFLlbg4gUuUeCSBS5V4NIFLlMgBS5b4HIFLl/gCgWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnljgSQWeXOApBZ5aoAWeVuDpBZ5R4JkFnlXg2QWeU+C5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQUOCgwKDAuMCowLTApMC8wKzAssCiwLrAqsC2wKbAvsCuwLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhBQ4tcFiBwwscUeDIAkcVOLrAMQWOLXCcEsctcbwSxy9xghInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSlyxxqRKXLnGZEilx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEk8q8eQSTynx1BIt8bQSTy/xjBLPLPGsEs8u8ZwSzy3xvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhKvLvGaEq8tcVBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDilxaInDShxe4ogSR5Y4qsTRJY4pcWyJ41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVLhkhUtVuHSFy1RIhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1Z4UoUnV3hKhadWaIWnVXh6hWdUeGaFZ1V4doXnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVeHWF11R4bYWDCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIhUMrHFbh8ApHVDiywlEVjq5wTIVjKxynxnFrHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqsala1ymRmpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLnGU2o8tUZrPK3G02s8o8YzazyrxrNrPKfGc2s8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQ2ocWuOwGofXOKLGkTWOqnF0jWNqHFvjOA2O2+B4DY7f4AQNTtjgRA1O3OAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FINLt3gMg3S4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDZ7S4KkN2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+CgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7B6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4NAGhzU4vMERDY5scFSDoxsc0+DYBsdpcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXanHpFpdpkRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27xlBZPbdEWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9p8doWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikBaHtjisxeEtjmhxZIujWhzd4pgWx7Y4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHS3e4TId0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh6d0eGqHdnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdjjoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7vCeDu/t8L4O7+/wgQ4f7PChDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dod0OLTDYR0O73BEhyM7HNXh6A7HdDi2w3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsselely6x2V6pMdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173K7H7Xvcoccde9ypx5173KXHXXvcrcfde9yjxz173KvHvXvcp8d9e9yvx/17PKDHA3s8qMeDezykx0N7PKzHw3s8oscjezyqx6N7PKbHY3s8rsfjezyhxxN7PKnHk3s8pcdTe7TH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY99j9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4//EwAPALQVAABDs23bXrZt27a9bNvGuzaybdu29Y3OfQO8f4APDPDBAT40wIcH+MgAHx3gYwN8fIBPDPDJAT41wKcH+MwAnx3gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3hfgPcH+ECADwb4UIAPB/hIgI8G+FiAjwf4RIBPBvhUgE8H+EyAzwb4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+IgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7E+0K8P8QHQnwwxIdCfDjER0J8NMTHQnw8xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4IBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xjiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8l+HSCzyT4bILPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9KQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M781wkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4X0Z3p/hAxk+mOFDGT6c4SMZPprhYxk+nuETGT6Z4VMZPp3hMxk+m+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewscFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgXeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsT7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3goHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYV3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4ZMVPlXh0xU+U+GzFT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/G+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8FBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0tDloMWgxbjFqMW0xaTFvMWsxbLFosW6xarFtsWmxb7FrsW7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7XDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hfR3e3+EDHT7Y4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+Pgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hv8nAB4AaCsAAIZm27a9bNu2bXvZtm27d21k27b9jU4wwHCA0QDjASYDTAeYDTAfYDHAcoDVAOsBNgNsB9gNsB/gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnAxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Af4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhviIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYLPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisykOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/NcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/l+HSOz+T4bI6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswMcLfKLAJwt8qsCnC3ymwGcLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+KgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7E50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWeF+N99f4QI0P1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1jioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Ft8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+1w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/P9Phsj4Me/w8AAP//wLDz/g==")

8.364698928s ago: executing program 2 (id=208):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
umount2(0x0, 0x8)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0004}]})
syslog(0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

7.746394103s ago: executing program 0 (id=209):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
umount2(&(0x7f0000000100)='./bus\x00', 0x8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

7.55080967s ago: executing program 3 (id=210):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002580)={0x0, 0x81, 0xc}, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3104000000000000000016000000"], 0x14}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000000c0)={[{@block_validity}], [{@dont_appraise}]}, 0xff, 0x486, &(0x7f0000000880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002140)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000340)={0x24, r5, 0xa29, 0x70bd29, 0x5000000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

7.472814052s ago: executing program 1 (id=211):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20001f, &(0x7f00000009c0)={[{@norecovery}, {@noauto_da_alloc}, {@delalloc}], [{@audit}, {@dont_hash}, {@audit}]}, 0x3, 0x532, &(0x7f0000000080)="$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")
r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x2)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60002, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfff7f038}, {0x6}]}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x80084}, 0x4040)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000a00)=0x1)

7.334441637s ago: executing program 4 (id=212):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xff76}, {&(0x7f0000000840)='G', 0x42}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0)
r2 = fsopen(&(0x7f0000000040)='ocfs2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

7.248641455s ago: executing program 0 (id=213):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000001880)=ANY=[], 0x1, 0x68f, &(0x7f0000001140)="$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")
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x3f)
io_uring_setup(0x74e, &(0x7f0000000300)={0x0, 0x400004, 0x2467, 0x0, 0x0, 0x0, r2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES16, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESHEX=r1], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
pipe(&(0x7f0000000280))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6)
lstat(0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a81409000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0)
sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a0100020000e81e1496df210f1668"], 0x14}}, 0x0)

7.22004834s ago: executing program 2 (id=214):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000110019708d961153573e00000783540e", @ANYRES32=r5, @ANYBLOB="000900001020000018001a8009000100766c616e000000000800048004000480"], 0x38}}, 0x4050)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5d, 0x0, 0xffffffffffffffff, 0x731, '\x00', 0x0, r3, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r8)
r9 = getpid()
r10 = syz_pidfd_open(r9, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}})
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x8800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xd, 0x1, 0x0, r3}, @generic={0x4, 0xa, 0x4, 0xc}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x8f, &(0x7f0000000240)=""/143, 0x0, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3, r3, r3, r7, r8, r3], &(0x7f0000000480)=[{0x5, 0x5, 0x8, 0x6}, {0x5, 0x4, 0x6}], 0x10, 0x6, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9})

6.319892324s ago: executing program 4 (id=215):
mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000280)="c65f8cd1", &(0x7f00000002c0)=""/169}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e23, 0x1, @remote, 0xfffff801}}}, 0x32)
io_setup(0x1, &(0x7f0000000080))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3801003eaf8478014ce95a39cdaf2c47f93a00100033060000000000000000fc000000000000000000000000000000ffffffff0000000000000000000000000000400000008001000020000000e5ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="bee900000080", 0x0, 0x7, 0x0, 0x0, 0x0})

4.86306161s ago: executing program 0 (id=216):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_open_dev$admmidi(0x0, 0x20, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x204800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0)
lseek(r5, 0x164, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1, 0x8, 0x201, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1fc572a6b07cf9bf}, 0x20000010)
remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x1c0000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x10)

4.826423573s ago: executing program 2 (id=217):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) (fail_nth: 4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

4.131887213s ago: executing program 1 (id=218):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
umount2(&(0x7f0000000100)='./bus\x00', 0x8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3.511911604s ago: executing program 2 (id=219):
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000040)={{@local, 0x645}, 0x1, 0x1, 0x3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000380)='i\xac;\xd1\x9d\x0e0\x9fi\x00\x00\xea\xff\x00\x00\x00w\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8a\x8e\x038\xefJ\xc0=\x8a\xb5\x85\x8d/\x92ma\x0f\xc9\xa1\xeb=Y\xee\xe5\xb5v\x9cX\xe0\xe6\x83\xab\x88\xeb)\xeb\xc0\xd8\xd6qE\x98\xdcF\xf8^\xbb\xb4\x02\xc6\x00\x00\x00\x00\x00\x004\xe2b\xbb\xa6\xb0/\x17\xfb\xb8V\x00}B\x02\xc3q\xe7C^Z\x11\xfdc\xa1\xd1\'\xca%\xb9t\x91\x1dr\x06\xecK\x17X\x06N=\xcf\x9b\x8f\x97\xb7\xb8Y\xd3\xf63\xd7\x1f\xd6L\x95cO\x9b\xf2F\x1d\xe5}\x1a3\xf5\x03eI\xf3\f\xed\x8e\xc7\xd4\xeb$\b\xab\x17\xd4')
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
socket$inet(0x2, 0x7, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x5ba0, &(0x7f0000000300)={0x0, 0xce5d, 0x2000, 0x2, 0x89, 0x0, r2}, &(0x7f0000000240), 0x0)

3.032206302s ago: executing program 3 (id=220):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.877779162s ago: executing program 4 (id=221):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff8)
r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "8ca32b1e45aff9d4a194b188ba2c5d97d5da6c19d2a52e226dd662df8a0f84dcf6cdda95db47525f1c99f18bf05724281e09c23f086027bb74a4f6e57f46678f", 0x3b}, 0x48, 0xfffffffffffffff8)
r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "2346f19ca33b451222c062cd4c815411c8c9133cea0cca44cbc1c8254eb62c1dd8a84c9174ab50a08b89b82fa63db13e3f1267ca20e948f0b53dced5b8bdce56", 0x2d}, 0x48, 0xfffffffffffffffe)
keyctl$chown(0x4, r3, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f42)

2.644928837s ago: executing program 1 (id=222):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1170}}], 0x1, 0x4008004)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240))
write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458)

1.96881889s ago: executing program 3 (id=223):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x21d4840, 0x0, 0x1, 0x0, &(0x7f0000000100))
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB])
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x3bf, {}, {}, @note={0x4}}], 0x38)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x5b65, 0x1000000000000000, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='2', 0xff10, 0x8000c61)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7})
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f00000000c0)={0x8, r7})

1.878165324s ago: executing program 4 (id=224):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
umount2(0x0, 0x8)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0004}]})
syslog(0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1.185664825s ago: executing program 1 (id=225):
syz_open_dev$video4linux(0x0, 0x92e2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="6772706a71756f74613d2c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030313236322c6661756c745f747970653d30303030303030303030303030303030303030322c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6d6f64653d6c66732c00000000000000cc6c8ce7c68458259f3f9276c65041208ebd74d6391248adce3f77cddff2a374ee7b1470db785c3234a8e2f4d13511a687db9c47b5599f909fbbf1bdc74f6d65"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffff25}], 0x1, 0x7000, 0x29000, 0x7)
truncate(&(0x7f0000000080)='./bus\x00', 0x0)

1.128672379s ago: executing program 2 (id=226):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
tkill(r1, 0x24)
ioctl$TCFLSH(r4, 0x400455c8, 0x2)

1.086194883s ago: executing program 0 (id=227):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$can_raw(r3, &(0x7f00000003c0)={&(0x7f00000004c0), 0x10, 0x0, 0x2, 0x0, 0x0, 0x200480e4}, 0x24000890)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0xdf14, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffffe9)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r7 = dup(r6)
pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x4000)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080), 0x2184820, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1])
sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0)
shutdown(r0, 0x0)
recvfrom(r0, &(0x7f0000000000)=""/77, 0x4d, 0x42, 0x0, 0x0)

252.891976ms ago: executing program 4 (id=228):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TCFLSH(r4, 0x400455c8, 0x2) (fail_nth: 4)

0s ago: executing program 2 (id=229):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
clock_gettime(0x1, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x6}}], 0x30}, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.378397][ T5829] bridge_slave_0: entered allmulticast mode
[  101.386054][ T5829] bridge_slave_0: entered promiscuous mode
[  101.397606][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.404659][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.430802][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.472226][ T5830] team0: Port device team_slave_1 added
[  101.503913][ T5835] team0: Port device team_slave_0 added
[  101.510890][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.518419][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.526454][ T5829] bridge_slave_1: entered allmulticast mode
[  101.533944][ T5829] bridge_slave_1: entered promiscuous mode
[  101.619354][ T5835] team0: Port device team_slave_1 added
[  101.633488][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.647925][ T5841] team0: Port device team_slave_0 added
[  101.655100][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.662086][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.688352][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.701463][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.708507][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.734520][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.782743][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.798032][ T5841] team0: Port device team_slave_1 added
[  101.919136][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.926818][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.953539][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.966924][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.973907][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.000583][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.018899][ T5827] hsr_slave_0: entered promiscuous mode
[  102.026143][ T5827] hsr_slave_1: entered promiscuous mode
[  102.053899][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.061138][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.087250][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.113942][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.121108][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.148275][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.175761][ T5829] team0: Port device team_slave_0 added
[  102.258369][ T5829] team0: Port device team_slave_1 added
[  102.272967][ T5830] hsr_slave_0: entered promiscuous mode
[  102.279667][ T5830] hsr_slave_1: entered promiscuous mode
[  102.286622][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.294494][ T5830] Cannot create hsr debugfs directory
[  102.451983][ T5835] hsr_slave_0: entered promiscuous mode
[  102.458663][ T5835] hsr_slave_1: entered promiscuous mode
[  102.465156][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.472735][ T5835] Cannot create hsr debugfs directory
[  102.507943][ T5841] hsr_slave_0: entered promiscuous mode
[  102.514540][ T5841] hsr_slave_1: entered promiscuous mode
[  102.521179][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.528814][ T5841] Cannot create hsr debugfs directory
[  102.543059][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.550748][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.577705][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.634425][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.642217][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.668928][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.835828][ T5829] hsr_slave_0: entered promiscuous mode
[  102.843984][ T5829] hsr_slave_1: entered promiscuous mode
[  102.851126][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.859145][ T5829] Cannot create hsr debugfs directory
[  103.135342][ T5140] Bluetooth: hci0: command tx timeout
[  103.135364][ T5831] Bluetooth: hci3: command tx timeout
[  103.135406][ T5831] Bluetooth: hci2: command tx timeout
[  103.216955][ T5831] Bluetooth: hci1: command tx timeout
[  103.216964][ T5140] Bluetooth: hci4: command tx timeout
[  103.451979][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.465808][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.493415][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.508860][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.610704][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  103.632130][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  103.661552][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  103.691077][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  103.769616][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.799317][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.838051][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.871855][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.977376][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.990424][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.019521][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  104.059733][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  104.163177][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.187954][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.202588][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.214566][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.257601][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.336236][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.370519][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[  104.459883][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.467271][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.489923][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[  104.546600][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.553756][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.565657][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.572844][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.616342][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.623497][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.732353][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.769298][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.834115][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[  104.882284][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.889528][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.937848][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.945211][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.970618][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[  105.048403][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.074555][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.081811][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.100542][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.107814][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.215429][ T5831] Bluetooth: hci2: command tx timeout
[  105.216712][ T5140] Bluetooth: hci0: command tx timeout
[  105.220893][ T5831] Bluetooth: hci3: command tx timeout
[  105.248271][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[  105.292264][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.299500][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.314792][ T5831] Bluetooth: hci4: command tx timeout
[  105.314975][ T5140] Bluetooth: hci1: command tx timeout
[  105.392599][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.399785][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.574331][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.608950][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.681508][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.918917][ T5830] veth0_vlan: entered promiscuous mode
[  105.954664][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.070489][ T5830] veth1_vlan: entered promiscuous mode
[  106.131489][ T5827] veth0_vlan: entered promiscuous mode
[  106.184095][ T5827] veth1_vlan: entered promiscuous mode
[  106.197463][ T5835] veth0_vlan: entered promiscuous mode
[  106.238274][ T5830] veth0_macvtap: entered promiscuous mode
[  106.262083][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.281751][ T5835] veth1_vlan: entered promiscuous mode
[  106.298388][ T5830] veth1_macvtap: entered promiscuous mode
[  106.399779][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.453052][ T5835] veth0_macvtap: entered promiscuous mode
[  106.470648][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.493442][ T5827] veth0_macvtap: entered promiscuous mode
[  106.517528][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.530841][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.540804][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.551605][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.580028][ T5835] veth1_macvtap: entered promiscuous mode
[  106.601165][ T5827] veth1_macvtap: entered promiscuous mode
[  106.702637][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.713534][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.728533][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.742499][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.753218][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.767467][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.801543][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.818087][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.830325][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.841614][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.853654][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.880458][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.890305][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.903133][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.913751][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.927611][ T5829] veth0_vlan: entered promiscuous mode
[  106.937600][ T5841] veth0_vlan: entered promiscuous mode
[  106.958615][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.979780][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.991847][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.003328][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.015119][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.028216][ T5829] veth1_vlan: entered promiscuous mode
[  107.068899][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.079479][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.088898][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.098080][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.142500][ T5841] veth1_vlan: entered promiscuous mode
[  107.197877][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.222678][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.297255][ T5140] Bluetooth: hci0: command tx timeout
[  107.297272][ T5831] Bluetooth: hci2: command tx timeout
[  107.297314][ T5831] Bluetooth: hci3: command tx timeout
[  107.353811][ T5829] veth0_macvtap: entered promiscuous mode
[  107.376626][ T5831] Bluetooth: hci1: command tx timeout
[  107.385470][ T5831] Bluetooth: hci4: command tx timeout
[  107.417788][ T5829] veth1_macvtap: entered promiscuous mode
[  107.432530][ T5841] veth0_macvtap: entered promiscuous mode
[  107.455937][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.467334][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.475122][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.482652][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.504374][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.521166][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.531078][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.542091][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.555117][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.565666][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.578987][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.591093][ T5841] veth1_macvtap: entered promiscuous mode
[  107.639800][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.651191][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.662865][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.673441][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.683488][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.693983][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.712672][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.731302][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.742717][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.759425][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.768757][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.793322][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.805275][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.825885][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  107.883513][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.901366][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.968164][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.990153][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.001048][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.013961][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.043227][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.064501][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.082127][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.083917][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  108.092956][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.127004][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.232776][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.271052][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.287617][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.301264][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.317428][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.334737][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.350903][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.361500][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.377151][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.429840][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.440791][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.450592][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.466622][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.526742][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.536237][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.556141][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.570647][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.332763][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.444903][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.627198][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.645452][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.764998][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.772888][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.741699][ T5946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'.
[  111.570500][ T5954] loop4: detected capacity change from 0 to 64
[  111.815738][ T5932] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  111.995297][ T5932] usb 4-1: Using ep0 maxpacket: 8
[  112.054030][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.082342][ T5932] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6
[  112.117433][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.132932][ T5932] usb 4-1: Product: syz
[  112.161465][ T5932] usb 4-1: Manufacturer: syz
[  112.433178][ T5932] usb 4-1: SerialNumber: syz
[  112.473017][ T5932] usb 4-1: config 0 descriptor??
[  113.204652][ T5932] gspca_main: t613-2.14.0 probing 17a1:0128
[  113.248524][ T5975] FAULT_INJECTION: forcing a failure.
[  113.248524][ T5975] name failslab, interval 1, probability 0, space 0, times 1
[  113.305293][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.4.15 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  113.305325][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  113.305341][ T5975] Call Trace:
[  113.305366][ T5975]  <TASK>
[  113.305375][ T5975]  dump_stack_lvl+0x241/0x360
[  113.305421][ T5975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.305454][ T5975]  ? __pfx__printk+0x10/0x10
[  113.305480][ T5975]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  113.305514][ T5975]  ? __pfx___might_resched+0x10/0x10
[  113.305552][ T5975]  should_fail_ex+0x40a/0x550
[  113.305583][ T5975]  should_failslab+0xac/0x100
[  113.305618][ T5975]  __kmalloc_node_noprof+0xe1/0x4d0
[  113.305649][ T5975]  ? alloc_slab_obj_exts+0x3a/0xa0
[  113.305688][ T5975]  alloc_slab_obj_exts+0x3a/0xa0
[  113.305719][ T5975]  __memcg_slab_post_alloc_hook+0x319/0x7e0
[  113.305758][ T5975]  ? kasan_unpoison+0x46/0x70
[  113.305790][ T5975]  __kvmalloc_node_noprof+0x401/0x580
[  113.305812][ T5975]  ? traverse+0xd6/0x550
[  113.305846][ T5975]  traverse+0xd6/0x550
[  113.305882][ T5975]  ? aa_file_perm+0x14c/0x1300
[  113.305923][ T5975]  seq_read_iter+0xc9f/0xda0
[  113.305952][ T5975]  ? __pfx_aa_file_perm+0x10/0x10
[  113.305991][ T5975]  ? __pfx_lock_acquire+0x10/0x10
[  113.306041][ T5975]  seq_read+0x3a9/0x4f0
[  113.306078][ T5975]  ? __pfx_seq_read+0x10/0x10
[  113.306137][ T5975]  ? rw_verify_area+0x243/0x630
[  113.306163][ T5975]  ? __pfx_seq_read+0x10/0x10
[  113.306192][ T5975]  vfs_read+0x1f8/0xb40
[  113.306233][ T5975]  ? __pfx_vfs_read+0x10/0x10
[  113.306255][ T5975]  ? do_sys_openat2+0x179/0x1c0
[  113.306282][ T5975]  ? __fget_files+0x2a/0x410
[  113.306306][ T5975]  ? __fget_files+0x395/0x410
[  113.306325][ T5975]  ? __fget_files+0x2a/0x410
[  113.306362][ T5975]  __x64_sys_pread64+0x1ac/0x240
[  113.306395][ T5975]  ? __pfx___x64_sys_pread64+0x10/0x10
[  113.306436][ T5975]  ? do_syscall_64+0x100/0x230
[  113.306471][ T5975]  ? do_syscall_64+0xb6/0x230
[  113.306505][ T5975]  do_syscall_64+0xf3/0x230
[  113.306535][ T5975]  ? clear_bhb_loop+0x45/0xa0
[  113.306571][ T5975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.306599][ T5975] RIP: 0033:0x7f821a38d169
[  113.306625][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.306641][ T5975] RSP: 002b:00007f821b21c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  113.306663][ T5975] RAX: ffffffffffffffda RBX: 00007f821a5a6080 RCX: 00007f821a38d169
[  113.306678][ T5975] RDX: 0000000000000056 RSI: 0000400000000080 RDI: 0000000000000003
[  113.306690][ T5975] RBP: 00007f821b21c090 R08: 0000000000000000 R09: 0000000000000000
[  113.306703][ T5975] R10: 000000000000bbf9 R11: 0000000000000246 R12: 0000000000000001
[  113.306714][ T5975] R13: 0000000000000001 R14: 00007f821a5a6080 R15: 00007ffd04a09c58
[  113.306756][ T5975]  </TASK>
[  113.717418][ T5932] gspca_t613: unknown sensor 0000
[  113.722630][ T5932] t613 4-1:0.0: probe with driver t613 failed with error -22
[  113.762978][ T5980] loop0: detected capacity change from 0 to 256
[  114.277305][   T29] audit: type=1326 audit(1740323372.918:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49edb84127 code=0x7ffc0000
[  114.414084][   T29] audit: type=1326 audit(1740323372.958:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49edb29359 code=0x7ffc0000
[  114.472864][   T29] audit: type=1326 audit(1740323372.958:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49edb84127 code=0x7ffc0000
[  114.576517][   T29] audit: type=1326 audit(1740323372.958:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49edb29359 code=0x7ffc0000
[  114.598396][    C0] vkms_vblank_simulate: vblank timer overrun
[  114.684556][ T6002] loop0: detected capacity change from 0 to 512
[  114.698613][    T9] usb 4-1: USB disconnect, device number 2
[  114.732215][   T29] audit: type=1326 audit(1740323372.958:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49edb84127 code=0x7ffc0000
[  114.865110][   T29] audit: type=1326 audit(1740323372.958:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49edb29359 code=0x7ffc0000
[  114.906458][ T6002] syz.0.25: attempt to access beyond end of device
[  114.906458][ T6002] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  114.982930][ T6002] EXT4-fs (loop0): unable to read superblock
[  115.201214][   T29] audit: type=1326 audit(1740323372.958:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49edb84127 code=0x7ffc0000
[  115.248978][ T6011] loop1: detected capacity change from 0 to 256
[  115.267541][   T29] audit: type=1326 audit(1740323372.958:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49edb29359 code=0x7ffc0000
[  115.301026][ T6011] vfat: Unknown parameter 'no_umtail'
[  115.356247][ T5997] loop4: detected capacity change from 0 to 32768
[  115.367047][ T6013] FAULT_INJECTION: forcing a failure.
[  115.367047][ T6013] name failslab, interval 1, probability 0, space 0, times 0
[  115.383083][   T29] audit: type=1326 audit(1740323372.958:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49edb84127 code=0x7ffc0000
[  115.414636][ T5997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.23 (5997)
[  115.415607][ T6013] CPU: 0 UID: 0 PID: 6013 Comm: syz.3.27 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  115.415635][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  115.415647][ T6013] Call Trace:
[  115.415658][ T6013]  <TASK>
[  115.415666][ T6013]  dump_stack_lvl+0x241/0x360
[  115.415703][ T6013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.415729][ T6013]  ? __pfx__printk+0x10/0x10
[  115.415757][ T6013]  ? fs_reclaim_acquire+0x93/0x130
[  115.415784][ T6013]  ? __pfx___might_resched+0x10/0x10
[  115.415817][ T6013]  ? dynamic_dname+0x144/0x1b0
[  115.415851][ T6013]  should_fail_ex+0x40a/0x550
[  115.415884][ T6013]  should_failslab+0xac/0x100
[  115.415921][ T6013]  __kmalloc_noprof+0xdd/0x4c0
[  115.415954][ T6013]  ? tomoyo_encode+0x26f/0x540
[  115.415996][ T6013]  tomoyo_encode+0x26f/0x540
[  115.416032][ T6013]  ? __pfx_anon_inodefs_dname+0x10/0x10
[  115.416070][ T6013]  tomoyo_realpath_from_path+0x59e/0x5e0
[  115.416126][ T6013]  tomoyo_path_number_perm+0x239/0x770
[  115.416154][ T6013]  ? __lock_acquire+0x1397/0x2100
[  115.416195][ T6013]  ? tomoyo_path_number_perm+0x209/0x770
[  115.416226][ T6013]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  115.416336][ T6013]  ? __fget_files+0x2a/0x410
[  115.416364][ T6013]  ? __fget_files+0x2a/0x410
[  115.416397][ T6013]  security_file_ioctl+0xc6/0x2a0
[  115.416428][ T6013]  __se_sys_ioctl+0x46/0x160
[  115.416469][ T6013]  do_syscall_64+0xf3/0x230
[  115.416503][ T6013]  ? clear_bhb_loop+0x45/0xa0
[  115.416540][ T6013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.416568][ T6013] RIP: 0033:0x7fd8ea58d169
[  115.416588][ T6013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.416605][ T6013] RSP: 002b:00007fd8eb480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.416628][ T6013] RAX: ffffffffffffffda RBX: 00007fd8ea7a5fa0 RCX: 00007fd8ea58d169
[  115.416644][ T6013] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  115.416656][ T6013] RBP: 00007fd8eb480090 R08: 0000000000000000 R09: 0000000000000000
[  115.416669][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.416681][ T6013] R13: 0000000000000000 R14: 00007fd8ea7a5fa0 R15: 00007ffce3cba478
[  115.416724][ T6013]  </TASK>
[  115.416908][ T6013] ERROR: Out of memory at tomoyo_realpath_from_path.
[  115.449593][ T5997] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.449756][ T5997] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  115.449819][ T5997] BTRFS info (device loop4): using free-space-tree
[  115.697249][   T29] audit: type=1326 audit(1740323372.958:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49edb29359 code=0x7ffc0000
[  115.813633][ T6011] loop1: detected capacity change from 0 to 4096
[  115.857798][ T6011] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  116.899483][ T6039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.322489][ T5841] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.430914][ T6044] loop0: detected capacity change from 0 to 128
[  117.547355][ T6044] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.622276][ T6044] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  118.078909][ T6033] FAULT_INJECTION: forcing a failure.
[  118.078909][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  119.068827][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.3.29 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  119.068855][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  119.068865][ T6033] Call Trace:
[  119.068872][ T6033]  <TASK>
[  119.068880][ T6033]  dump_stack_lvl+0x241/0x360
[  119.068910][ T6033]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.068931][ T6033]  ? __pfx__printk+0x10/0x10
[  119.068960][ T6033]  ? snprintf+0xda/0x120
[  119.068984][ T6033]  should_fail_ex+0x40a/0x550
[  119.069012][ T6033]  _copy_to_user+0x31/0xb0
[  119.069044][ T6033]  simple_read_from_buffer+0xdc/0x170
[  119.069078][ T6033]  proc_fail_nth_read+0x1e9/0x250
[  119.069102][ T6033]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  119.069126][ T6033]  ? rw_verify_area+0x243/0x630
[  119.069149][ T6033]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  119.069186][ T6033]  vfs_read+0x1f8/0xb40
[  119.069213][ T6033]  ? fdget_pos+0x254/0x320
[  119.069237][ T6033]  ? __pfx___mutex_lock+0x10/0x10
[  119.069268][ T6033]  ? __pfx_vfs_read+0x10/0x10
[  119.069300][ T6033]  ? __fget_files+0x2a/0x410
[  119.069325][ T6033]  ? __fget_files+0x395/0x410
[  119.069344][ T6033]  ? __fget_files+0x2a/0x410
[  119.069381][ T6033]  ksys_read+0x18f/0x2b0
[  119.069412][ T6033]  ? __pfx_ksys_read+0x10/0x10
[  119.069437][ T6033]  ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0
[  119.069472][ T6033]  ? syscall_user_dispatch+0x4e/0x90
[  119.069503][ T6033]  do_syscall_64+0xf3/0x230
[  119.069535][ T6033]  ? clear_bhb_loop+0x45/0xa0
[  119.069570][ T6033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.069598][ T6033] RIP: 0033:0x7fd8ea58bb7c
[  119.069617][ T6033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  119.069633][ T6033] RSP: 002b:00007fd8eb480030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  119.069655][ T6033] RAX: ffffffffffffffda RBX: 00007fd8ea7a5fa0 RCX: 00007fd8ea58bb7c
[  119.069670][ T6033] RDX: 000000000000000f RSI: 00007fd8eb4800a0 RDI: 0000000000000003
[  119.069682][ T6033] RBP: 00007fd8eb480090 R08: 0000000000000000 R09: 0000000000000000
[  119.069694][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.069705][ T6033] R13: 0000000000000000 R14: 00007fd8ea7a5fa0 R15: 00007ffce3cba478
[  119.069746][ T6033]  </TASK>
[  119.525661][ T6058] loop1: detected capacity change from 0 to 40427
[  119.768260][ T6058] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff
[  119.779499][ T6058] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2
[  119.788014][ T6058] F2FS-fs (loop1): Image doesn't support compression
[  119.795149][ T6058] F2FS-fs (loop1): Image doesn't support compression
[  119.829060][ T6058] F2FS-fs (loop1): invalid crc value
[  120.100463][ T6058] F2FS-fs (loop1): Found nat_bits in checkpoint
[  120.224939][ T6058] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.288775][   T29] kauditd_printk_skb: 47 callbacks suppressed
[  120.288793][   T29] audit: type=1800 audit(1740323378.928:59): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.35" name="bus" dev="loop1" ino=10 res=0 errno=0
[  120.328593][ T5830] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.329914][ T6055] syz.1.35: attempt to access beyond end of device
[  120.329914][ T6055] loop1: rw=34817, sector=77824, nr_sectors = 4096 limit=40427
[  120.662971][ T5827] syz-executor: attempt to access beyond end of device
[  120.662971][ T5827] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.686704][ T6065] overlayfs: missing 'lowerdir'
[  120.706504][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  120.706540][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  120.706553][ T5827] Call Trace:
[  120.706561][ T5827]  <TASK>
[  120.706571][ T5827]  dump_stack_lvl+0x241/0x360
[  120.706612][ T5827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.706638][ T5827]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  120.706666][ T5827]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.706699][ T5827]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  120.706742][ T5827]  f2fs_handle_critical_error+0x38f/0x5a0
[  120.706790][ T5827]  f2fs_write_end_io+0x674/0x9a0
[  120.706834][ T5827]  __submit_merged_bio+0x2a9/0x710
[  120.706879][ T5827]  f2fs_submit_merged_write_cond+0x28a/0x360
[  120.706931][ T5827]  f2fs_write_data_pages+0x2c5e/0x3670
[  120.707021][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.707178][ T5827]  ? __pfx_lock_release+0x10/0x10
[  120.707208][ T5827]  ? do_raw_spin_lock+0x14f/0x370
[  120.707251][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  120.707286][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.707313][ T5827]  do_writepages+0x35f/0x880
[  120.707359][ T5827]  ? __pfx_do_writepages+0x10/0x10
[  120.707399][ T5827]  ? filemap_fdatawrite+0x1e8/0x2a0
[  120.707425][ T5827]  ? do_raw_spin_lock+0x14f/0x370
[  120.707453][ T5827]  ? __pfx_lock_release+0x10/0x10
[  120.707502][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  120.707551][ T5827]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  120.707586][ T5827]  filemap_fdatawrite+0x1f3/0x2a0
[  120.707622][ T5827]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  120.707729][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  120.707774][ T5827]  f2fs_sync_dirty_inodes+0x348/0x860
[  120.707828][ T5827]  f2fs_write_checkpoint+0x8af/0x1de0
[  120.707897][ T5827]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  120.708007][ T5827]  ? kill_f2fs_super+0x28e/0x6d0
[  120.708049][ T5827]  kill_f2fs_super+0x2b6/0x6d0
[  120.708088][ T5827]  ? __pfx_kill_f2fs_super+0x10/0x10
[  120.708133][ T5827]  ? shrinker_free+0x2ca/0x3d0
[  120.708162][ T5827]  deactivate_locked_super+0xc4/0x130
[  120.708193][ T5827]  cleanup_mnt+0x41f/0x4b0
[  120.708220][ T5827]  ? lockdep_hardirqs_on+0x99/0x150
[  120.708256][ T5827]  task_work_run+0x24f/0x310
[  120.708294][ T5827]  ? __pfx_task_work_run+0x10/0x10
[  120.708315][ T5827]  ? __x64_sys_umount+0x120/0x170
[  120.708353][ T5827]  ? syscall_exit_to_user_mode+0xa3/0x340
[  120.708391][ T5827]  syscall_exit_to_user_mode+0x13f/0x340
[  120.708429][ T5827]  do_syscall_64+0x100/0x230
[  120.708462][ T5827]  ? clear_bhb_loop+0x45/0xa0
[  120.708499][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.708528][ T5827] RIP: 0033:0x7fb04318e497
[  120.708548][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  120.708565][ T5827] RSP: 002b:00007ffcbb8a54a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.708588][ T5827] RAX: 0000000000000000 RBX: 00007fb04320e08c RCX: 00007fb04318e497
[  120.708602][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbb8a5560
[  120.708615][ T5827] RBP: 00007ffcbb8a5560 R08: 0000000000000000 R09: 0000000000000000
[  120.708628][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbb8a65f0
[  120.708642][ T5827] R13: 00007fb04320e08c R14: 000000000001d691 R15: 00007ffcbb8a6630
[  120.708687][ T5827]  </TASK>
[  120.711245][ T5827] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  120.755421][ T6067] vlan2: entered allmulticast mode
[  121.094741][ T6067] macvlan0: entered allmulticast mode
[  121.100217][ T6067] veth1_vlan: entered allmulticast mode
[  121.157851][ T6067] macvlan0: left allmulticast mode
[  121.163053][ T6067] veth1_vlan: left allmulticast mode
[  121.326206][ T6083] loop3: detected capacity change from 0 to 64
[  121.349774][ T6081] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET)
[  121.725752][ T6079] Zero length message leads to an empty skb
[  122.165082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.174153][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.364886][ T5932] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  122.435450][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.532530][ T6094] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.548462][ T5932] usb 1-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config
[  122.578793][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  122.611022][ T5932] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  122.680727][ T5932] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  122.707407][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.725256][ T5932] usb 1-1: Product: syz
[  122.735109][ T5932] usb 1-1: Manufacturer: syz
[  122.745011][ T5932] usb 1-1: SerialNumber: syz
[  122.786955][ T5932] cdc_ncm 1-1:1.0: skipping garbage
[  122.829186][ T5932] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  122.844650][ T5932] cdc_ncm 1-1:1.0: bind() failure
[  122.977475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  123.153210][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'.
[  123.170918][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'.
[  124.008179][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  124.185704][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  124.239900][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  124.250148][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  124.544576][ T6128] loop6: detected capacity change from 0 to 7
[  124.555975][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.564839][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.573443][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.583235][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.592711][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.601529][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.610264][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.618666][ T6128] ldm_validate_partition_table(): Disk read failed.
[  124.625752][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.634327][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.643068][ T6128] Buffer I/O error on dev loop6, logical block 0, async page read
[  124.652710][ T6128] Dev loop6: unable to read RDB block 0
[  124.660666][ T6128]  loop6: unable to read partition table
[  124.667718][ T6128] loop6: partition table beyond EOD, truncated
[  124.673993][ T6128] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  124.673993][ T6128] 
) failed (rc=-5)
[  125.055869][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  125.065576][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  125.107532][   T29] audit: type=1326 audit(1740323383.058:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  125.184464][   T29] audit: type=1326 audit(1740323383.058:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  125.269708][   T29] audit: type=1326 audit(1740323383.068:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  125.415050][   T29] audit: type=1326 audit(1740323383.068:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  125.486715][ T5932] usb 1-1: USB disconnect, device number 2
[  125.498772][   T29] audit: type=1326 audit(1740323383.068:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  125.509971][ T6133] FAULT_INJECTION: forcing a failure.
[  125.509971][ T6133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.559651][ T6132] FAULT_INJECTION: forcing a failure.
[  125.559651][ T6132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.582964][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.2.52 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  125.582991][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  125.583003][ T6132] Call Trace:
[  125.583011][ T6132]  <TASK>
[  125.583020][ T6132]  dump_stack_lvl+0x241/0x360
[  125.583054][ T6132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.583079][ T6132]  ? __pfx__printk+0x10/0x10
[  125.583106][ T6132]  ? __pfx_lock_release+0x10/0x10
[  125.583138][ T6132]  ? __lock_acquire+0x1397/0x2100
[  125.583183][ T6132]  should_fail_ex+0x40a/0x550
[  125.583214][ T6132]  _copy_from_user+0x2d/0xb0
[  125.583248][ T6132]  kstrtouint_from_user+0xd4/0x190
[  125.583281][ T6132]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  125.583315][ T6132]  ? __pfx_lock_acquire+0x10/0x10
[  125.583367][ T6132]  proc_fail_nth_write+0xaa/0x2d0
[  125.583390][ T6132]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  125.583419][ T6132]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  125.583452][ T6132]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  125.583478][ T6132]  vfs_write+0x29f/0xd10
[  125.583508][ T6132]  ? fdget_pos+0x254/0x320
[  125.583528][ T6132]  ? __mutex_unlock_slowpath+0x227/0x800
[  125.583565][ T6132]  ? __pfx_vfs_write+0x10/0x10
[  125.583605][ T6132]  ? __fget_files+0x2a/0x410
[  125.583630][ T6132]  ? __fget_files+0x395/0x410
[  125.583649][ T6132]  ? __fget_files+0x2a/0x410
[  125.583686][ T6132]  ksys_write+0x18f/0x2b0
[  125.583718][ T6132]  ? __pfx_ksys_write+0x10/0x10
[  125.583747][ T6132]  ? do_syscall_64+0x100/0x230
[  125.583783][ T6132]  ? do_syscall_64+0xb6/0x230
[  125.583819][ T6132]  do_syscall_64+0xf3/0x230
[  125.583849][ T6132]  ? clear_bhb_loop+0x45/0xa0
[  125.583884][ T6132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.583912][ T6132] RIP: 0033:0x7fdc06b8bc1f
[  125.583931][ T6132] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  125.583947][ T6132] RSP: 002b:00007fdc049d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  125.583968][ T6132] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc06b8bc1f
[  125.583982][ T6132] RDX: 0000000000000001 RSI: 00007fdc049d50a0 RDI: 0000000000000005
[  125.583994][ T6132] RBP: 00007fdc049d5090 R08: 0000000000000000 R09: 0000000000000000
[  125.584006][ T6132] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  125.584017][ T6132] R13: 0000000000000000 R14: 00007fdc06da6080 R15: 00007ffe82d644c8
[  125.584059][ T6132]  </TASK>
[  125.613628][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.4.53 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  125.613660][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  125.613674][ T6133] Call Trace:
[  125.613683][ T6133]  <TASK>
[  125.613693][ T6133]  dump_stack_lvl+0x241/0x360
[  125.613730][ T6133]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.613757][ T6133]  ? __pfx__printk+0x10/0x10
[  125.613801][ T6133]  should_fail_ex+0x40a/0x550
[  125.613836][ T6133]  _copy_to_user+0x31/0xb0
[  125.613877][ T6133]  __x64_sys_clock_adjtime+0x205/0x290
[  125.613926][ T6133]  ? __pfx___x64_sys_clock_adjtime+0x10/0x10
[  125.613957][ T6133]  ? __fget_files+0x2a/0x410
[  125.614014][ T6133]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  125.614051][ T6133]  ? do_syscall_64+0x100/0x230
[  125.614087][ T6133]  ? do_syscall_64+0xb6/0x230
[  125.614123][ T6133]  do_syscall_64+0xf3/0x230
[  125.614155][ T6133]  ? clear_bhb_loop+0x45/0xa0
[  125.614192][ T6133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.614221][ T6133] RIP: 0033:0x7f821a38d169
[  125.614242][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.614259][ T6133] RSP: 002b:00007f821b23d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[  125.614282][ T6133] RAX: ffffffffffffffda RBX: 00007f821a5a5fa0 RCX: 00007f821a38d169
[  125.614297][ T6133] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000000
[  125.614310][ T6133] RBP: 00007f821b23d090 R08: 0000000000000000 R09: 0000000000000000
[  125.614323][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.614336][ T6133] R13: 0000000000000000 R14: 00007f821a5a5fa0 R15: 00007ffd04a09c58
[  125.614383][ T6133]  </TASK>
[  126.042340][   T29] audit: type=1326 audit(1740323383.068:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  126.084834][   T29] audit: type=1326 audit(1740323383.068:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  126.124819][   T29] audit: type=1326 audit(1740323383.078:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  126.147494][   T29] audit: type=1326 audit(1740323383.078:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  126.178685][   T29] audit: type=1326 audit(1740323383.088:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  126.215058][   T29] audit: type=1326 audit(1740323383.088:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  126.290351][   T29] audit: type=1326 audit(1740323383.088:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fdc06b8d169 code=0x7ffc0000
[  126.452979][ T6141] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  126.517225][ T6140] loop4: detected capacity change from 0 to 4096
[  126.534183][ T6143] overlayfs: missing 'lowerdir'
[  126.536230][ T6140] ntfs3: Unknown parameter '��������`�'
[  126.972808][ T6147] loop3: detected capacity change from 0 to 4096
[  126.981419][ T6147] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  127.021451][ T6147] ntfs3(loop3): mft corrupted
[  127.026416][ T6147] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  127.037270][ T6147] ntfs3(loop3): Failed to load $Bitmap (-22).
[  127.588653][  T974] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  127.786124][  T974] usb 5-1: Using ep0 maxpacket: 8
[  127.800233][  T974] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  127.814413][  T974] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  127.889093][  T974] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  127.934752][  T974] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  127.978693][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.223763][ T6149] team_slave_0: entered promiscuous mode
[  128.229772][ T6149] team_slave_1: entered promiscuous mode
[  128.239042][ T6149] vlan2: entered promiscuous mode
[  128.244261][ T6149] team0: entered promiscuous mode
[  128.260335][ T6149] team0: left promiscuous mode
[  128.273192][ T6149] team_slave_0: left promiscuous mode
[  128.278744][ T6149] team_slave_1: left promiscuous mode
[  128.375316][   T23] usb 5-1: USB disconnect, device number 2
[  128.399084][ T6164] loop3: detected capacity change from 0 to 32768
[  128.416631][ T6164] =======================================================
[  128.416631][ T6164] WARNING: The mand mount option has been deprecated and
[  128.416631][ T6164]          and is ignored by this kernel. Remove the mand
[  128.416631][ T6164]          option from the mount to silence this warning.
[  128.416631][ T6164] =======================================================
[  128.542526][ T6164] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  128.716552][ T6178] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  129.386833][ T6164] syz.3.65 (6164) used greatest stack depth: 15672 bytes left
[  130.032160][ T6193] FAULT_INJECTION: forcing a failure.
[  130.032160][ T6193] name failslab, interval 1, probability 0, space 0, times 0
[  130.051611][ T5829] ocfs2: Unmounting device (7,3) on (node local)
[  130.071811][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.0.74 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  130.071839][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  130.071849][ T6193] Call Trace:
[  130.071857][ T6193]  <TASK>
[  130.071865][ T6193]  dump_stack_lvl+0x241/0x360
[  130.071895][ T6193]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.071915][ T6193]  ? __pfx__printk+0x10/0x10
[  130.071938][ T6193]  ? __kmalloc_noprof+0xb5/0x4c0
[  130.071967][ T6193]  ? __pfx___might_resched+0x10/0x10
[  130.071998][ T6193]  should_fail_ex+0x40a/0x550
[  130.072025][ T6193]  should_failslab+0xac/0x100
[  130.072052][ T6193]  __kmalloc_noprof+0xdd/0x4c0
[  130.072075][ T6193]  ? sock_kmalloc+0xd7/0x160
[  130.072091][ T6193]  ? do_raw_spin_unlock+0x13c/0x8b0
[  130.072118][ T6193]  sock_kmalloc+0xd7/0x160
[  130.072141][ T6193]  hash_recvmsg+0x294/0x840
[  130.072172][ T6193]  ? __pfx_hash_recvmsg+0x10/0x10
[  130.072199][ T6193]  sock_recvmsg+0x22f/0x280
[  130.072236][ T6193]  ____sys_recvmsg+0x1c6/0x480
[  130.072268][ T6193]  ? __pfx_____sys_recvmsg+0x10/0x10
[  130.072312][ T6193]  do_recvmmsg+0x426/0xab0
[  130.072345][ T6193]  ? __pfx_do_recvmmsg+0x10/0x10
[  130.072390][ T6193]  ? ksys_write+0x22a/0x2b0
[  130.072414][ T6193]  ? __pfx_lock_release+0x10/0x10
[  130.072452][ T6193]  ? sb_end_write+0xe9/0x1c0
[  130.072471][ T6193]  ? vfs_write+0x7fa/0xd10
[  130.072497][ T6193]  ? __mutex_unlock_slowpath+0x227/0x800
[  130.072535][ T6193]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  130.072557][ T6193]  ? __fget_files+0x2a/0x410
[  130.072598][ T6193]  __x64_sys_recvmmsg+0x199/0x250
[  130.072623][ T6193]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  130.072646][ T6193]  ? do_syscall_64+0x100/0x230
[  130.072678][ T6193]  ? do_syscall_64+0xb6/0x230
[  130.072710][ T6193]  do_syscall_64+0xf3/0x230
[  130.072739][ T6193]  ? clear_bhb_loop+0x45/0xa0
[  130.072771][ T6193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.072794][ T6193] RIP: 0033:0x7f49edb8d169
[  130.072812][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.072826][ T6193] RSP: 002b:00007f49ee91f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  130.072847][ T6193] RAX: ffffffffffffffda RBX: 00007f49edda5fa0 RCX: 00007f49edb8d169
[  130.072860][ T6193] RDX: 0000000000000001 RSI: 0000400000004140 RDI: 0000000000000004
[  130.072871][ T6193] RBP: 00007f49ee91f090 R08: 0000000000000000 R09: 0000000000000000
[  130.072882][ T6193] R10: 0000000040010041 R11: 0000000000000246 R12: 0000000000000001
[  130.072893][ T6193] R13: 0000000000000000 R14: 00007f49edda5fa0 R15: 00007ffdc4e36058
[  130.072931][ T6193]  </TASK>
[  130.544066][ T6194] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  130.608236][ T6202] overlayfs: missing 'workdir'
[  130.714902][ T5873] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  130.906209][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  130.926683][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.960777][ T5873] usb 5-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00
[  130.993849][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.046734][ T6211] FAULT_INJECTION: forcing a failure.
[  131.046734][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.060462][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.0.78 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  131.060488][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  131.060499][ T6211] Call Trace:
[  131.060508][ T6211]  <TASK>
[  131.060516][ T6211]  dump_stack_lvl+0x241/0x360
[  131.060551][ T6211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.060575][ T6211]  ? __pfx__printk+0x10/0x10
[  131.060608][ T6211]  ? snprintf+0xda/0x120
[  131.060637][ T6211]  should_fail_ex+0x40a/0x550
[  131.060668][ T6211]  _copy_to_user+0x31/0xb0
[  131.060703][ T6211]  simple_read_from_buffer+0xdc/0x170
[  131.060742][ T6211]  proc_fail_nth_read+0x1e9/0x250
[  131.060769][ T6211]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.060797][ T6211]  ? rw_verify_area+0x243/0x630
[  131.060821][ T6211]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.060846][ T6211]  vfs_read+0x1f8/0xb40
[  131.060874][ T6211]  ? fdget_pos+0x254/0x320
[  131.060897][ T6211]  ? __pfx___mutex_lock+0x10/0x10
[  131.060937][ T6211]  ? __pfx_vfs_read+0x10/0x10
[  131.060958][ T6211]  ? do_sys_openat2+0x179/0x1c0
[  131.060984][ T6211]  ? __fget_files+0x2a/0x410
[  131.061008][ T6211]  ? __fget_files+0x395/0x410
[  131.061026][ T6211]  ? __fget_files+0x2a/0x410
[  131.061064][ T6211]  ksys_read+0x18f/0x2b0
[  131.061094][ T6211]  ? __pfx_ksys_read+0x10/0x10
[  131.061121][ T6211]  ? do_syscall_64+0x100/0x230
[  131.061157][ T6211]  ? do_syscall_64+0xb6/0x230
[  131.061191][ T6211]  do_syscall_64+0xf3/0x230
[  131.061221][ T6211]  ? clear_bhb_loop+0x45/0xa0
[  131.061255][ T6211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.061282][ T6211] RIP: 0033:0x7f49edb8bb7c
[  131.061301][ T6211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  131.061317][ T6211] RSP: 002b:00007f49ee8fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  131.061339][ T6211] RAX: ffffffffffffffda RBX: 00007f49edda6080 RCX: 00007f49edb8bb7c
[  131.061352][ T6211] RDX: 000000000000000f RSI: 00007f49ee8fe0a0 RDI: 0000000000000006
[  131.061365][ T6211] RBP: 00007f49ee8fe090 R08: 0000000000000000 R09: 0000000000000000
[  131.061388][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.061399][ T6211] R13: 0000000000000000 R14: 00007f49edda6080 R15: 00007ffdc4e36058
[  131.061438][ T6211]  </TASK>
[  131.290598][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.375897][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.431626][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.467341][ T5873] usb 5-1: config 0 descriptor??
[  132.041562][  T974] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  132.459754][ T6199] loop4: detected capacity change from 0 to 2048
[  132.547745][  T974] usb 2-1: device descriptor read/64, error -71
[  132.750071][ T6199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.777680][ T6208] loop3: detected capacity change from 0 to 32768
[  132.835025][  T974] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  132.954318][ T6199] /dev/loop4: Can't open blockdev
[  132.973487][ T6208] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  132.995361][  T974] usb 2-1: device descriptor read/64, error -71
[  133.108653][  T974] usb usb2-port1: attempt power cycle
[  133.141849][ T6229] overlayfs: missing 'workdir'
[  133.684880][  T974] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  133.727349][  T974] usb 2-1: device descriptor read/8, error -71
[  133.975078][  T974] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  134.616248][ T5873] wacom 0003:056A:0090.0001: unknown main item tag 0x7
[  134.653290][ T5873] wacom 0003:056A:0090.0001: hidraw0: USB HID v40.00 Device [HID 056a:0090] on usb-dummy_hcd.4-1/input0
[  134.670715][  T974] usb 2-1: device descriptor read/8, error -71
[  134.816543][  T974] usb usb2-port1: unable to enumerate USB device
[  135.001846][ T5829] ocfs2: Unmounting device (7,3) on (node local)
[  135.155327][ T6236] loop0: detected capacity change from 0 to 32768
[  135.214122][ T6236] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  135.470551][ T6224] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  135.676937][ T6261] FAULT_INJECTION: forcing a failure.
[  135.676937][ T6261] name failslab, interval 1, probability 0, space 0, times 0
[  135.689777][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.3.85 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  135.689801][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  135.689812][ T6261] Call Trace:
[  135.689820][ T6261]  <TASK>
[  135.689828][ T6261]  dump_stack_lvl+0x241/0x360
[  135.689859][ T6261]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.689882][ T6261]  ? __pfx__printk+0x10/0x10
[  135.689906][ T6261]  ? __kmalloc_noprof+0xb5/0x4c0
[  135.689938][ T6261]  ? __pfx___might_resched+0x10/0x10
[  135.689973][ T6261]  should_fail_ex+0x40a/0x550
[  135.690001][ T6261]  should_failslab+0xac/0x100
[  135.690033][ T6261]  __kmalloc_noprof+0xdd/0x4c0
[  135.690061][ T6261]  ? __might_fault+0xaa/0x120
[  135.690080][ T6261]  ? rds_info_getsockopt+0x20c/0x600
[  135.690115][ T6261]  rds_info_getsockopt+0x20c/0x600
[  135.690147][ T6261]  ? __might_fault+0xaa/0x120
[  135.690169][ T6261]  ? __pfx_lock_release+0x10/0x10
[  135.690243][ T6261]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  135.690281][ T6261]  ? __might_fault+0xc6/0x120
[  135.690308][ T6261]  ? rds_getsockopt+0x2e8/0x530
[  135.690332][ T6261]  ? __pfx_rds_getsockopt+0x10/0x10
[  135.690360][ T6261]  do_sock_getsockopt+0x38e/0x740
[  135.690404][ T6261]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  135.690433][ T6261]  ? __fget_files+0x2a/0x410
[  135.690458][ T6261]  ? __fget_files+0x395/0x410
[  135.690477][ T6261]  ? __fget_files+0x2a/0x410
[  135.690511][ T6261]  __x64_sys_getsockopt+0x2a1/0x370
[  135.690546][ T6261]  ? irqentry_exit+0x63/0x90
[  135.690583][ T6261]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  135.690637][ T6261]  do_syscall_64+0xf3/0x230
[  135.690668][ T6261]  ? clear_bhb_loop+0x45/0xa0
[  135.690703][ T6261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.690731][ T6261] RIP: 0033:0x7fd8ea58d169
[  135.690757][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.690774][ T6261] RSP: 002b:00007fd8eb43e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  135.690797][ T6261] RAX: ffffffffffffffda RBX: 00007fd8ea7a6160 RCX: 00007fd8ea58d169
[  135.690813][ T6261] RDX: 000000000000271f RSI: 0000200000000114 RDI: 0000000000000005
[  135.690826][ T6261] RBP: 00007fd8eb43e090 R08: 0000400000000000 R09: 0000000000000000
[  135.690840][ T6261] R10: 0000400000019580 R11: 0000000000000246 R12: 0000000000000001
[  135.690853][ T6261] R13: 0000000000000000 R14: 00007fd8ea7a6160 R15: 00007ffce3cba478
[  135.690893][ T6261]  </TASK>
[  136.142569][ T5873] usb 5-1: USB disconnect, device number 3
[  136.274785][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  136.325024][ T5830] ocfs2: Unmounting device (7,0) on (node local)
[  136.375702][ T5971] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1170 with error 28
[  136.408373][ T6264] loop3: detected capacity change from 0 to 512
[  136.414741][ T5971] EXT4-fs (loop4): This should not happen!! Data will be lost
[  136.414741][ T5971] 
[  136.414791][ T5971] EXT4-fs (loop4): Total free blocks count 0
[  136.414810][ T5971] EXT4-fs (loop4): Free/Dirty block details
[  136.414850][ T5971] EXT4-fs (loop4): free_blocks=0
[  136.414885][ T5971] EXT4-fs (loop4): dirty_blocks=1184
[  136.414901][ T5971] EXT4-fs (loop4): Block reservation details
[  136.414917][ T5971] EXT4-fs (loop4): i_reserved_data_blocks=74
[  136.499092][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.533393][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  136.546103][ T6264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.564775][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.586438][    T9] usb 2-1: config 0 descriptor??
[  136.597943][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  136.607282][ T6264] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.616060][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.869280][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.045067][ T6271] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  137.711536][ T6274] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  137.774633][ T6280] FAULT_INJECTION: forcing a failure.
[  137.774633][ T6280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.824786][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.0.92 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  137.824817][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  137.824830][ T6280] Call Trace:
[  137.824839][ T6280]  <TASK>
[  137.824848][ T6280]  dump_stack_lvl+0x241/0x360
[  137.824882][ T6280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.824906][ T6280]  ? __pfx__printk+0x10/0x10
[  137.824932][ T6280]  ? __pfx_lock_release+0x10/0x10
[  137.824978][ T6280]  should_fail_ex+0x40a/0x550
[  137.825008][ T6280]  _copy_from_user+0x2d/0xb0
[  137.825042][ T6280]  move_addr_to_kernel+0x8c/0x170
[  137.825071][ T6280]  copy_msghdr_from_user+0x43e/0x680
[  137.825108][ T6280]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  137.825131][ T6280]  ? __fget_files+0x2a/0x410
[  137.825158][ T6280]  ? __fget_files+0x2a/0x410
[  137.825196][ T6280]  __sys_sendmmsg+0x32b/0x720
[  137.825236][ T6280]  ? __pfx___sys_sendmmsg+0x10/0x10
[  137.825277][ T6280]  ? __pfx_lock_release+0x10/0x10
[  137.825306][ T6280]  ? kstrtouint_from_user+0x11f/0x190
[  137.825371][ T6280]  ? ksys_write+0x22a/0x2b0
[  137.825399][ T6280]  ? __pfx_lock_release+0x10/0x10
[  137.825441][ T6280]  ? sb_end_write+0xe9/0x1c0
[  137.825463][ T6280]  ? vfs_write+0x7fa/0xd10
[  137.825493][ T6280]  ? __mutex_unlock_slowpath+0x227/0x800
[  137.825573][ T6280]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  137.825610][ T6280]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  137.825645][ T6280]  ? do_syscall_64+0x100/0x230
[  137.825681][ T6280]  __x64_sys_sendmmsg+0xa0/0xb0
[  137.825706][ T6280]  do_syscall_64+0xf3/0x230
[  137.825737][ T6280]  ? clear_bhb_loop+0x45/0xa0
[  137.825771][ T6280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.825799][ T6280] RIP: 0033:0x7f49edb8d169
[  137.825819][ T6280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.825835][ T6280] RSP: 002b:00007f49ee91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  137.825857][ T6280] RAX: ffffffffffffffda RBX: 00007f49edda5fa0 RCX: 00007f49edb8d169
[  137.825871][ T6280] RDX: 0000000000000001 RSI: 0000400000000b00 RDI: 0000000000000003
[  137.825883][ T6280] RBP: 00007f49ee91f090 R08: 0000000000000000 R09: 0000000000000000
[  137.825894][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.825906][ T6280] R13: 0000000000000000 R14: 00007f49edda5fa0 R15: 00007ffdc4e36058
[  137.825951][ T6280]  </TASK>
[  138.089615][ T6283] overlayfs: missing 'workdir'
[  138.222380][    T9] pwc: send_video_command error -71
[  138.228959][    T9] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  138.245573][    T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  138.335410][    T9] usb 2-1: USB disconnect, device number 6
[  138.348062][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  138.361103][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  138.385103][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'.
[  138.394015][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'.
[  138.403447][ T6286] netlink: 'syz.2.94': attribute type 1 has an invalid length.
[  138.411144][ T6286] netlink: 10 bytes leftover after parsing attributes in process `syz.2.94'.
[  138.514721][ T6291] netlink: 'syz.0.95': attribute type 4 has an invalid length.
[  138.584976][ T6291] netlink: 'syz.0.95': attribute type 4 has an invalid length.
[  138.844197][ T6305] loop4: detected capacity change from 0 to 16
[  138.900025][ T6305] erofs: Unknown parameter '/dev/snd/seq'
[  138.944123][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'.
[  139.258900][ T5831] block nbd0: Receive control failed (result -32)
[  139.833946][ T6310] loop0: detected capacity change from 0 to 1024
[  140.065700][ T6310] hfsplus: Unknown parameter ''
[  141.241869][ T6316] loop2: detected capacity change from 0 to 40427
[  141.285077][ T6316] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff
[  141.293574][ T6316] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2
[  141.301493][ T6316] F2FS-fs (loop2): Image doesn't support compression
[  141.308284][ T6316] F2FS-fs (loop2): Image doesn't support compression
[  141.320152][ T6316] F2FS-fs (loop2): invalid crc value
[  141.402651][ T6316] F2FS-fs (loop2): Found nat_bits in checkpoint
[  141.475380][ T6316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.504805][   T29] audit: type=1800 audit(1740323400.137:72): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.102" name="bus" dev="loop2" ino=10 res=0 errno=0
[  141.542531][ T6315] syz.2.102: attempt to access beyond end of device
[  141.542531][ T6315] loop2: rw=34817, sector=77824, nr_sectors = 4096 limit=40427
[  141.582636][ T6315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  141.849701][ T5835] syz-executor: attempt to access beyond end of device
[  141.849701][ T5835] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.904901][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  141.904932][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  141.904953][ T5835] Call Trace:
[  141.904963][ T5835]  <TASK>
[  141.904972][ T5835]  dump_stack_lvl+0x241/0x360
[  141.905007][ T5835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.905030][ T5835]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  141.905056][ T5835]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.905089][ T5835]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  141.905136][ T5835]  f2fs_handle_critical_error+0x38f/0x5a0
[  141.905184][ T5835]  f2fs_write_end_io+0x674/0x9a0
[  141.905231][ T5835]  __submit_merged_bio+0x2a9/0x710
[  141.905279][ T5835]  f2fs_submit_merged_write_cond+0x28a/0x360
[  141.905331][ T5835]  f2fs_write_data_pages+0x2c5e/0x3670
[  141.905426][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.905478][ T5835]  ? validate_chain+0x11e/0x5920
[  141.905631][ T5835]  ? __pfx_lock_release+0x10/0x10
[  141.905658][ T5835]  ? do_raw_spin_lock+0x14f/0x370
[  141.905701][ T5835]  ? do_raw_spin_unlock+0x13c/0x8b0
[  141.905736][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.905781][ T5835]  do_writepages+0x35f/0x880
[  141.905830][ T5835]  ? __pfx_do_writepages+0x10/0x10
[  141.905873][ T5835]  ? filemap_fdatawrite+0x1e8/0x2a0
[  141.905900][ T5835]  ? do_raw_spin_lock+0x14f/0x370
[  141.905928][ T5835]  ? __pfx_lock_release+0x10/0x10
[  141.905988][ T5835]  ? do_raw_spin_unlock+0x13c/0x8b0
[  141.906018][ T5835]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  141.906054][ T5835]  filemap_fdatawrite+0x1f3/0x2a0
[  141.906091][ T5835]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  141.906201][ T5835]  ? do_raw_spin_unlock+0x13c/0x8b0
[  141.906249][ T5835]  f2fs_sync_dirty_inodes+0x348/0x860
[  141.906306][ T5835]  f2fs_write_checkpoint+0x8af/0x1de0
[  141.906379][ T5835]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  141.906499][ T5835]  ? kill_f2fs_super+0x28e/0x6d0
[  141.906536][ T5835]  kill_f2fs_super+0x2b6/0x6d0
[  141.906576][ T5835]  ? __pfx_kill_f2fs_super+0x10/0x10
[  141.906618][ T5835]  ? shrinker_free+0x2ca/0x3d0
[  141.906646][ T5835]  deactivate_locked_super+0xc4/0x130
[  141.906677][ T5835]  cleanup_mnt+0x41f/0x4b0
[  141.906705][ T5835]  ? lockdep_hardirqs_on+0x99/0x150
[  141.906740][ T5835]  task_work_run+0x24f/0x310
[  141.906779][ T5835]  ? __pfx_task_work_run+0x10/0x10
[  141.906799][ T5835]  ? __x64_sys_umount+0x120/0x170
[  141.906837][ T5835]  ? syscall_exit_to_user_mode+0xa3/0x340
[  141.906874][ T5835]  syscall_exit_to_user_mode+0x13f/0x340
[  141.906912][ T5835]  do_syscall_64+0x100/0x230
[  141.906950][ T5835]  ? clear_bhb_loop+0x45/0xa0
[  141.906987][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.907015][ T5835] RIP: 0033:0x7fdc06b8e497
[  141.907035][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  141.907051][ T5835] RSP: 002b:00007ffe82d63758 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  141.907072][ T5835] RAX: 0000000000000000 RBX: 00007fdc06c0e08c RCX: 00007fdc06b8e497
[  141.907086][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe82d63810
[  141.907098][ T5835] RBP: 00007ffe82d63810 R08: 0000000000000000 R09: 0000000000000000
[  141.907111][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe82d648a0
[  141.907124][ T5835] R13: 00007fdc06c0e08c R14: 000000000002295d R15: 00007ffe82d648e0
[  141.907172][ T5835]  </TASK>
[  142.274779][ T5835] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  143.468826][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.518623][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.922921][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  144.220720][ T6350] loop0: detected capacity change from 0 to 4096
[  144.234062][ T5873] usb 5-1: device descriptor read/64, error -71
[  144.687896][ T6352] FAULT_INJECTION: forcing a failure.
[  144.687896][ T6352] name failslab, interval 1, probability 0, space 0, times 0
[  144.717376][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.3.114 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  144.717405][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  144.717417][ T6352] Call Trace:
[  144.717426][ T6352]  <TASK>
[  144.717435][ T6352]  dump_stack_lvl+0x241/0x360
[  144.717469][ T6352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.717494][ T6352]  ? __pfx__printk+0x10/0x10
[  144.717521][ T6352]  ? fs_reclaim_acquire+0x93/0x130
[  144.717547][ T6352]  ? __pfx___might_resched+0x10/0x10
[  144.717582][ T6352]  should_fail_ex+0x40a/0x550
[  144.717614][ T6352]  should_failslab+0xac/0x100
[  144.717649][ T6352]  __kmalloc_noprof+0xdd/0x4c0
[  144.717681][ T6352]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  144.717731][ T6352]  tomoyo_realpath_from_path+0xcf/0x5e0
[  144.717785][ T6352]  tomoyo_path_number_perm+0x239/0x770
[  144.717812][ T6352]  ? __lock_acquire+0x1397/0x2100
[  144.717851][ T6352]  ? tomoyo_path_number_perm+0x209/0x770
[  144.717882][ T6352]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  144.717980][ T6352]  ? __fget_files+0x2a/0x410
[  144.718007][ T6352]  ? __fget_files+0x2a/0x410
[  144.718042][ T6352]  security_file_ioctl+0xc6/0x2a0
[  144.718072][ T6352]  __se_sys_ioctl+0x46/0x160
[  144.718104][ T6352]  do_syscall_64+0xf3/0x230
[  144.718136][ T6352]  ? clear_bhb_loop+0x45/0xa0
[  144.718171][ T6352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.718198][ T6352] RIP: 0033:0x7fd8ea58cd6b
[  144.718217][ T6352] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  144.718232][ T6352] RSP: 002b:00007fd8eb47e490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.718253][ T6352] RAX: ffffffffffffffda RBX: 00007fd8eb47ebe0 RCX: 00007fd8ea58cd6b
[  144.718268][ T6352] RDX: 00007fd8eb47ebe0 RSI: 000000004020ae46 RDI: 0000000000000004
[  144.718281][ T6352] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000010
[  144.718292][ T6352] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  144.718302][ T6352] R13: 0000400000001000 R14: 0000400000000000 R15: 00000000fec00000
[  144.718344][ T6352]  </TASK>
[  144.816990][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  144.970276][ T6352] ERROR: Out of memory at tomoyo_realpath_from_path.
[  144.998086][ T6350] overlay: filesystem on ./file0 is read-only
[  145.192583][ T6354] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  145.285156][ T5873] usb 5-1: device descriptor read/64, error -71
[  145.425293][ T5873] usb usb5-port1: attempt power cycle
[  145.658062][ T6365] loop3: detected capacity change from 0 to 2048
[  145.687026][ T6365] ext4: Unknown parameter 'obj_user'
[  145.805225][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  145.847738][ T5873] usb 5-1: device descriptor read/8, error -71
[  146.216978][ T6373] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  146.253153][ T6373] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  147.912849][ T6375] loop0: detected capacity change from 0 to 40427
[  147.956506][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  148.009035][ T6375] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff
[  148.017921][ T6375] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2
[  148.025885][ T6375] F2FS-fs (loop0): Image doesn't support compression
[  148.032980][ T6375] F2FS-fs (loop0): Image doesn't support compression
[  148.065778][ T6375] F2FS-fs (loop0): invalid crc value
[  148.137991][ T6375] F2FS-fs (loop0): Found nat_bits in checkpoint
[  148.255805][ T6375] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  148.509182][ T6375] syz.0.118: attempt to access beyond end of device
[  148.509182][ T6375] loop0: rw=34817, sector=77824, nr_sectors = 4096 limit=40427
[  148.547113][   T29] audit: type=1800 audit(1740323407.027:73): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.118" name="bus" dev="loop0" ino=10 res=0 errno=0
[  148.932110][ T5873] usb 5-1: device descriptor read/8, error -71
[  148.940815][ T5830] syz-executor: attempt to access beyond end of device
[  148.940815][ T5830] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  148.984901][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  148.984930][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  148.984942][ T5830] Call Trace:
[  148.984950][ T5830]  <TASK>
[  148.984958][ T5830]  dump_stack_lvl+0x241/0x360
[  148.984992][ T5830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.985016][ T5830]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  148.985043][ T5830]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.985074][ T5830]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  148.985114][ T5830]  f2fs_handle_critical_error+0x38f/0x5a0
[  148.985159][ T5830]  f2fs_write_end_io+0x674/0x9a0
[  148.985200][ T5830]  __submit_merged_bio+0x2a9/0x710
[  148.985242][ T5830]  f2fs_submit_merged_write_cond+0x28a/0x360
[  148.985289][ T5830]  f2fs_write_data_pages+0x2c5e/0x3670
[  148.985364][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.985421][ T5830]  ? validate_chain+0x11e/0x5920
[  148.985542][ T5830]  ? __pfx_lock_release+0x10/0x10
[  148.985570][ T5830]  ? do_raw_spin_lock+0x14f/0x370
[  148.985611][ T5830]  ? do_raw_spin_unlock+0x13c/0x8b0
[  148.985643][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.985669][ T5830]  do_writepages+0x35f/0x880
[  148.985712][ T5830]  ? __pfx_do_writepages+0x10/0x10
[  148.985749][ T5830]  ? filemap_fdatawrite+0x1e8/0x2a0
[  148.985774][ T5830]  ? do_raw_spin_lock+0x14f/0x370
[  148.985800][ T5830]  ? __pfx_lock_release+0x10/0x10
[  148.985845][ T5830]  ? do_raw_spin_unlock+0x13c/0x8b0
[  148.985873][ T5830]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  148.985905][ T5830]  filemap_fdatawrite+0x1f3/0x2a0
[  148.985937][ T5830]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  148.986033][ T5830]  ? do_raw_spin_unlock+0x13c/0x8b0
[  148.986074][ T5830]  f2fs_sync_dirty_inodes+0x348/0x860
[  148.986122][ T5830]  f2fs_write_checkpoint+0x8af/0x1de0
[  148.986182][ T5830]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  148.986282][ T5830]  ? kill_f2fs_super+0x28e/0x6d0
[  148.986315][ T5830]  kill_f2fs_super+0x2b6/0x6d0
[  148.986349][ T5830]  ? __pfx_kill_f2fs_super+0x10/0x10
[  148.986390][ T5830]  ? shrinker_free+0x2ca/0x3d0
[  148.986415][ T5830]  deactivate_locked_super+0xc4/0x130
[  148.986444][ T5830]  cleanup_mnt+0x41f/0x4b0
[  148.986468][ T5830]  ? lockdep_hardirqs_on+0x99/0x150
[  148.986501][ T5830]  task_work_run+0x24f/0x310
[  148.986534][ T5830]  ? __pfx_task_work_run+0x10/0x10
[  148.986554][ T5830]  ? __x64_sys_umount+0x120/0x170
[  148.986588][ T5830]  ? syscall_exit_to_user_mode+0xa3/0x340
[  148.986621][ T5830]  syscall_exit_to_user_mode+0x13f/0x340
[  148.986655][ T5830]  do_syscall_64+0x100/0x230
[  148.986685][ T5830]  ? clear_bhb_loop+0x45/0xa0
[  148.986718][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.986744][ T5830] RIP: 0033:0x7f49edb8e497
[  148.986761][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  148.986776][ T5830] RSP: 002b:00007ffdc4e352e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  148.986797][ T5830] RAX: 0000000000000000 RBX: 00007f49edc0e08c RCX: 00007f49edb8e497
[  148.986809][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc4e353a0
[  148.986821][ T5830] RBP: 00007ffdc4e353a0 R08: 0000000000000000 R09: 0000000000000000
[  148.986832][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc4e36430
[  148.986844][ T5830] R13: 00007f49edc0e08c R14: 0000000000024430 R15: 00007ffdc4e36470
[  148.986886][ T5830]  </TASK>
[  148.986893][ T5830] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  149.417763][ T6392] dlm: non-version read from control device 8224
[  149.470017][ T5873] usb usb5-port1: unable to enumerate USB device
[  153.209697][ T6419] loop1: detected capacity change from 0 to 40427
[  153.256305][ T6419] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff
[  153.265875][ T6419] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2
[  153.273735][ T6419] F2FS-fs (loop1): Image doesn't support compression
[  153.280600][ T6419] F2FS-fs (loop1): Image doesn't support compression
[  153.297656][ T6419] F2FS-fs (loop1): invalid crc value
[  153.336212][ T6419] F2FS-fs (loop1): Found nat_bits in checkpoint
[  153.421820][ T6419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  153.463125][ T6418] syz.1.132: attempt to access beyond end of device
[  153.463125][ T6418] loop1: rw=34817, sector=77824, nr_sectors = 4096 limit=40427
[  153.465585][   T29] audit: type=1800 audit(1740323412.087:74): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.132" name="bus" dev="loop1" ino=10 res=0 errno=0
[  153.776715][ T5827] syz-executor: attempt to access beyond end of device
[  153.776715][ T5827] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.854774][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  153.854803][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  153.854815][ T5827] Call Trace:
[  153.854823][ T5827]  <TASK>
[  153.854831][ T5827]  dump_stack_lvl+0x241/0x360
[  153.854868][ T5827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.854893][ T5827]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  153.854919][ T5827]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.854949][ T5827]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  153.854991][ T5827]  f2fs_handle_critical_error+0x38f/0x5a0
[  153.855035][ T5827]  f2fs_write_end_io+0x674/0x9a0
[  153.855076][ T5827]  __submit_merged_bio+0x2a9/0x710
[  153.855118][ T5827]  f2fs_submit_merged_write_cond+0x28a/0x360
[  153.855167][ T5827]  f2fs_write_data_pages+0x2c5e/0x3670
[  153.855251][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.855293][ T5827]  ? validate_chain+0x11e/0x5920
[  153.855431][ T5827]  ? __pfx_lock_release+0x10/0x10
[  153.855459][ T5827]  ? do_raw_spin_lock+0x14f/0x370
[  153.855502][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  153.855537][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.855564][ T5827]  do_writepages+0x35f/0x880
[  153.855623][ T5827]  ? __pfx_do_writepages+0x10/0x10
[  153.855683][ T5827]  ? filemap_fdatawrite+0x1e8/0x2a0
[  153.855719][ T5827]  ? do_raw_spin_lock+0x14f/0x370
[  153.855748][ T5827]  ? __pfx_lock_release+0x10/0x10
[  153.855808][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  153.855847][ T5827]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  153.855882][ T5827]  filemap_fdatawrite+0x1f3/0x2a0
[  153.855919][ T5827]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  153.856026][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  153.856073][ T5827]  f2fs_sync_dirty_inodes+0x348/0x860
[  153.856127][ T5827]  f2fs_write_checkpoint+0x8af/0x1de0
[  153.856193][ T5827]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  153.856311][ T5827]  ? kill_f2fs_super+0x28e/0x6d0
[  153.856348][ T5827]  kill_f2fs_super+0x2b6/0x6d0
[  153.856386][ T5827]  ? __pfx_kill_f2fs_super+0x10/0x10
[  153.856427][ T5827]  ? shrinker_free+0x2ca/0x3d0
[  153.856455][ T5827]  deactivate_locked_super+0xc4/0x130
[  153.856487][ T5827]  cleanup_mnt+0x41f/0x4b0
[  153.856513][ T5827]  ? lockdep_hardirqs_on+0x99/0x150
[  153.856549][ T5827]  task_work_run+0x24f/0x310
[  153.856586][ T5827]  ? __pfx_task_work_run+0x10/0x10
[  153.856608][ T5827]  ? __x64_sys_umount+0x120/0x170
[  153.856646][ T5827]  ? syscall_exit_to_user_mode+0xa3/0x340
[  153.856683][ T5827]  syscall_exit_to_user_mode+0x13f/0x340
[  153.856721][ T5827]  do_syscall_64+0x100/0x230
[  153.856754][ T5827]  ? clear_bhb_loop+0x45/0xa0
[  153.856789][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.856816][ T5827] RIP: 0033:0x7fb04318e497
[  153.856835][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  153.856852][ T5827] RSP: 002b:00007ffcbb8a54a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  153.856873][ T5827] RAX: 0000000000000000 RBX: 00007fb04320e08c RCX: 00007fb04318e497
[  153.856899][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbb8a5560
[  153.856911][ T5827] RBP: 00007ffcbb8a5560 R08: 0000000000000000 R09: 0000000000000000
[  153.856923][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbb8a65f0
[  153.856936][ T5827] R13: 00007fb04320e08c R14: 00000000000257de R15: 00007ffcbb8a6630
[  153.856979][ T5827]  </TASK>
[  153.857142][ T5827] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  154.425646][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'.
[  154.436490][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'.
[  155.403122][ T6422] loop4: detected capacity change from 0 to 32768
[  155.499474][ T6422] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  155.913725][ T5841] ocfs2: Unmounting device (7,4) on (node local)
[  156.632696][ T6455] loop0: detected capacity change from 0 to 16
[  157.910970][ T6455] erofs (device loop0): mounted with root inode @ nid 36.
[  158.538761][ T6467] loop6: detected capacity change from 0 to 7
[  158.597747][ T6467] buffer_io_error: 4 callbacks suppressed
[  158.597767][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.614947][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.622968][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.675036][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.683068][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.754933][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.762986][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.824800][ T6467] ldm_validate_partition_table(): Disk read failed.
[  158.847236][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  158.879066][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.004972][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.589199][ T6474] loop1: detected capacity change from 0 to 40427
[  159.811834][ T6474] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff
[  159.820615][ T6474] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2
[  159.828826][ T6474] F2FS-fs (loop1): Image doesn't support compression
[  159.835898][ T6474] F2FS-fs (loop1): Image doesn't support compression
[  159.867435][ T6474] F2FS-fs (loop1): invalid crc value
[  159.909122][ T6474] F2FS-fs (loop1): Found nat_bits in checkpoint
[  160.005449][ T6467] Dev loop6: unable to read RDB block 0
[  160.011651][ T6467]  loop6: unable to read partition table
[  160.017747][ T6467] loop6: partition table beyond EOD, truncated
[  160.024098][ T6467] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  160.024098][ T6467] 
) failed (rc=-5)
[  160.181806][ T6474] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  160.207417][   T29] audit: type=1800 audit(1740323418.847:75): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="bus" dev="loop1" ino=10 res=0 errno=0
[  160.240293][ T6473] syz.1.145: attempt to access beyond end of device
[  160.240293][ T6473] loop1: rw=34817, sector=77824, nr_sectors = 4080 limit=40427
[  160.657542][ T5827] syz-executor: attempt to access beyond end of device
[  160.657542][ T5827] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  160.701515][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  160.701546][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  160.701558][ T5827] Call Trace:
[  160.701566][ T5827]  <TASK>
[  160.701575][ T5827]  dump_stack_lvl+0x241/0x360
[  160.701608][ T5827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.701633][ T5827]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  160.701661][ T5827]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.701692][ T5827]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  160.701733][ T5827]  f2fs_handle_critical_error+0x38f/0x5a0
[  160.701779][ T5827]  f2fs_write_end_io+0x674/0x9a0
[  160.701820][ T5827]  __submit_merged_bio+0x2a9/0x710
[  160.701862][ T5827]  f2fs_submit_merged_write_cond+0x28a/0x360
[  160.701912][ T5827]  f2fs_write_data_pages+0x2c5e/0x3670
[  160.701988][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.702035][ T5827]  ? validate_chain+0x11e/0x5920
[  160.702157][ T5827]  ? __pfx_lock_release+0x10/0x10
[  160.702186][ T5827]  ? do_raw_spin_lock+0x14f/0x370
[  160.702228][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  160.702260][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.702286][ T5827]  do_writepages+0x35f/0x880
[  160.702329][ T5827]  ? __pfx_do_writepages+0x10/0x10
[  160.702366][ T5827]  ? filemap_fdatawrite+0x1e8/0x2a0
[  160.702390][ T5827]  ? do_raw_spin_lock+0x14f/0x370
[  160.702422][ T5827]  ? __pfx_lock_release+0x10/0x10
[  160.702469][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  160.702497][ T5827]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  160.702528][ T5827]  filemap_fdatawrite+0x1f3/0x2a0
[  160.702561][ T5827]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  160.702656][ T5827]  ? do_raw_spin_unlock+0x13c/0x8b0
[  160.702697][ T5827]  f2fs_sync_dirty_inodes+0x348/0x860
[  160.702746][ T5827]  f2fs_write_checkpoint+0x8af/0x1de0
[  160.702809][ T5827]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  160.702909][ T5827]  ? kill_f2fs_super+0x28e/0x6d0
[  160.702942][ T5827]  kill_f2fs_super+0x2b6/0x6d0
[  160.702977][ T5827]  ? __pfx_kill_f2fs_super+0x10/0x10
[  160.703014][ T5827]  ? shrinker_free+0x2ca/0x3d0
[  160.703040][ T5827]  deactivate_locked_super+0xc4/0x130
[  160.703068][ T5827]  cleanup_mnt+0x41f/0x4b0
[  160.703093][ T5827]  ? lockdep_hardirqs_on+0x99/0x150
[  160.703127][ T5827]  task_work_run+0x24f/0x310
[  160.703160][ T5827]  ? __pfx_task_work_run+0x10/0x10
[  160.703180][ T5827]  ? __x64_sys_umount+0x120/0x170
[  160.703214][ T5827]  ? syscall_exit_to_user_mode+0xa3/0x340
[  160.703247][ T5827]  syscall_exit_to_user_mode+0x13f/0x340
[  160.703282][ T5827]  do_syscall_64+0x100/0x230
[  160.703312][ T5827]  ? clear_bhb_loop+0x45/0xa0
[  160.703345][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.703372][ T5827] RIP: 0033:0x7fb04318e497
[  160.703390][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  160.703412][ T5827] RSP: 002b:00007ffcbb8a54a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  160.703432][ T5827] RAX: 0000000000000000 RBX: 00007fb04320e08c RCX: 00007fb04318e497
[  160.703445][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbb8a5560
[  160.703457][ T5827] RBP: 00007ffcbb8a5560 R08: 0000000000000000 R09: 0000000000000000
[  160.703468][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbb8a65f0
[  160.703481][ T5827] R13: 00007fb04320e08c R14: 000000000002723b R15: 00007ffcbb8a6630
[  160.703522][ T5827]  </TASK>
[  160.703531][ T5827] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  162.370322][ T6493] loop4: detected capacity change from 0 to 128
[  162.405791][ T6493] vfat: Unknown parameter 'sho�\name'
[  163.538616][ T6484] loop0: detected capacity change from 0 to 32768
[  163.613628][ T6484] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  164.432614][ T5830] ocfs2: Unmounting device (7,0) on (node local)
[  164.500637][ T6506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.079924][ T6503] loop1: detected capacity change from 0 to 4096
[  165.170239][ T6503] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  165.285311][ T6503] Illegal XDP return value 4294967274 on prog  (id 34) dev N/A, expect packet loss!
[  165.384352][ T6498] loop4: detected capacity change from 0 to 32768
[  165.498150][ T6498] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  165.580484][ T6522] loop0: detected capacity change from 0 to 512
[  165.648343][ T6522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  165.691557][ T6529] loop6: detected capacity change from 0 to 7
[  165.698502][ T6529] buffer_io_error: 4 callbacks suppressed
[  165.698519][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.736167][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.744187][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.758191][ T6522] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.775017][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.783997][ T6531] loop3: detected capacity change from 0 to 164
[  165.792308][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.802315][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.810484][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.830216][ T6529] ldm_validate_partition_table(): Disk read failed.
[  165.833884][ T6498] XFS (loop4): Ending clean mount
[  165.867488][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.873702][ T6498] XFS (loop4): Quotacheck needed: Please wait.
[  165.886451][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.901085][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  165.912462][ T6529] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.925614][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'.
[  165.979895][ T6535] loop1: detected capacity change from 0 to 128
[  166.000615][ T6498] XFS (loop4): Quotacheck: Done.
[  166.012098][ T6535] vfat: Unknown parameter 'H'
[  166.165968][ T6529] Dev loop6: unable to read RDB block 0
[  166.172160][ T6529]  loop6: unable to read partition table
[  166.178269][ T6529] loop6: partition table beyond EOD, truncated
[  166.184595][ T6529] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  166.184595][ T6529] 
) failed (rc=-5)
[  167.034524][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'.
[  167.497260][ T6534] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.506311][ T6534] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.515099][ T6534] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.523817][ T6534] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  168.008872][ T6534] vxlan0: entered promiscuous mode
[  168.867565][ T6553] FAULT_INJECTION: forcing a failure.
[  168.867565][ T6553] name failslab, interval 1, probability 0, space 0, times 0
[  168.880511][ T6553] CPU: 0 UID: 0 PID: 6553 Comm: syz.0.162 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  168.880539][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  168.880551][ T6553] Call Trace:
[  168.880562][ T6553]  <TASK>
[  168.880569][ T6553]  dump_stack_lvl+0x241/0x360
[  168.880594][ T6553]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.880612][ T6553]  ? __pfx__printk+0x10/0x10
[  168.880630][ T6553]  ? __kmalloc_noprof+0xb5/0x4c0
[  168.880655][ T6553]  ? __pfx___might_resched+0x10/0x10
[  168.880682][ T6553]  should_fail_ex+0x40a/0x550
[  168.880711][ T6553]  should_failslab+0xac/0x100
[  168.880737][ T6553]  __kmalloc_noprof+0xdd/0x4c0
[  168.880760][ T6553]  ? mqprio_init+0x735/0x1f00
[  168.880785][ T6553]  mqprio_init+0x735/0x1f00
[  168.880818][ T6553]  ? __pfx_mqprio_init+0x10/0x10
[  168.880838][ T6553]  ? __pfx_mqprio_init+0x10/0x10
[  168.880855][ T6553]  ? __pfx_mqprio_init+0x10/0x10
[  168.880873][ T6553]  ? qdisc_create+0x33a/0x11a0
[  168.880893][ T6553]  ? qdisc_create+0x5fe/0x11a0
[  168.880921][ T6553]  ? __pfx_mqprio_init+0x10/0x10
[  168.880939][ T6553]  qdisc_create+0x9d4/0x11a0
[  168.880972][ T6553]  ? __pfx_qdisc_create+0x10/0x10
[  168.881005][ T6553]  tc_modify_qdisc+0xbbb/0x1f10
[  168.881026][ T6553]  ? preempt_schedule_thunk+0x16/0x30
[  168.881065][ T6553]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  168.881115][ T6553]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  168.881139][ T6553]  rtnetlink_rcv_msg+0x73f/0xcf0
[  168.881155][ T6553]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  168.881176][ T6553]  ? rcu_preempt_deferred_qs_irqrestore+0x8c4/0xca0
[  168.881201][ T6553]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  168.881238][ T6553]  netlink_rcv_skb+0x206/0x480
[  168.881256][ T6553]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  168.881276][ T6553]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.881319][ T6553]  ? __rcu_read_unlock+0xa1/0x110
[  168.881345][ T6553]  netlink_unicast+0x7f6/0x990
[  168.881380][ T6553]  ? __pfx_netlink_unicast+0x10/0x10
[  168.881404][ T6553]  ? __phys_addr_symbol+0x2f/0x70
[  168.881419][ T6553]  ? __check_object_size+0x475/0x720
[  168.881460][ T6553]  netlink_sendmsg+0x8b3/0xca0
[  168.881490][ T6553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.881511][ T6553]  ? aa_sock_msg_perm+0xf3/0x1d0
[  168.881540][ T6553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.881554][ T6553]  __sock_sendmsg+0x221/0x270
[  168.881577][ T6553]  ____sys_sendmsg+0x524/0x860
[  168.881610][ T6553]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.881631][ T6553]  ? __fget_files+0x2a/0x410
[  168.881649][ T6553]  ? __fget_files+0x2a/0x410
[  168.881674][ T6553]  __sys_sendmsg+0x269/0x350
[  168.881704][ T6553]  ? __pfx___sys_sendmsg+0x10/0x10
[  168.881763][ T6553]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  168.881817][ T6553]  do_syscall_64+0xf3/0x230
[  168.881839][ T6553]  ? clear_bhb_loop+0x45/0xa0
[  168.881864][ T6553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.881884][ T6553] RIP: 0033:0x7f49edb8d169
[  168.881898][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.881909][ T6553] RSP: 002b:00007f49ee8fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.881924][ T6553] RAX: ffffffffffffffda RBX: 00007f49edda6080 RCX: 00007f49edb8d169
[  168.881935][ T6553] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000005
[  168.881944][ T6553] RBP: 00007f49ee8fe090 R08: 0000000000000000 R09: 0000000000000000
[  168.881952][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.881960][ T6553] R13: 0000000000000000 R14: 00007f49edda6080 R15: 00007ffdc4e36058
[  168.881988][ T6553]  </TASK>
[  169.323044][ T5841] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  169.715821][ T6554] loop0: detected capacity change from 0 to 4096
[  169.774393][ T6549] loop3: detected capacity change from 0 to 4096
[  169.839239][ T6555] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.883930][ T6551] NILFS (loop0): vblocknr = 9 has abnormal lifetime: start cno (= 1080863910568919042) > current cno (= 3)
[  169.896210][ T6551] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16)
[  169.910577][ T6551] Remounting filesystem read-only
[  169.915789][ T6551] NILFS (loop0): error -5 truncating bmap (ino=16)
[  170.040133][ T5830] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  170.594950][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  170.704877][ T5956] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  170.764975][ T5882] usb 1-1: Using ep0 maxpacket: 8
[  170.776596][ T5882] usb 1-1: too many configurations: 62, using maximum allowed: 8
[  170.800408][ T5882] usb 1-1: unable to read config index 0 descriptor/start: -61
[  170.808392][ T5882] usb 1-1: can't read configurations, error -61
[  170.888941][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  170.924773][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  170.954830][ T5956] usb 5-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00
[  170.955124][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  170.963930][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.998383][ T5956] usb 5-1: config 0 descriptor??
[  171.481895][ T5882] usb 1-1: Using ep0 maxpacket: 8
[  171.550408][ T5882] usb 1-1: too many configurations: 62, using maximum allowed: 8
[  171.566823][ T5882] usb 1-1: unable to read config index 0 descriptor/start: -61
[  171.575343][ T5882] usb 1-1: can't read configurations, error -61
[  171.583225][ T5882] usb usb1-port1: attempt power cycle
[  171.632370][ T6567] loop3: detected capacity change from 0 to 32768
[  171.684341][ T6557] loop1: detected capacity change from 0 to 32768
[  171.699713][ T6557] jfs: Unknown parameter '/dev/vhost-net'
[  171.743103][ T6567] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  171.848073][ T6564] loop4: detected capacity change from 0 to 16
[  171.921370][ T6564] erofs: Unknown parameter '/dev/kvm'
[  171.947502][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  172.987534][ T5882] usb 1-1: Using ep0 maxpacket: 8
[  173.057912][ T5882] usb 1-1: too many configurations: 62, using maximum allowed: 8
[  173.072941][ T5882] usb 1-1: unable to read config index 0 descriptor/start: -61
[  173.147832][ T5829] ocfs2: Unmounting device (7,3) on (node local)
[  173.967142][ T5882] usb 1-1: can't read configurations, error -61
[  175.865335][ T5956] usbhid 5-1:0.0: can't add hid device: -71
[  175.871439][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  175.920954][ T5956] usb 5-1: USB disconnect, device number 8
[  177.951051][ T6611] loop3: detected capacity change from 0 to 2048
[  178.060643][ T6611] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.690304][ T6609] loop0: detected capacity change from 0 to 32768
[  179.593301][ T6622] loop3: detected capacity change from 0 to 40427
[  179.616057][ T6622] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff
[  179.625037][ T6622] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2
[  179.632914][ T6622] F2FS-fs (loop3): Image doesn't support compression
[  179.642018][ T6622] F2FS-fs (loop3): Image doesn't support compression
[  179.658345][ T6622] F2FS-fs (loop3): invalid crc value
[  179.697634][ T6622] F2FS-fs (loop3): Found nat_bits in checkpoint
[  179.753364][ T5882] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  179.784898][ T6622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  179.812174][   T29] audit: type=1800 audit(1740323438.457:76): pid=6621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="bus" dev="loop3" ino=10 res=0 errno=0
[  179.848035][ T6621] syz.3.178: attempt to access beyond end of device
[  179.848035][ T6621] loop3: rw=34817, sector=77824, nr_sectors = 4096 limit=40427
[  179.948120][ T5882] usb 1-1: Using ep0 maxpacket: 8
[  179.959220][ T5882] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  179.968965][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.977499][ T5882] usb 1-1: Product: syz
[  179.991029][ T5882] usb 1-1: Manufacturer: syz
[  179.998691][ T5882] usb 1-1: SerialNumber: syz
[  180.031556][ T5882] usb 1-1: config 0 descriptor??
[  180.065547][ T5882] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  180.156373][ T5882] gspca_sonixj: reg_w1 err -71
[  180.161355][ T5882] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  180.177592][ T5882] usb 1-1: USB disconnect, device number 7
[  180.298867][ T5829] syz-executor: attempt to access beyond end of device
[  180.298867][ T5829] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.321879][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  180.321912][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  180.321925][ T5829] Call Trace:
[  180.321934][ T5829]  <TASK>
[  180.321949][ T5829]  dump_stack_lvl+0x241/0x360
[  180.321988][ T5829]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.322016][ T5829]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  180.322046][ T5829]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.322081][ T5829]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  180.322129][ T5829]  f2fs_handle_critical_error+0x38f/0x5a0
[  180.322182][ T5829]  f2fs_write_end_io+0x674/0x9a0
[  180.322231][ T5829]  __submit_merged_bio+0x2a9/0x710
[  180.322280][ T5829]  f2fs_submit_merged_write_cond+0x28a/0x360
[  180.322338][ T5829]  f2fs_write_data_pages+0x2c5e/0x3670
[  180.322432][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.322487][ T5829]  ? validate_chain+0x11e/0x5920
[  180.322638][ T5829]  ? __pfx_lock_release+0x10/0x10
[  180.322668][ T5829]  ? do_raw_spin_lock+0x14f/0x370
[  180.322716][ T5829]  ? do_raw_spin_unlock+0x13c/0x8b0
[  180.322754][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.322783][ T5829]  do_writepages+0x35f/0x880
[  180.322834][ T5829]  ? __pfx_do_writepages+0x10/0x10
[  180.322878][ T5829]  ? filemap_fdatawrite+0x1e8/0x2a0
[  180.322904][ T5829]  ? do_raw_spin_lock+0x14f/0x370
[  180.322933][ T5829]  ? __pfx_lock_release+0x10/0x10
[  180.322993][ T5829]  ? do_raw_spin_unlock+0x13c/0x8b0
[  180.323024][ T5829]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  180.323060][ T5829]  filemap_fdatawrite+0x1f3/0x2a0
[  180.323097][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  180.323217][ T5829]  ? do_raw_spin_unlock+0x13c/0x8b0
[  180.323267][ T5829]  f2fs_sync_dirty_inodes+0x348/0x860
[  180.323326][ T5829]  f2fs_write_checkpoint+0x8af/0x1de0
[  180.323403][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  180.323527][ T5829]  ? kill_f2fs_super+0x28e/0x6d0
[  180.323565][ T5829]  kill_f2fs_super+0x2b6/0x6d0
[  180.323605][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  180.323648][ T5829]  ? shrinker_free+0x2ca/0x3d0
[  180.323678][ T5829]  deactivate_locked_super+0xc4/0x130
[  180.323710][ T5829]  cleanup_mnt+0x41f/0x4b0
[  180.323738][ T5829]  ? lockdep_hardirqs_on+0x99/0x150
[  180.323776][ T5829]  task_work_run+0x24f/0x310
[  180.323815][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  180.323837][ T5829]  ? __x64_sys_umount+0x120/0x170
[  180.323877][ T5829]  ? syscall_exit_to_user_mode+0xa3/0x340
[  180.323915][ T5829]  syscall_exit_to_user_mode+0x13f/0x340
[  180.323962][ T5829]  do_syscall_64+0x100/0x230
[  180.323996][ T5829]  ? clear_bhb_loop+0x45/0xa0
[  180.324034][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.324063][ T5829] RIP: 0033:0x7fd8ea58e497
[  180.324084][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  180.324101][ T5829] RSP: 002b:00007ffce3cb9708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  180.324123][ T5829] RAX: 0000000000000000 RBX: 00007fd8ea60e08c RCX: 00007fd8ea58e497
[  180.324137][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce3cb97c0
[  180.324150][ T5829] RBP: 00007ffce3cb97c0 R08: 0000000000000000 R09: 0000000000000000
[  180.324163][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce3cba850
[  180.324177][ T5829] R13: 00007fd8ea60e08c R14: 000000000002bed8 R15: 00007ffce3cba890
[  180.324228][ T5829]  </TASK>
[  180.334737][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  181.373548][ T6632] FAULT_INJECTION: forcing a failure.
[  181.373548][ T6632] name failslab, interval 1, probability 0, space 0, times 0
[  181.397202][ T6634] netlink: 'syz.3.181': attribute type 64 has an invalid length.
[  181.398251][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.0.182 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  181.398279][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  181.398292][ T6632] Call Trace:
[  181.398302][ T6632]  <TASK>
[  181.398311][ T6632]  dump_stack_lvl+0x241/0x360
[  181.398350][ T6632]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.398377][ T6632]  ? __pfx__printk+0x10/0x10
[  181.398413][ T6632]  ? ref_tracker_alloc+0x332/0x490
[  181.398448][ T6632]  should_fail_ex+0x40a/0x550
[  181.398483][ T6632]  should_failslab+0xac/0x100
[  181.398521][ T6632]  ? skb_clone+0x20c/0x390
[  181.398542][ T6632]  kmem_cache_alloc_noprof+0x70/0x380
[  181.398595][ T6632]  skb_clone+0x20c/0x390
[  181.398627][ T6632]  __netlink_deliver_tap+0x3c4/0x7f0
[  181.398675][ T6632]  ? netlink_deliver_tap+0x2e/0x1b0
[  181.398698][ T6632]  netlink_deliver_tap+0x19d/0x1b0
[  181.398728][ T6632]  netlink_sendskb+0x68/0x140
[  181.398769][ T6632]  netlink_unicast+0x39d/0x990
[  181.398803][ T6632]  ? __asan_memcpy+0x40/0x70
[  181.398846][ T6632]  ? __pfx_netlink_unicast+0x10/0x10
[  181.398900][ T6632]  netlink_rcv_skb+0x294/0x480
[  181.398928][ T6632]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  181.398959][ T6632]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.399027][ T6632]  ? netlink_deliver_tap+0x2e/0x1b0
[  181.399058][ T6632]  netlink_unicast+0x7f6/0x990
[  181.399111][ T6632]  ? __pfx_netlink_unicast+0x10/0x10
[  181.399142][ T6632]  ? __virt_addr_valid+0x45f/0x530
[  181.399168][ T6632]  ? __phys_addr_symbol+0x2f/0x70
[  181.399189][ T6632]  ? __check_object_size+0x475/0x720
[  181.399233][ T6632]  netlink_sendmsg+0x8b3/0xca0
[  181.399282][ T6632]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.399315][ T6632]  ? aa_sock_msg_perm+0xf3/0x1d0
[  181.399361][ T6632]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.399384][ T6632]  __sock_sendmsg+0x221/0x270
[  181.399419][ T6632]  ____sys_sendmsg+0x524/0x860
[  181.399473][ T6632]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.399505][ T6632]  ? __fget_files+0x2a/0x410
[  181.399534][ T6632]  ? __fget_files+0x2a/0x410
[  181.399574][ T6632]  __sys_sendmmsg+0x36a/0x720
[  181.399625][ T6632]  ? __pfx___sys_sendmmsg+0x10/0x10
[  181.399673][ T6632]  ? __pfx_lock_release+0x10/0x10
[  181.399705][ T6632]  ? kstrtouint_from_user+0x11f/0x190
[  181.399780][ T6632]  ? ksys_write+0x22a/0x2b0
[  181.399809][ T6632]  ? __pfx_lock_release+0x10/0x10
[  181.399856][ T6632]  ? sb_end_write+0xe9/0x1c0
[  181.399880][ T6632]  ? vfs_write+0x7fa/0xd10
[  181.399914][ T6632]  ? __mutex_unlock_slowpath+0x227/0x800
[  181.400000][ T6632]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  181.400041][ T6632]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  181.400079][ T6632]  ? do_syscall_64+0x100/0x230
[  181.400121][ T6632]  __x64_sys_sendmmsg+0xa0/0xb0
[  181.400148][ T6632]  do_syscall_64+0xf3/0x230
[  181.400184][ T6632]  ? clear_bhb_loop+0x45/0xa0
[  181.400221][ T6632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.400251][ T6632] RIP: 0033:0x7f49edb8d169
[  181.400272][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.400290][ T6632] RSP: 002b:00007f49ee91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  181.400314][ T6632] RAX: ffffffffffffffda RBX: 00007f49edda5fa0 RCX: 00007f49edb8d169
[  181.400330][ T6632] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000003
[  181.400344][ T6632] RBP: 00007f49ee91f090 R08: 0000000000000000 R09: 0000000000000000
[  181.400358][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.400371][ T6632] R13: 0000000000000000 R14: 00007f49edda5fa0 R15: 00007ffdc4e36058
[  181.400414][ T6632]  </TASK>
[  181.620389][ T6636] loop3: detected capacity change from 0 to 8
[  181.637416][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.181'.
[  181.661714][ T6636] squashfs image failed sanity check
[  183.276333][ T6645] kAFS: No cell specified
[  183.601844][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.186'.
[  183.736427][ T6654] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  183.783859][ T5932] IPVS: starting estimator thread 0...
[  184.008131][ T6656] IPVS: using max 18 ests per chain, 43200 per kthread
[  186.316037][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[  186.951234][ T6684] loop0: detected capacity change from 0 to 256
[  186.967925][ T6681] overlay: filesystem on ./bus not supported as upperdir
[  187.000141][ T6684] msdos: Unknown parameter 'nodotS'
[  187.162027][ T6684] loop0: detected capacity change from 0 to 1024
[  187.219487][ T6684] hfsplus: Unknown parameter ''
[  187.237143][ T6686] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.261174][ T6686] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  187.954723][ T6689] FAULT_INJECTION: forcing a failure.
[  187.954723][ T6689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.027991][ T6689] CPU: 0 UID: 0 PID: 6689 Comm: syz.2.197 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  188.028024][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  188.028036][ T6689] Call Trace:
[  188.028045][ T6689]  <TASK>
[  188.028054][ T6689]  dump_stack_lvl+0x241/0x360
[  188.028102][ T6689]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.028128][ T6689]  ? __pfx__printk+0x10/0x10
[  188.028162][ T6689]  ? snprintf+0xda/0x120
[  188.028192][ T6689]  should_fail_ex+0x40a/0x550
[  188.028224][ T6689]  _copy_to_user+0x31/0xb0
[  188.028262][ T6689]  simple_read_from_buffer+0xdc/0x170
[  188.028308][ T6689]  proc_fail_nth_read+0x1e9/0x250
[  188.028337][ T6689]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.028366][ T6689]  ? rw_verify_area+0x243/0x630
[  188.028393][ T6689]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.028419][ T6689]  vfs_read+0x1f8/0xb40
[  188.028448][ T6689]  ? fdget_pos+0x254/0x320
[  188.028472][ T6689]  ? __pfx___mutex_lock+0x10/0x10
[  188.028505][ T6689]  ? __pfx_vfs_read+0x10/0x10
[  188.028527][ T6689]  ? do_sys_openat2+0x179/0x1c0
[  188.028555][ T6689]  ? __fget_files+0x2a/0x410
[  188.028580][ T6689]  ? __fget_files+0x395/0x410
[  188.028600][ T6689]  ? __fget_files+0x2a/0x410
[  188.028638][ T6689]  ksys_read+0x18f/0x2b0
[  188.028670][ T6689]  ? __pfx_ksys_read+0x10/0x10
[  188.028698][ T6689]  ? do_syscall_64+0x100/0x230
[  188.028735][ T6689]  ? do_syscall_64+0xb6/0x230
[  188.028771][ T6689]  do_syscall_64+0xf3/0x230
[  188.028803][ T6689]  ? clear_bhb_loop+0x45/0xa0
[  188.028839][ T6689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.028867][ T6689] RIP: 0033:0x7fdc06b8bb7c
[  188.028891][ T6689] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  188.028908][ T6689] RSP: 002b:00007fdc049f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  188.028935][ T6689] RAX: ffffffffffffffda RBX: 00007fdc06da5fa0 RCX: 00007fdc06b8bb7c
[  188.028949][ T6689] RDX: 000000000000000f RSI: 00007fdc049f60a0 RDI: 0000000000000003
[  188.028962][ T6689] RBP: 00007fdc049f6090 R08: 0000000000000000 R09: 0000000000000000
[  188.028974][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.028986][ T6689] R13: 0000000000000000 R14: 00007fdc06da5fa0 R15: 00007ffe82d644c8
[  188.029027][ T6689]  </TASK>
[  188.430882][ T6678] loop4: detected capacity change from 0 to 32768
[  188.614437][ T6695] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  188.677783][ T6678] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  189.391105][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'.
[  189.445847][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'.
[  189.496868][ T6702] netlink: 46 bytes leftover after parsing attributes in process `syz.2.201'.
[  189.604504][ T5841] ocfs2: Unmounting device (7,4) on (node local)
[  190.167978][ T6690] loop3: detected capacity change from 0 to 32768
[  190.377737][ T6711] loop1: detected capacity change from 0 to 128
[  191.523932][ T6729] overlayfs: missing 'workdir'
[  191.525335][ T6727] overlay: filesystem on ./bus not supported as upperdir
[  191.710220][ T6732] loop1: detected capacity change from 0 to 512
[  191.761985][ T6732] ext4: Unknown parameter 'audit'
[  192.570202][ T6737] loop0: detected capacity change from 0 to 164
[  193.503778][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'.
[  194.293470][ T6752] capability: warning: `syz.4.215' uses 32-bit capabilities (legacy support in use)
[  194.763323][ T6754] loop3: detected capacity change from 0 to 512
[  194.782650][ T6756] FAULT_INJECTION: forcing a failure.
[  194.782650][ T6756] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.816217][ T6754] ext2: Unknown parameter 'dont_appraise'
[  194.833235][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.2.217 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  194.833266][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  194.833279][ T6756] Call Trace:
[  194.833288][ T6756]  <TASK>
[  194.833297][ T6756]  dump_stack_lvl+0x241/0x360
[  194.833333][ T6756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.833359][ T6756]  ? __pfx__printk+0x10/0x10
[  194.833385][ T6756]  ? __pfx_lock_release+0x10/0x10
[  194.833416][ T6756]  ? __local_bh_enable_ip+0x168/0x200
[  194.833444][ T6756]  ? copy_fpstate_to_sigframe+0x184/0xe20
[  194.833482][ T6756]  should_fail_ex+0x40a/0x550
[  194.833514][ T6756]  copy_fpstate_to_sigframe+0xb29/0xe20
[  194.833569][ T6756]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  194.833612][ T6756]  ? do_raw_spin_lock+0x14f/0x370
[  194.833650][ T6756]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  194.833680][ T6756]  ? do_raw_spin_unlock+0x13c/0x8b0
[  194.833719][ T6756]  ? fpu__alloc_mathframe+0xab/0x130
[  194.833754][ T6756]  get_sigframe+0x5d9/0x800
[  194.833797][ T6756]  ? __pfx_get_sigframe+0x10/0x10
[  194.833821][ T6756]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  194.833860][ T6756]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  194.833907][ T6756]  x64_setup_rt_frame+0x17e/0xd20
[  194.833934][ T6756]  ? lockdep_hardirqs_on+0x99/0x150
[  194.833966][ T6756]  ? _raw_spin_unlock_irq+0x2e/0x50
[  194.834017][ T6756]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  194.834064][ T6756]  arch_do_signal_or_restart+0x458/0x860
[  194.834098][ T6756]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  194.834124][ T6756]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  194.834179][ T6756]  ? syscall_exit_to_user_mode+0xa3/0x340
[  194.834216][ T6756]  syscall_exit_to_user_mode+0xce/0x340
[  194.834252][ T6756]  do_syscall_64+0x100/0x230
[  194.834286][ T6756]  ? clear_bhb_loop+0x45/0xa0
[  194.834321][ T6756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.834350][ T6756] RIP: 0033:0x7fdc06b8d167
[  194.834370][ T6756] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  194.834388][ T6756] RSP: 002b:00007fdc049f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  194.834411][ T6756] RAX: 0000000000000116 RBX: 00007fdc06da5fa0 RCX: 00007fdc06b8d169
[  194.834426][ T6756] RDX: 000000000000000f RSI: 00004000000014c0 RDI: 0000000000000004
[  194.834439][ T6756] RBP: 00007fdc049f6090 R08: 0000000000000000 R09: 0000000000000000
[  194.834453][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.834465][ T6756] R13: 0000000000000000 R14: 00007fdc06da5fa0 R15: 00007ffe82d644c8
[  194.834507][ T6756]  </TASK>
[  195.995289][ T6762] mmap: syz.0.216 (6762) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  196.307865][ T6772] warning: `syz.2.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  198.178561][ T5922] Bluetooth: (null): Invalid header checksum
[  198.380841][ T5922] Bluetooth: (null): Invalid header checksum
[  198.538954][ T5922] Bluetooth: (null): Invalid header checksum
[  198.609792][ T6794] overlay: filesystem on ./bus not supported as upperdir
[  198.627659][ T5922] Bluetooth: (null): Invalid header checksum
[  198.661535][ T6792] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  199.117867][ T6806] FAULT_INJECTION: forcing a failure.
[  199.117867][ T6806] name failslab, interval 1, probability 0, space 0, times 0
[  199.131116][ T6806] CPU: 1 UID: 0 PID: 6806 Comm: syz.4.228 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  199.131145][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  199.131158][ T6806] Call Trace:
[  199.131169][ T6806]  <TASK>
[  199.131178][ T6806]  dump_stack_lvl+0x241/0x360
[  199.131215][ T6806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.131241][ T6806]  ? __pfx__printk+0x10/0x10
[  199.131279][ T6806]  ? ___ratelimit+0xa/0x690
[  199.131316][ T6806]  should_fail_ex+0x40a/0x550
[  199.131357][ T6806]  should_failslab+0xac/0x100
[  199.131396][ T6806]  __kmalloc_cache_noprof+0x70/0x390
[  199.131441][ T6806]  ? h5_open+0x113/0x5d0
[  199.131473][ T6806]  h5_open+0x113/0x5d0
[  199.131503][ T6806]  ? __pfx_h5_open+0x10/0x10
[  199.131566][ T6806]  hci_uart_tty_ioctl+0x791/0xa00
[  199.131605][ T6806]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  199.131643][ T6806]  tty_ioctl+0x998/0xdc0
[  199.131673][ T6806]  ? __pfx_tty_ioctl+0x10/0x10
[  199.131704][ T6806]  __se_sys_ioctl+0xf1/0x160
[  199.131739][ T6806]  do_syscall_64+0xf3/0x230
[  199.131772][ T6806]  ? clear_bhb_loop+0x45/0xa0
[  199.131810][ T6806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.131839][ T6806] RIP: 0033:0x7f821a38d169
[  199.131860][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.131878][ T6806] RSP: 002b:00007f821b21c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.131901][ T6806] RAX: ffffffffffffffda RBX: 00007f821a5a6080 RCX: 00007f821a38d169
[  199.131918][ T6806] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000007
[  199.131931][ T6806] RBP: 00007f821b21c090 R08: 0000000000000000 R09: 0000000000000000
[  199.131945][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.131957][ T6806] R13: 0000000000000000 R14: 00007f821a5a6080 R15: 00007ffd04a09c58
[  199.132002][ T6806]  </TASK>
[  199.799050][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  199.809546][ T6803] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000067: 0000 [#1] PREEMPT SMP KASAN PTI
[  199.822170][ T6803] KASAN: null-ptr-deref in range [0x0000000000000338-0x000000000000033f]
[  199.830590][ T6803] CPU: 0 UID: 0 PID: 6803 Comm: syz.4.228 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  199.840663][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  199.850722][ T6803] RIP: 0010:__lock_acquire+0x6a/0x2100
[  199.856213][ T6803] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 2b c3 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 58 6c 8c 00 48 be 00 00 00 00 00 fc
[  199.875827][ T6803] RSP: 0000:ffffc9001bf2f870 EFLAGS: 00010002
[  199.881904][ T6803] RAX: 0000000000000067 RBX: 0000000000000000 RCX: 0000000000000000
[  199.889879][ T6803] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000338
[  199.897873][ T6803] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[  199.905861][ T6803] R10: dffffc0000000000 R11: fffffbfff207b48f R12: ffff8880269cbc00
[  199.913846][ T6803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000338
[  199.921843][ T6803] FS:  0000555555a9e500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  199.930790][ T6803] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.937386][ T6803] CR2: 000000110c406239 CR3: 000000002816c000 CR4: 00000000003526f0
[  199.945372][ T6803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  199.953352][ T6803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  199.961332][ T6803] Call Trace:
[  199.964621][ T6803]  <TASK>
[  199.967564][ T6803]  ? __die_body+0x5f/0xb0
[  199.971908][ T6803]  ? die_addr+0xb0/0xe0
[  199.976078][ T6803]  ? exc_general_protection+0x3dd/0x5d0
[  199.981642][ T6803]  ? asm_exc_general_protection+0x26/0x30
[  199.987384][ T6803]  ? __lock_acquire+0x6a/0x2100
[  199.992258][ T6803]  ? __pfx_lock_release+0x10/0x10
[  199.997309][ T6803]  ? rcu_read_lock_any_held+0x8d/0x160
[  200.002778][ T6803]  lock_acquire+0x1ed/0x550
[  200.007305][ T6803]  ? __timer_delete_sync+0x12f/0x310
[  200.012604][ T6803]  ? rcu_is_watching+0x15/0xb0
[  200.017383][ T6803]  ? __pfx_lock_acquire+0x10/0x10
[  200.022430][ T6803]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  200.028429][ T6803]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  200.034775][ T6803]  ? __timer_delete_sync+0x12f/0x310
[  200.040073][ T6803]  __timer_delete_sync+0x148/0x310
[  200.045198][ T6803]  ? __timer_delete_sync+0x12f/0x310
[  200.050517][ T6803]  ? __pfx___timer_delete_sync+0x10/0x10
[  200.056195][ T6803]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  200.062203][ T6803]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  200.068557][ T6803]  h5_close+0x4b/0x170
[  200.072644][ T6803]  hci_uart_tty_close+0x205/0x290
[  200.077691][ T6803]  tty_ldisc_kill+0xa3/0x1a0
[  200.082305][ T6803]  tty_ldisc_release+0x1a1/0x200
[  200.087261][ T6803]  tty_release_struct+0x2b/0xe0
[  200.092132][ T6803]  tty_release+0xd06/0x12c0
[  200.096654][ T6803]  ? __pfx_tty_release+0x10/0x10
[  200.101601][ T6803]  __fput+0x3e9/0x9f0
[  200.105599][ T6803]  task_work_run+0x24f/0x310
[  200.110202][ T6803]  ? _raw_spin_unlock+0x28/0x50
[  200.115066][ T6803]  ? __pfx_task_work_run+0x10/0x10
[  200.120192][ T6803]  ? syscall_exit_to_user_mode+0xa3/0x340
[  200.125937][ T6803]  syscall_exit_to_user_mode+0x13f/0x340
[  200.131583][ T6803]  do_syscall_64+0x100/0x230
[  200.136189][ T6803]  ? clear_bhb_loop+0x45/0xa0
[  200.140967][ T6803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.146873][ T6803] RIP: 0033:0x7f821a38d169
[  200.151296][ T6803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.170909][ T6803] RSP: 002b:00007ffd04a09db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  200.179336][ T6803] RAX: 0000000000000000 RBX: 00007f821a5a7ba0 RCX: 00007f821a38d169
[  200.187314][ T6803] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  200.195313][ T6803] RBP: 00007f821a5a7ba0 R08: 0000000000000000 R09: 0000000e04a0a0af
[  200.203299][ T6803] R10: 00007f821a5a7ac0 R11: 0000000000000246 R12: 0000000000030c39
[  200.211363][ T6803] R13: 00007ffd04a09eb0 R14: ffffffffffffffff R15: 00007ffd04a09ed0
[  200.219355][ T6803]  </TASK>
[  200.222378][ T6803] Modules linked in:
[  200.226299][ T6803] ---[ end trace 0000000000000000 ]---
[  200.231756][ T6803] RIP: 0010:__lock_acquire+0x6a/0x2100
[  200.237234][ T6803] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 2b c3 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 58 6c 8c 00 48 be 00 00 00 00 00 fc
[  200.256850][ T6803] RSP: 0000:ffffc9001bf2f870 EFLAGS: 00010002
[  200.262928][ T6803] RAX: 0000000000000067 RBX: 0000000000000000 RCX: 0000000000000000
[  200.270918][ T6803] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000338
[  200.278894][ T6803] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[  200.286869][ T6803] R10: dffffc0000000000 R11: fffffbfff207b48f R12: ffff8880269cbc00
[  200.294846][ T6803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000338
[  200.302821][ T6803] FS:  0000555555a9e500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  200.311759][ T6803] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  200.318350][ T6803] CR2: 000000110c406239 CR3: 000000002816c000 CR4: 00000000003526f0
[  200.326334][ T6803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  200.334311][ T6803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  200.342308][ T6803] Kernel panic - not syncing: Fatal exception
[  200.348722][ T6803] Kernel Offset: disabled
[  200.353054][ T6803] Rebooting in 86400 seconds..