last executing test programs: 8m36.48472807s ago: executing program 32 (id=20): r0 = syz_mount_image$jfs(&(0x7f0000000880), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000000300)=ANY=[], 0x54, 0x6034, &(0x7f0000006c80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000a40)="c286f3eb9e1d06720afbdc049bbf26a4998a68ebe7c3d393163ec3476f3a973db44c6a8746f83f63059d866fba14ed84f870106dfb1e707d0dcc82d311b774babcc6280aeae6d83cf18a112870f2d05d7d6cba9296fd5d59ca05985b6aaa8dbdc9dc8a4dfc87e013b6b6a6ec02db1646451be143bf7fc08f3969c9f44ac6d4bcedbb0dd4bae3527659c0", 0x8a}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r6 = openat2(r0, &(0x7f0000000100)='\x00', &(0x7f0000000280)={0x2000, 0xa5, 0x1a}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x5, 0xc3, &(0x7f0000000600)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector=0x11, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) fstat(r0, &(0x7f0000000980)) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200080000000005, 0x89c0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x1}) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000000840)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000780)=""/9, 0x9}], 0x2, &(0x7f0000000800)=""/11, 0xb}, 0x20) recvmsg$unix(r7, &(0x7f00000005c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/230, 0xe6}], 0x1, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x101) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 8m36.083908902s ago: executing program 33 (id=22): syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="75d0148a"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000340)=ANY=[], 0x200002e6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000280)={0x40, 0x21, 0xf, {0xf, 0x30, "bd7029438ac774ac0f82bc52b4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = memfd_create(&(0x7f0000001840)='\b\x9d\x85\xf0\xce\x95\xe2\n\xa1c\xdc\xdc\xf2>c\rG\xfcO\x8c=\xc1\x00\x8aSpA\xd4\x91\x9a\x02n(\xa0<\x01\x16\x98\x85D\x89>N\x8ar\x17O\x05KR\xe2{mn\xcc\xbfS\xc0\xa7\v\xb5$\xee\x02\x00\x00\x00\xa9\x1cn,B\xd5?\xe5\x04\x00+P\x00\x00\x10\x00\x00]\xdeL\xdb\x95\x80\x00\x00\x00\x00\x00\x00\x1d\xe7m\x04A\xdb\x8d\x01\x00\x00\x00\x00\x00\x00\x00\x00\xdd\x06\x00\xcfF\x032+\x9b\x7f\x19\xc6\xa2w\xb0\x87\xf8\xc1\xd8\xc2\x92\xb6\x19\"\x9a\xe8\xdf\x95Bh~\xec\xefD%Xl\xe6/\xf2\xc4\xeb]\x84\x8b o\xbb]\xac\"%\xe7\a\x7f\xc3\xae\xe5\xd4\x91\x05\x13\x110\xbb\az\xd4\x1e\x1b/\xfc\x1d\xb0\x8b\x0eQs\x81I`I\xe97\xe3B\xa9\xe7\x19Wy\xa0[,\xe8\xe9\xa9\x8dn\xe4%6\xe0\xe0\xe2W\x11}bq\xebS\x1b\xe1\xcb\x90~F1\xd5\xc3\xc52m\x15\x96y\xa9/-\x04\xb1\xe2\xa50\x90\xcb\x1f\xd8\x03\xb7\xc06\x1db\xd6\xcc\xf5\t\x00\xdd\xe9H5\xf4h\x8e\x8c1\xadx\xa4\xb4\xe1+\x1d $2wu\xfe\x87\x19\x9a\xe1F}+\xf3\xccg\"\xb3~%!\x99\x8b+\xa8\xb1\x99\x9ev\x1f(\xd6i|V\r\xf4\x19\xd2[b\xf4\x17S~n\t(\xb4k\xdf\x8d\x1fH\xa6!V\x1b\x18\x81\x14G\x10\x9b>#\x18]\xa3\x06@\xf5\x0f\x03\x15\x13\xb7\xeb\x18pU\xbe\xf4\x81S\x00\x98\xa8\xdaT\xcb\x06\xa7\xc7\xd8G]\xc4\x81E\xd3\xee\xc3\xfa\x8a\x91\xb3u\x18nM\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xa9\xa0:\xde\xf3F4\xed1\x05\x91Q\xa0\xf3\xea\xd9\xe2I\x1a=\x9d\xc6\x96T\xaa\xa46\xbc~\xef\x89\x1f0G\x95\xe1bH\xcck\xa0/`\x1a\x96@\x9ep4\xe4N\x015S\xd1\xf6', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, &(0x7f0000000140)=0x7fffffffffffffff, 0x2, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000003c0)=0x50000) r7 = syz_usb_connect$printer(0x2518d9fb7fc66311, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000200000010b8041a024000010203010902240001010120000b06097e351fdfb502da2602"], &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xdc, 0x2, 0x5, 0x20, 0x8}, 0x21, &(0x7f0000000100)={0x5, 0xf, 0x21, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x1, 0x8, 0x2, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x1, 0xded3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x4, 0x3}]}, 0x2, [{0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="9e034675f863258c7f6d838b57e644494f5a980368ffde5a97e2599aed636a0943dd745fcd286482d5d11a27f412e53f0b4520cebf46bd58d3709a6c7950f33f335212a5d2e3a83c45374c6e3859ab4a35e65d1245adc21c57c088f18898f667c70512f4d5bd61139fe58d5ff587058f976ee32dd7327a6adf96eb55060f49d75babbac271630d6589ab2db6ffa55d722a25530fe167f6097bf3a2563110"]}, {0xf5, &(0x7f0000000380)=@string={0xf5, 0x3, "1b143631523e80f32ee538edaa722a0fff29532338d67d94534f4eeea204d85c1c3035030575dfb5da457670ed0627a2f7e286b7a7e85d933ccd8bd85eb65e44e3280334b9a1233b466598961269f8cb0ce410188a1c4fd73fc12cb94f2dada54004a258d7da13b88ab9c9d66df14de22049514525b6eb16ad116a011ffa3f8706cff2579b24a8d17cec7fc6dafd0bdaff9e76013c4824962517bc0a288cb3a5d29e827a834525e1f62dd61820c8c54216abf3b5cd103d41a1ad3466cae99419b5baae69c377c61e980ed769832bb7635ce6ecd5efb0dc4955e249154ee89836600cad2f7348c8a51e522cf1b998ce7038ce97"}}]}) syz_usb_control_io$printer(r7, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x20, 0x24, 0x54, {0x54, 0x8, "d6c66b0f6514a6b37dbcf2bf6b79a38d6014e0b70ca9092d3a950e85487ab1f97f3ffebbff8704ab78ac9c012efdffccde4193f7c083790b7b7c3bb0020c5072b6882804000bdeaf25ad26afe0468559b03d"}}, &(0x7f0000000580)={0x0, 0x3, 0x6, @string={0x6, 0x3, "7346180e"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000600)={0x0, 0x1e, 0xe7, "024214413051ec4c1814681dd6708900c3873ff9d4f324a1d94dd9a9487d9a7559225fdd4f818e86872bc77473808e1ce59c8321c11a641d10a60bb70e0f19424d7dc1ccf89378af19432d1c1db98dc45b5a1fb986724172c7082bc3290e5058c581f77049f52f555a2eb9041f526b8746b9631197a31f30ecebe1150bb23fce95d8c1e002f723a86252da9014b5a70a50974f5d98fe37b0b36aff7d92a5dbb62c45a140ad93ae98c4a8783c5c7bf51bd8162a53c10fd0db0723665f73920a64568a6f4af665e0eb36a1d04b926a0359eeaa2a7f35117d42ad78c83be51198c4daa46bafa25ef2"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000780)={0x20, 0x0, 0xf2, {0xf0, "aab8a55bbddea714fc2f5327240cac4b084b14264861957ee2cd09afa3aa5df891200b2a2a23ffcda5926b068d99a559bdb96107b7c43062210909d0bb332c6bcc17cc5768309e263ceb9788556af2c755095334cf2d632bd337fab272efa149fc0f7555b26d2dd60c384c4c3f7ea108ca392b4b987d5ba70f2d531dbb08ff0057879ad6b1ad28b090e8b0c3e8f62f028d08c07f4f0cd67a6f1568c10c3d7c08953f7d791fd16e2f5d340182626817c7e56967958c93769b8489c3e29631fb0885e98cee3de37e347d7fb2c969aa785c35f604e2acdac8540dc254934c69b470d8308063d92059b99094dcc4faff9f37"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x4}}) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f00000000c0)={0x3, 0x202, 0x2, 0x72a, 0x402, 0x4}) 7m43.093510495s ago: executing program 34 (id=160): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x176c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1720, 0x2, [@TCA_BPF_ACT={0x171c, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x100, 0xa, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '/.-##/\x00'}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\'+!!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffe55, 0x5, 0x1, 0xa, 0x3}}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x104, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xc9, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437ce"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xb8, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x8d, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xdc, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0xffffffffffffffff, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0xa, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x1110, 0x0, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0xffffffffffffffff, 0x1, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd0c, 0x43, 0x10000000, 0x9, 0x9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x4, 0x800, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3, 0x6, 0xffff, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x200, 0x7, 0x8, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x7, 0x5, 0xfffffe9b, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x1000, 0x4, 0x2, 0x7}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ctinfo={0x9c, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x24}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0xfffffff9, 0xffffffffffffffff, 0x3, 0xf4}}]}, {0x45, 0x6, "a0b751e7041ba771a2930a6bd4c281ec3e5938bb7e7d3fc7434ab2f9121991540987b65a5ead91262de3e39f12c9fa71cdf5de512057c460476a0c6f44941aec04"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xb4, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x83, 0x6, "3f0ec1c8b3162113b9a063f29d6db39c47bdc51818fd98e34a4831d4b1d9d4020f459bff4d220606edf1caa829b2379d4b0e467ec938de48f2151034e676b9a0f12b02ae628e5daae31b7939980b47fa2893c24d235656f31c33bd05c1b8d20aaed79805905a93e28458043cb51574e9b0038cbe9c85afc4b843aae77faa2d"}, {0xc, 0x7, {0xa3aa1d9a9536b33}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x176c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 7m40.279008705s ago: executing program 35 (id=171): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000031c0), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xfc, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x886}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x476}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x38}, {0x8, 0xb, 0x80000000}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4040001) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)={0x5c, 0x3, '\x00', [@ra={0x5, 0x2, 0xb}, @pad1, @enc_lim={0x4, 0x1, 0xf}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, 0x28) write$binfmt_misc(r6, &(0x7f0000000100)="fde56d541c9d43c024e8eb23871e4e62738fabb68eb05e2ea9a83426189978275ac0914416c0f96cb20af6ca4670c4c9adb3b553b49779b609e5f61d", 0x3c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) socket$tipc(0x1e, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r5, 0x0, r8, 0x0, 0x4000000000000a12, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 6m15.377796073s ago: executing program 36 (id=450): mount$tmpfs(0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x36]}}]}) 5m19.229343746s ago: executing program 37 (id=630): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x48010) syz_usb_control_io(r1, 0x0, 0x0) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="cf4644b9fdaead757a2a5f22567733a12385a3d0243ef79be3e53f8fcceb65fddeaafdbc32a22fc99a707894ff70dad3bbaf9e190a6b72853f644ae5365e06124f200a31f09553cb5b72292390a2398a7caad69194d9a8e7d7db72a863184e30392dc57e4442d5d0c310e19a02bf12c7a0fc7fe3edb99226b09cb12640509134065e04192747c865da031a20e2657902edb9bd9246d4c7ddb2ed032a3fb3", 0x9e}, {&(0x7f0000000140)="3f189f333a27da71fbe7ff18dff1764873", 0x11}, {&(0x7f0000000180)="d58afe794ac5efff82a70dc3abdf7961d8fab85382d381cb094ef3d8a0d52c3f516538e352d4fe743e570dc23d2b9c20eac72b5fceb1170917c6f9c5aecd22e07cebf150acf368f81a282f5f94a22ec122efb058efbb3395e4316b6e5fa6a8b0155775483d1674a871de247a200ae9995c548180225a13a9f9720227483773cdfc9272312d1d0e10aaf6be86c99383329089505a1f34adbcb570a1cd3b3fc278f34d846b8a31558947fdd26a25ba77b9e1fbcbd7e7ddd21e85242f92ec16033a0a4ddf70f1d8c58b2f372b297731a04c4e27061bf82538af37bbfe68fae049eaafadbd7c8724c95b4ce89b7c15c1917e", 0xf0}, {&(0x7f00000002c0)="7c1619595c2c790fae2373a940316153994271341750053700225ea4e54bb0d1c067507782b35f815ccf8a149d2c473e1e9b58d1915709d15733f561a57ab54e81118219971756464b9798a75725766f3e1f284c46ad002c7147d09dbe9c2535d7b236b7fa9e63109eb48804303575fd4c5891a0", 0x74}, {&(0x7f0000000380)="a7", 0x1}, {&(0x7f00000003c0)="f18aaccb9e8c581ba34a58523c313e9a45cf55d6cea40c901092d0ed36ef116cb011075fa6ac100880dd283ee3ab6ecf2041a03e56fe7489c717ff5340e811f53d712569c7afcaad88cdbce821580df5dfb5b07ddeb11776a9bd838302da90a948a56ad4e74fe886d8356602f2dbc7913c0bbed3676b65de5b96b64a0b1f732cd1df3d7a0930a5aab46c94d6644553a7556b27fcb550efbe7d72aa5cb23c74a2b7ec160125637adc74f42a18a63480", 0xaf}], 0x6, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffbfc}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x6e, [@loopback]}, @rr={0x7, 0xb, 0x57, [@rand_addr=0x64010100, @empty]}, @generic={0x7, 0x6, "1e402b37"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@generic={0x86, 0xf, "d948c4b2ee43f0e4aff161568f"}, @ssrr={0x89, 0x13, 0x9d, [@private=0xa010100, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x23, 0x31, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp_prespec={0x44, 0x44, 0x2c, 0x3, 0xd, [{@loopback, 0x6}, {@rand_addr=0x64010102, 0xfffff800}, {@remote, 0xf624}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0xeb3}, {@empty, 0xfffffffb}, {@rand_addr=0x64010100, 0x7}]}, @generic={0x82, 0x3, "8d"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x148}, 0xd77dd6606f96f4c3) 2m6.859692096s ago: executing program 9 (id=1264): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) 2m2.112772548s ago: executing program 9 (id=1275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x4}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) shutdown(r0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000400)={'pcl818\x00', [0x100, 0x80000003, 0x2, 0xc, 0xfffffffe, 0x5, 0x79, 0xfffffffb, 0x1, 0x0, 0x40, 0x20001, 0xfffffffc, 0x1, 0x2, 0x100, 0xfffffffb, 0xd, 0x5, 0x80000000, 0x8, 0x5, 0x0, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x80000008, 0xa6b5, 0x24a05ffd, 0xffffffff]}) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000240)={0x2, 0x8, 0x100, 0x401, 0x2, 0x0, 0x80, 0x200, 0x0, 0x101, 0x40, 0x401, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") getpid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) 2m2.112646328s ago: executing program 6 (id=1276): syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539"], 0x0) 1m59.075614326s ago: executing program 6 (id=1282): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 1m58.756509376s ago: executing program 7 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a00)={0x100000001, [], 0x1, "ec4a7a2783cefc"}) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1m58.268665412s ago: executing program 0 (id=1285): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) 1m58.222622743s ago: executing program 9 (id=1286): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 1m58.079464138s ago: executing program 7 (id=1287): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x20) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r6, &(0x7f0000000240), 0xb375) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) read$msr(r6, &(0x7f00000004c0)=""/131, 0x83) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10000095fb00", 0x14}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m56.77320444s ago: executing program 7 (id=1288): syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000003280)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601040000000000000000010000031400078005001400fd7900000800084000000044050001000700000005000400040000000900020073797a3000000000050005000a00000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x44885}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006c0001f526bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="867000000024000008000500", @ANYRES32, @ANYBLOB="080013"], 0x30}}, 0x44) 1m55.725406463s ago: executing program 6 (id=1289): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002dc0), 0x101400, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendto$packet(r3, &(0x7f00000000c0)="ea3d8100", 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1m54.298586979s ago: executing program 0 (id=1290): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$eJzs3EtvG0UcAPD/bpK+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRqiIBoXJE/QTAEYlPwAkuCDiBuMIdIVWoF1oOaNHaa9c4dmrHTp3Gv5+02ZndtWf+3h17dsZOAH1rNP+TROyKiN8iYjgiBuoPGC2vbly/PHPz+uWZJLLszb+S/GHx9/XLM5VDk2K9s8iMpRHpJ0kcaFDuwsVLZ6fn5mYvFPmJxXPvTSxcvPTcmXPTp2dPz56fOnbs6JHJF1+Yer4rce7O67r/w/mD+46/ffX1mRNX3/nx67y+u4r9tXGUjXRc5miMVl+Tek92/Owby+5i3SxeNqa8rQ9GxFCp/Q/HQClXNhyvfdzTygHrKsuybOuKrdUewHIGbGJJ9LoGQG9UPujz+9/Kcge7Hz137eXyDVAe941iKe8ZjLQ4Zqjm/rbbRiPixPI/n+dLNByHAADorm/z/s+zjfp/aTxQc9w9xdzQSETcGxF7IuK+iNgbEfdHlI59MCIearP80br8yv7PL9vXFFiL8v7fS8Xc1v/7f5XeX4wMFLndpfiHklNn5mYPF6/JWAxtzfOTq5Tx3au/ftZsX23/L1/y8it9waIefw7WDdCdnF6c7iTmWtc+Ko0BLq2MP6nOBCQRsS8i9q/h+bdFxJmnvzrYbP/t41/F4BoqVCf7MuKp8vlfjrr4K5LV5ycntsXc7OGJylWx0k8/X3mjWfkdxd8F+fnf0fD6r8Y/ktTO1y60X8aV3z9tek+z1ut/S/JWKb2l2PbB9OLihcmILcnyyu1Ttx5byVeOz+MfO9Qg/ptZ/h737xfF4w5ERH4RPxwRj0TEo0XdH4uIxyPiUIPYsqXy+odXnnh37fGvrzz+k22d//YTA2e//6ZZ+a2d/6Ol1FixpZX3v1Yr2MlrBwAAAHeLtPQd+CQdr6bTdHy8/B3+vbEjnZtfWHzm1Pz750+Wvys/EkNpZaRruGY8dLIYG67kp+ryR0rjxlmWZdtL+fGZ+bn1mlMHWrOzSfvP/THQ69oB666teTS/8IJNpQvz6MBdSvuH/qX9Q//S/qF/NWr/SxE3elAV4A67zef/rf8SAGw6+v/Qv7R/6F/aP/SlTn7Xv1piz/H1eubNlhjYGNVoOxHphqhGS4mh4mqvbkk3SMVKia0R0erBS3GnKtbjNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//28vuNQ==") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r5, 0x0, r3, 0x0, 0x1000, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x0) 1m54.298283929s ago: executing program 9 (id=1292): syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539"], 0x0) 1m53.548723813s ago: executing program 6 (id=1294): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) 1m53.325080171s ago: executing program 0 (id=1295): kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) write$binfmt_elf32(r3, &(0x7f0000000a40)=ANY=[], 0x358) 1m52.42594064s ago: executing program 0 (id=1296): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r7, &(0x7f0000000240), 0xb375) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) read$msr(r7, &(0x7f00000004c0)=""/131, 0x83) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10000095fb00", 0x14}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m52.4214462s ago: executing program 7 (id=1308): kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) write$binfmt_elf32(r3, &(0x7f0000000a40)=ANY=[], 0x358) 1m52.10749049s ago: executing program 6 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a00)={0x100000001, [], 0x1, "ec4a7a2783cefc"}) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1m51.343112404s ago: executing program 7 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 1m51.319501085s ago: executing program 0 (id=1302): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r6, &(0x7f0000000240), 0xb375) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) read$msr(r6, &(0x7f00000004c0)=""/131, 0x83) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10000095fb00", 0x14}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m50.408837694s ago: executing program 0 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) 1m50.280722218s ago: executing program 6 (id=1304): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) fallocate(r3, 0x3, 0x4, 0x8000c62) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r4, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) 1m50.181099571s ago: executing program 9 (id=1305): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44885}, 0x8010) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000280)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{0x0}, {0x0}], 0x2) 1m50.140123113s ago: executing program 7 (id=1306): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$eJzs3EtvG0UcAPD/bpK+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRqiIBoXJE/QTAEYlPwAkuCDiBuMIdIVWoF1oOaNHaa9c4dmrHTp3Gv5+02ZndtWf+3h17dsZOAH1rNP+TROyKiN8iYjgiBuoPGC2vbly/PHPz+uWZJLLszb+S/GHx9/XLM5VDk2K9s8iMpRHpJ0kcaFDuwsVLZ6fn5mYvFPmJxXPvTSxcvPTcmXPTp2dPz56fOnbs6JHJF1+Yer4rce7O67r/w/mD+46/ffX1mRNX3/nx67y+u4r9tXGUjXRc5miMVl+Tek92/Owby+5i3SxeNqa8rQ9GxFCp/Q/HQClXNhyvfdzTygHrKsuybOuKrdUewHIGbGJJ9LoGQG9UPujz+9/Kcge7Hz137eXyDVAe941iKe8ZjLQ4Zqjm/rbbRiPixPI/n+dLNByHAADorm/z/s+zjfp/aTxQc9w9xdzQSETcGxF7IuK+iNgbEfdHlI59MCIearP80br8yv7PL9vXFFiL8v7fS8Xc1v/7f5XeX4wMFLndpfiHklNn5mYPF6/JWAxtzfOTq5Tx3au/ftZsX23/L1/y8it9waIefw7WDdCdnF6c7iTmWtc+Ko0BLq2MP6nOBCQRsS8i9q/h+bdFxJmnvzrYbP/t41/F4BoqVCf7MuKp8vlfjrr4K5LV5ycntsXc7OGJylWx0k8/X3mjWfkdxd8F+fnf0fD6r8Y/ktTO1y60X8aV3z9tek+z1ut/S/JWKb2l2PbB9OLihcmILcnyyu1Ttx5byVeOz+MfO9Qg/ptZ/h737xfF4w5ERH4RPxwRj0TEo0XdH4uIxyPiUIPYsqXy+odXnnh37fGvrzz+k22d//YTA2e//6ZZ+a2d/6Ol1FixpZX3v1Yr2MlrBwAAAHeLtPQd+CQdr6bTdHy8/B3+vbEjnZtfWHzm1Pz750+Wvys/EkNpZaRruGY8dLIYG67kp+ryR0rjxlmWZdtL+fGZ+bn1mlMHWrOzSfvP/THQ69oB666teTS/8IJNpQvz6MBdSvuH/qX9Q//S/qF/NWr/SxE3elAV4A67zef/rf8SAGw6+v/Qv7R/6F/aP/SlTn7Xv1piz/H1eubNlhjYGNVoOxHphqhGS4mh4mqvbkk3SMVKia0R0erBS3GnKtbjNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//28vuNQ==") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 1m49.976456568s ago: executing program 9 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000113e80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "31f0a9fb7ddd9f"}) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1m18.192308219s ago: executing program 38 (id=1297): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x4}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) shutdown(r0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000400)={'pcl818\x00', [0x100, 0x80000003, 0x2, 0xc, 0xfffffffe, 0x5, 0x79, 0xfffffffb, 0x1, 0x0, 0x40, 0x20001, 0xfffffffc, 0x1, 0x2, 0x100, 0xfffffffb, 0xd, 0x5, 0x80000000, 0x8, 0x5, 0x0, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x80000008, 0xa6b5, 0x24a05ffd, 0xffffffff]}) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000240)={0x2, 0x8, 0x100, 0x401, 0x2, 0x0, 0x80, 0x200, 0x0, 0x101, 0x40, 0x401, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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") getpid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) 1m18.104093702s ago: executing program 39 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) 1m18.021078585s ago: executing program 40 (id=1306): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 1m17.976010586s ago: executing program 41 (id=1304): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) fallocate(r3, 0x3, 0x4, 0x8000c62) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r4, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) 1m17.917531768s ago: executing program 42 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000113e80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "31f0a9fb7ddd9f"}) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 42.845415914s ago: executing program 3 (id=1410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000001c0)) 42.485428155s ago: executing program 3 (id=1416): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x9a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) 42.34144728s ago: executing program 3 (id=1419): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000740)=""/216, 0x26, 0xd8, 0x1, 0x9}, 0x28) 42.075129668s ago: executing program 3 (id=1420): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x14011, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0xc3, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x35}, 0x404404c) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20048054) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x101, 0x960, {}, {0xee00}, 0x0, 0x2}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0xfffffffffe000001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000200)) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r6, 0x8000000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000200001032abd6700ffdbdf250200000008"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xa, 0x0, 0x100000}, 0x20) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100021, 0x0) 39.074236664s ago: executing program 3 (id=1445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e6ffffff85000000b000000085000000d000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 37.853361443s ago: executing program 3 (id=1461): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffd, @local}, 0x10, 0x0}, 0x810) 37.569523162s ago: executing program 43 (id=1461): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffd, @local}, 0x10, 0x0}, 0x810) 7.965119826s ago: executing program 2 (id=1716): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x123}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7.84079955s ago: executing program 2 (id=1719): syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b0000000000", 0xf, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x8007}, 0x1c) recvmmsg(r1, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@rc={0x1f, @none}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/38, 0x26}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000001840)=""/194, 0xc2}, {&(0x7f0000001940)=""/76, 0x4c}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/30, 0x1e}], 0x8, &(0x7f0000003a80)=""/213, 0xd5}, 0x5}], 0x1, 0x40002040, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.427473285s ago: executing program 5 (id=1736): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) 6.25749323s ago: executing program 2 (id=1737): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/152, 0x98}, {&(0x7f0000001700)=""/32, 0x20}, {&(0x7f0000001740)=""/120, 0x78}], 0x8, &(0x7f0000001840)=""/243, 0xf3}, 0x2) 5.809714385s ago: executing program 1 (id=1739): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) 5.808133415s ago: executing program 4 (id=1740): socket$kcm(0x28, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6e22, 0xfffffffc, @remote, 0x7}, 0x80, 0x0}, 0x20000000) 5.609281811s ago: executing program 1 (id=1741): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.579101762s ago: executing program 4 (id=1742): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b00)={r1, 0x58, 0x0}, 0x10) 5.578689592s ago: executing program 5 (id=1743): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000002800)=""/4173, 0x104d}, {&(0x7f0000000880)=""/92, 0x5c}], 0x2}, 0x10100) 5.460846726s ago: executing program 1 (id=1744): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000200), &(0x7f00000002c0)=r0}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000200)={'dvmrp1\x00', @broadcast}) 5.388096348s ago: executing program 4 (id=1745): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x88) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) write$cgroup_pid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 5.387470368s ago: executing program 5 (id=1746): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x82}, 0x80d1) 5.372097589s ago: executing program 8 (id=1747): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x200) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) 5.31142188s ago: executing program 2 (id=1748): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.229283083s ago: executing program 4 (id=1749): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 5.228987303s ago: executing program 8 (id=1750): kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) write$binfmt_elf32(r3, &(0x7f0000000a40)=ANY=[], 0x358) 5.228789203s ago: executing program 5 (id=1751): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r6, &(0x7f0000000240), 0xb375) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) read$msr(r6, &(0x7f00000004c0)=""/131, 0x83) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10000095fb00", 0x14}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 5.158229695s ago: executing program 1 (id=1752): syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006c0001f526bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="867000000024000008000500", @ANYRES32, @ANYBLOB="080013"], 0x30}}, 0x44) 5.125372157s ago: executing program 2 (id=1753): syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009"], 0x0) 4.909321473s ago: executing program 4 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 4.184578967s ago: executing program 5 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a00)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "ec4a7a2783cefc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000113e80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "31f0a9fb7ddd9f"}) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 4.115153449s ago: executing program 8 (id=1756): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r2, 0x0, r1, 0x0, 0x1000, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) 1.733427654s ago: executing program 8 (id=1757): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r2, 0x0, r1, 0x0, 0x1000, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) 1.697944845s ago: executing program 1 (id=1758): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(r4, 0x406, r4) readv(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r6, &(0x7f0000000240), 0xb375) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) read$msr(r6, &(0x7f00000004c0)=""/131, 0x83) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10000095fb00", 0x14}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.696942235s ago: executing program 2 (id=1768): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$eJzs3EtvG0UcAPD/bpK+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRqiIBoXJE/QTAEYlPwAkuCDiBuMIdIVWoF1oOaNHaa9c4dmrHTp3Gv5+02ZndtWf+3h17dsZOAH1rNP+TROyKiN8iYjgiBuoPGC2vbly/PHPz+uWZJLLszb+S/GHx9/XLM5VDk2K9s8iMpRHpJ0kcaFDuwsVLZ6fn5mYvFPmJxXPvTSxcvPTcmXPTp2dPz56fOnbs6JHJF1+Yer4rce7O67r/w/mD+46/ffX1mRNX3/nx67y+u4r9tXGUjXRc5miMVl+Tek92/Owby+5i3SxeNqa8rQ9GxFCp/Q/HQClXNhyvfdzTygHrKsuybOuKrdUewHIGbGJJ9LoGQG9UPujz+9/Kcge7Hz137eXyDVAe941iKe8ZjLQ4Zqjm/rbbRiPixPI/n+dLNByHAADorm/z/s+zjfp/aTxQc9w9xdzQSETcGxF7IuK+iNgbEfdHlI59MCIearP80br8yv7PL9vXFFiL8v7fS8Xc1v/7f5XeX4wMFLndpfiHklNn5mYPF6/JWAxtzfOTq5Tx3au/ftZsX23/L1/y8it9waIefw7WDdCdnF6c7iTmWtc+Ko0BLq2MP6nOBCQRsS8i9q/h+bdFxJmnvzrYbP/t41/F4BoqVCf7MuKp8vlfjrr4K5LV5ycntsXc7OGJylWx0k8/X3mjWfkdxd8F+fnf0fD6r8Y/ktTO1y60X8aV3z9tek+z1ut/S/JWKb2l2PbB9OLihcmILcnyyu1Ttx5byVeOz+MfO9Qg/ptZ/h737xfF4w5ERH4RPxwRj0TEo0XdH4uIxyPiUIPYsqXy+odXnnh37fGvrzz+k22d//YTA2e//6ZZ+a2d/6Ol1FixpZX3v1Yr2MlrBwAAAHeLtPQd+CQdr6bTdHy8/B3+vbEjnZtfWHzm1Pz750+Wvys/EkNpZaRruGY8dLIYG67kp+ryR0rjxlmWZdtL+fGZ+bn1mlMHWrOzSfvP/THQ69oB666teTS/8IJNpQvz6MBdSvuH/qX9Q//S/qF/NWr/SxE3elAV4A67zef/rf8SAGw6+v/Qv7R/6F/aP/SlTn7Xv1piz/H1eubNlhjYGNVoOxHphqhGS4mh4mqvbkk3SMVKia0R0erBS3GnKtbjNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//28vuNQ==") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, 0x0, 0xb) splice(r6, 0x0, r4, 0x0, 0x1000, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x0) 1.185497412s ago: executing program 4 (id=1759): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x82, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f000000ac40)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000007f40)={0x90, 0x0, 0x0, {0x1, 0x3, 0xd, 0x4, 0x2, 0x27, {0x4, 0x3, 0xf, 0x8000, 0x14d6, 0x89, 0x2, 0x5, 0x0, 0x6000, 0x1, 0x0, 0x0, 0x96d, 0x5}}}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db) fallocate(r2, 0x20, 0x0, 0x7fffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x181002, 0xd3) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000082}, 0x20000000) io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1000, 0x3, 0x75}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="105dc4a548c78791c78fce717451ed91bf854d0491754a1b842fef9f6a3b31d22cb90abc21c9b71f307242709fd42fce26533f9406da40a389acce53dd3523b953a8282648b1eff37a104d0d2ac7c8e12821d48582ed40948857567f645e9d33e7508bb835d05f2282f52b9f434d1d71cd522a1c7b213ff187108cb9ae87f98a883dd45bb20f7ca98ec0f5c012a1f9d6b1ba5aafb7ab3a38e8a2cfbaf9cb8de7058c57135cbef522b23cb509e5dc56589f8b9748d151a34f2a8abdbb40513c96949b210da5508dde2c465091bebe30b6ca94b1c65260bb9e1e80c50573d228aec2", 0x9dc07}], 0x1000000000000171) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) 1.185168812s ago: executing program 5 (id=1760): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r5, 0x0, r3, 0x0, 0x1000, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x0) 313.35465ms ago: executing program 8 (id=1761): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) 165.084684ms ago: executing program 1 (id=1762): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a00)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "ec4a7a2783cefc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000113e80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "31f0a9fb7ddd9f"}) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r13 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r13, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 0s ago: executing program 8 (id=1763): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x143480, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TCGETA(r0, 0x8926, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000a00)={0x1, {&(0x7f0000000380)=""/54, 0x36, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000640)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f00000004c0)={0x1, {&(0x7f0000000400)=""/124, 0x7c, 0x0, 0x3, 0x4}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000008c0)=""/18, 0x12, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000080000", @ANYRES32=0x0, @ANYBLOB="0000000012010000280012800b00010065727370616e00001800028004001200060010004e20000006000f0006000000140003006e696376663000"/68], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r5}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) kernel console output (not intermixed with test programs): 6.374915][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.376956][T10823] ? show_regs_print_info+0x20/0x20 [ 456.388174][T10823] ? load_image+0x400/0x400 [ 456.392719][T10823] ? __lock_acquire+0x7d10/0x7d10 [ 456.397794][T10823] should_fail+0x38c/0x4c0 [ 456.402271][T10823] _copy_from_user+0x2e/0x170 [ 456.406997][T10823] iovec_from_user+0x142/0x370 [ 456.411836][T10823] __import_iovec+0x70/0x490 [ 456.416484][T10823] import_iovec+0x6f/0xa0 [ 456.420869][T10823] ___sys_sendmsg+0x1fd/0x2e0 [ 456.425599][T10823] ? __sys_sendmsg+0x2a0/0x2a0 [ 456.430426][T10823] ? vfs_write+0x8b2/0xd60 [ 456.434908][T10823] __se_sys_sendmsg+0x1af/0x290 [ 456.439805][T10823] ? __x64_sys_sendmsg+0x80/0x80 [ 456.444793][T10823] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 456.450837][T10823] ? lockdep_hardirqs_on+0x94/0x140 [ 456.456083][T10823] do_syscall_64+0x4c/0xa0 [ 456.460542][T10823] ? clear_bhb_loop+0x30/0x80 [ 456.465262][T10823] ? clear_bhb_loop+0x30/0x80 [ 456.469973][T10823] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.475902][T10823] RIP: 0033:0x7f95d4009e59 [ 456.480352][T10823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.499997][T10823] RSP: 002b:00007f95d2263028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.508458][T10823] RAX: ffffffffffffffda RBX: 00007f95d4282fa0 RCX: 00007f95d4009e59 [ 456.517290][T10823] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 456.525312][T10823] RBP: 00007f95d2263090 R08: 0000000000000000 R09: 0000000000000000 [ 456.533324][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.541332][T10823] R13: 00007f95d4283038 R14: 00007f95d4282fa0 R15: 00007ffc4b682b78 [ 456.549366][T10823] [ 456.712475][ T9110] usb 7-1: device descriptor read/64, error -71 [ 456.833211][ T9110] usb usb7-port1: attempt power cycle [ 457.530952][ T9104] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 457.672464][ T9110] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 457.835559][ T9110] usb 7-1: device descriptor read/8, error -71 [ 457.862433][ T9104] usb 8-1: Using ep0 maxpacket: 32 [ 458.020791][ T9104] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.132332][ T9110] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 458.183057][ T9104] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.193552][ T9104] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 458.203162][ T9104] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.222821][ T9104] usb 8-1: config 0 descriptor?? [ 458.272869][ T9110] usb 7-1: device descriptor read/8, error -71 [ 458.282982][ T9104] hub 8-1:0.0: USB hub found [ 458.320683][T10840] FAULT_INJECTION: forcing a failure. [ 458.320683][T10840] name failslab, interval 1, probability 0, space 0, times 0 [ 458.341243][T10840] CPU: 1 PID: 10840 Comm: syz.6.1221 Not tainted syzkaller #0 [ 458.348764][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.358854][T10840] Call Trace: [ 458.362168][T10840] [ 458.365121][T10840] dump_stack_lvl+0x188/0x250 [ 458.369835][T10840] ? show_regs_print_info+0x20/0x20 [ 458.375061][T10840] ? load_image+0x400/0x400 [ 458.379598][T10840] ? __lock_acquire+0x7d10/0x7d10 [ 458.384660][T10840] should_fail+0x38c/0x4c0 [ 458.389117][T10840] should_failslab+0x5/0x20 [ 458.393647][T10840] slab_pre_alloc_hook+0x51/0xc0 [ 458.398622][T10840] __kmalloc+0x6b/0x330 [ 458.402811][T10840] ? __se_sys_memfd_create+0x142/0x450 [ 458.408313][T10840] ? strnlen_user+0x19b/0x250 [ 458.413098][T10840] __se_sys_memfd_create+0x142/0x450 [ 458.418393][T10840] ? lock_chain_count+0x20/0x20 [ 458.423252][T10840] ? __x64_sys_memfd_create+0x60/0x60 [ 458.428635][T10840] ? lockdep_hardirqs_on+0x94/0x140 [ 458.433845][T10840] do_syscall_64+0x4c/0xa0 [ 458.438289][T10840] ? clear_bhb_loop+0x30/0x80 [ 458.442983][T10840] ? clear_bhb_loop+0x30/0x80 [ 458.447696][T10840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.453599][T10840] RIP: 0033:0x7f78e3c4ce59 [ 458.458041][T10840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.477649][T10840] RSP: 002b:00007f78e1ea5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 458.486159][T10840] RAX: ffffffffffffffda RBX: 000000000001279a RCX: 00007f78e3c4ce59 [ 458.494143][T10840] RDX: 00007f78e1ea5ee0 RSI: 0000000000000000 RDI: 00007f78e3ce2f4f [ 458.502136][T10840] RBP: 0000200000012bc0 R08: 00000000ffffffff R09: 0000000000000000 [ 458.510108][T10840] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 458.518099][T10840] R13: 00007f78e1ea5ee0 R14: 00007f78e1ea5ea0 R15: 00002000000001c0 [ 458.526086][T10840] [ 458.554680][ T9110] usb usb7-port1: unable to enumerate USB device [ 458.835983][T10827] udc-core: couldn't find an available UDC or it's busy [ 458.842685][ T9104] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 458.885896][T10827] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 458.929514][T10827] loop7: detected capacity change from 0 to 256 [ 459.187738][ T9104] usbhid 8-1:0.0: can't add hid device: -71 [ 459.194178][ T9104] usbhid: probe of 8-1:0.0 failed with error -71 [ 459.243757][ T9104] usb 8-1: USB disconnect, device number 42 [ 459.327946][T10846] loop0: detected capacity change from 0 to 32768 [ 459.383244][T10846] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 459.412616][T10846] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: unknown hostdata (^) [ 459.552663][ T5948] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 459.929137][ T5948] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 460.060648][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 460.182970][ T5948] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 460.349070][ T5948] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 460.505078][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.631365][ T5948] usb 7-1: config 0 descriptor?? [ 460.652671][T10858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 460.692455][ T9110] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 460.827708][T10862] loop4: detected capacity change from 0 to 40427 [ 460.858412][T10862] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 460.870989][T10862] F2FS-fs (loop4): invalid crc value [ 460.876850][T10862] F2FS-fs (loop4): invalid crc value [ 460.882202][T10862] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 460.902391][ T9110] usb 10-1: device descriptor read/64, error -71 [ 461.130028][ T5966] Bluetooth: hci2: command 0x0401 tx timeout [ 461.137756][ T5948] hid-multitouch 0003:1FD2:6007.0009: ignoring exceeding usage max [ 461.148350][ T5948] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x2 [ 461.252625][ T9110] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 461.343477][T10854] udc-core: couldn't find an available UDC or it's busy [ 461.359092][T10854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 461.502556][ T9110] usb 10-1: device descriptor read/64, error -71 [ 461.561985][ T5948] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 461.643080][ T9110] usb usb10-port1: attempt power cycle [ 461.669665][ T5948] usb 7-1: USB disconnect, device number 47 [ 461.705409][T10878] Illegal XDP return value 4294967274, expect packet loss! [ 461.746175][T10879] fido_id[10879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 462.072365][ T9110] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 462.202757][T10885] loop4: detected capacity change from 0 to 4096 [ 462.302379][ T9110] usb 10-1: device descriptor read/8, error -71 [ 462.600603][T10885] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.863261][ T9110] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 462.983655][ T9110] usb 10-1: device descriptor read/8, error -71 [ 463.112610][ T9110] usb usb10-port1: unable to enumerate USB device [ 463.715253][T10925] loop4: detected capacity change from 0 to 512 [ 463.895389][T10930] NILFS (nullb0): couldn't find nilfs on the device [ 464.135434][T10925] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.1243: Parent and EA inode have the same ino 15 [ 464.496950][T10925] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.1243: Parent and EA inode have the same ino 15 [ 464.583501][T10925] EXT4-fs (loop4): 1 orphan inode deleted [ 464.589314][T10925] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,journal_dev=0x00000000040000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 464.707216][T10925] EXT4-fs (loop4): shut down requested (0) [ 466.042481][ T5948] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 466.312379][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 466.432780][ T5948] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 466.482228][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.598706][ T5948] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 466.672882][ T5948] usb 5-1: config 0 has no interface number 0 [ 467.022566][ T5948] usb 5-1: string descriptor 0 read error: -71 [ 467.032038][ T5948] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 467.097560][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.175659][ T5948] usb 5-1: config 0 descriptor?? [ 467.242368][ T5948] usb 5-1: can't set config #0, error -71 [ 467.286176][ T5948] usb 5-1: USB disconnect, device number 24 [ 467.382092][T10955] loop9: detected capacity change from 0 to 1024 [ 467.792462][ T5966] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 468.152376][ T5966] usb 7-1: Using ep0 maxpacket: 16 [ 468.642692][ T5966] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 468.657624][ T5966] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 468.666046][ T5966] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.676868][ T5966] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 468.686803][ T5966] usb 7-1: config 0 has no interface number 0 [ 468.693288][ T5966] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 468.721834][ T5966] usb 7-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 468.739204][ T5966] usb 7-1: config 0 interface 125 has no altsetting 0 [ 469.532539][ T5966] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 469.566918][T10978] loop0: detected capacity change from 0 to 512 [ 469.659086][T10978] EXT4-fs (loop0): Mount option "dioread_lock" incompatible with ext2 [ 469.798887][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.807119][ T5966] usb 7-1: Product: syz [ 469.823977][ T5966] usb 7-1: Manufacturer: syz [ 469.828644][ T5966] usb 7-1: SerialNumber: syz [ 469.848545][ T5966] usb 7-1: config 0 descriptor?? [ 470.277540][ T5966] usb 7-1: USB disconnect, device number 48 [ 472.646303][T11003] loop4: detected capacity change from 0 to 512 [ 472.708448][T11003] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext2 [ 473.062548][ T5948] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 473.322443][ T5948] usb 8-1: Using ep0 maxpacket: 16 [ 473.443062][ T5948] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 473.468560][ T5948] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 473.534395][ T5948] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 473.617538][ T5948] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 473.696801][ T5948] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 473.805890][ T5948] usb 8-1: config 0 has no interface number 0 [ 473.863597][ T5948] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 473.962870][T11013] netlink: 'syz.0.1271': attribute type 10 has an invalid length. [ 473.973297][ T5948] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 474.054026][ T5948] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 474.096945][T11013] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 474.148278][ T5948] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.223096][T11012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.272952][ T5948] usb 8-1: config 0 interface 125 has no altsetting 0 [ 474.626114][T11019] loop4: detected capacity change from 0 to 512 [ 474.652908][ T5948] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 474.662018][ T5948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.670447][ T5948] usb 8-1: Product: syz [ 475.150081][ T5948] usb 8-1: Manufacturer: syz [ 475.155161][ T5948] usb 8-1: SerialNumber: syz [ 475.163302][ T5948] usb 8-1: config 0 descriptor?? [ 475.177546][T11019] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext2 [ 475.202227][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1275'. [ 476.282316][ C0] usb 8-1: async_complete: urb error -71 [ 476.288117][ C0] usb 8-1: async_complete: urb error -71 [ 476.293850][ C0] usb 8-1: async_complete: urb error -71 [ 476.299584][ C0] usb 8-1: async_complete: urb error -71 [ 476.305532][ T5948] get_1284_register: usb error -71 [ 476.350739][ T5948] usb 8-1: USB disconnect, device number 43 [ 476.797869][T11025] loop9: detected capacity change from 0 to 32768 [ 476.809170][ T5953] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 476.888858][T11025] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.1275 (11025) [ 477.308690][T11025] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 477.317516][T11025] BTRFS info (device loop9): turning on async discard [ 477.477900][T11025] BTRFS info (device loop9): metadata ratio 0 [ 477.484196][T11025] BTRFS info (device loop9): setting nodatasum [ 477.490476][T11025] BTRFS info (device loop9): using free space tree [ 477.497121][T11025] BTRFS info (device loop9): has skinny extents [ 477.692473][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 477.812706][ T5953] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 477.853748][ T5953] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 477.975382][ T5953] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.034680][ T5953] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 478.051627][T11025] BTRFS error (device loop9): open_ctree failed: -22 [ 478.058774][ T5953] usb 7-1: config 0 has no interface number 0 [ 478.065294][ T5953] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 478.076978][ T5953] usb 7-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.090909][ T5953] usb 7-1: config 0 interface 125 has no altsetting 0 [ 478.314413][ T5953] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 478.329039][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.350111][ T5953] usb 7-1: config 0 descriptor?? [ 478.375936][ T5953] usb 7-1: can't set config #0, error -71 [ 478.483897][ T5953] usb 7-1: USB disconnect, device number 49 [ 478.640462][ T4318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by udevd (4318) [ 478.715326][T11072] loop4: detected capacity change from 0 to 512 [ 478.794961][T11072] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 478.946732][T11072] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1283: bg 0: block 104: invalid block bitmap [ 478.991244][T11072] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 479.047523][T11072] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1283: invalid indirect mapped block 1 (level 1) [ 479.064245][T11072] EXT4-fs (loop4): 1 truncate cleaned up [ 479.070017][T11072] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 479.743648][T11088] NILFS (nullb0): couldn't find nilfs on the device [ 481.431822][ T5948] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 481.832332][ T5948] usb 8-1: Using ep0 maxpacket: 16 [ 481.906692][T11107] NILFS (nullb0): couldn't find nilfs on the device [ 482.592657][T11106] netlink: 'syz.6.1289': attribute type 10 has an invalid length. [ 482.651975][T11106] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 482.672688][ T5948] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 482.690189][ T5948] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 482.699166][ T5948] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 482.711735][T11105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.716870][ T5948] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 482.737194][ T5948] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 482.747593][ T5948] usb 8-1: config 0 has no interface number 0 [ 482.758531][ T5948] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 482.771253][ T5948] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 482.787332][ T5948] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 482.797475][ T5948] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.818865][ T5948] usb 8-1: config 0 interface 125 has no altsetting 0 [ 482.982590][ T5948] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 482.999437][ T5948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.010152][ T5948] usb 8-1: Product: syz [ 483.017785][ T5948] usb 8-1: Manufacturer: syz [ 483.025133][ T5948] usb 8-1: SerialNumber: syz [ 483.029121][T11114] loop0: detected capacity change from 0 to 512 [ 483.059111][ T5948] usb 8-1: config 0 descriptor?? [ 483.103407][T11114] EXT4-fs (loop0): Mount option "dioread_lock" incompatible with ext2 [ 483.242406][ T5946] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 483.452313][ C0] usb 8-1: async_complete: urb error -71 [ 483.458087][ C0] usb 8-1: async_complete: urb error -71 [ 483.463817][ C0] usb 8-1: async_complete: urb error -71 [ 483.469545][ C0] usb 8-1: async_complete: urb error -71 [ 483.475857][ T5948] get_1284_register: usb error -71 [ 483.496382][ T5948] usb 8-1: USB disconnect, device number 44 [ 483.522471][ T5946] usb 10-1: Using ep0 maxpacket: 16 [ 483.642745][ T5946] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 483.685146][ T5946] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 483.790918][ T5946] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.924306][ T5946] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 484.086720][ T5946] usb 10-1: config 0 has no interface number 0 [ 484.102630][ T5946] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 484.117435][ T5946] usb 10-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 484.130908][ T5946] usb 10-1: config 0 interface 125 has no altsetting 0 [ 484.887813][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 485.163207][T11129] loop4: detected capacity change from 0 to 32768 [ 485.203167][ T5946] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 485.331623][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.504084][ T5946] usb 10-1: Product: syz [ 485.560548][ T5946] usb 10-1: Manufacturer: syz [ 485.638540][ T5946] usb 10-1: SerialNumber: syz [ 486.193480][ T5946] usb 10-1: config 0 descriptor?? [ 486.703291][T11147] NILFS (nullb0): couldn't find nilfs on the device [ 486.827390][T11129] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 486.836288][T11129] BTRFS info (device loop4): turning on async discard [ 486.843274][T11129] BTRFS info (device loop4): metadata ratio 0 [ 486.849713][T11129] BTRFS info (device loop4): setting nodatasum [ 486.856523][T11129] BTRFS info (device loop4): using free space tree [ 486.863262][T11129] BTRFS info (device loop4): has skinny extents [ 487.042543][ T5946] usb 10-1: can't set config #0, error -71 [ 487.071293][ T5946] usb 10-1: USB disconnect, device number 27 [ 487.218331][T11168] loop7: detected capacity change from 0 to 512 [ 487.276612][T11159] loop6: detected capacity change from 0 to 512 [ 487.328294][T11159] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 487.337970][T11168] EXT4-fs (loop7): Mount option "dioread_lock" incompatible with ext2 [ 487.699994][T11129] BTRFS info (device loop4): enabling ssd optimizations [ 487.755844][T11159] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1304: bg 0: block 104: invalid block bitmap [ 488.449944][T11159] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 488.730646][T11159] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1304: invalid indirect mapped block 1 (level 1) [ 501.286464][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.292842][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.912474][T11159] EXT4-fs (loop6): 1 truncate cleaned up [ 519.048188][T11159] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 521.044759][ T4424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.206043][T11204] chnl_net:caif_netlink_parms(): no params data found [ 521.255976][T11200] chnl_net:caif_netlink_parms(): no params data found [ 521.266622][T11201] chnl_net:caif_netlink_parms(): no params data found [ 521.302891][T11208] chnl_net:caif_netlink_parms(): no params data found [ 521.330977][ T4424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.391486][T11206] chnl_net:caif_netlink_parms(): no params data found [ 521.452578][ T4424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.485785][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.493195][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.501424][T11204] device bridge_slave_0 entered promiscuous mode [ 521.518991][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.526531][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.534942][T11204] device bridge_slave_1 entered promiscuous mode [ 521.597474][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.605035][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.613735][T11201] device bridge_slave_0 entered promiscuous mode [ 521.628184][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.635382][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.644060][T11201] device bridge_slave_1 entered promiscuous mode [ 521.660090][ T4424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.679488][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.687236][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.695730][T11208] device bridge_slave_0 entered promiscuous mode [ 521.705916][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.733656][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.740760][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.750097][T11208] device bridge_slave_1 entered promiscuous mode [ 521.763908][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.785643][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.793006][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.800975][T11200] device bridge_slave_0 entered promiscuous mode [ 521.829836][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.842497][ T5951] Bluetooth: hci5: command 0x0409 tx timeout [ 521.853186][ T5951] Bluetooth: hci6: command 0x0409 tx timeout [ 521.869838][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.877500][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.885770][T11200] device bridge_slave_1 entered promiscuous mode [ 521.910475][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.939509][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.948866][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.956586][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.965107][T11206] device bridge_slave_0 entered promiscuous mode [ 521.986663][T11204] team0: Port device team_slave_0 added [ 521.995252][T11204] team0: Port device team_slave_1 added [ 522.003863][ T5951] Bluetooth: hci7: command 0x0409 tx timeout [ 522.026209][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.050643][T11206] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.058205][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.066798][T11206] device bridge_slave_1 entered promiscuous mode [ 522.082672][ T9104] Bluetooth: hci9: command 0x0409 tx timeout [ 522.121754][T11200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.134569][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.141570][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.162598][ T5951] Bluetooth: hci8: command 0x0409 tx timeout [ 522.172373][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.186255][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.193394][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.220164][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.259612][T11201] team0: Port device team_slave_0 added [ 522.274871][T11200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.288389][T11208] team0: Port device team_slave_0 added [ 522.302497][T11201] team0: Port device team_slave_1 added [ 522.310376][T11206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.342624][T11200] team0: Port device team_slave_0 added [ 522.350795][T11208] team0: Port device team_slave_1 added [ 522.373084][T11206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.385009][T11200] team0: Port device team_slave_1 added [ 522.417412][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.424636][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.451034][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.464399][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.471377][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.498259][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.548360][T11200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.560071][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.586819][T11200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.605243][T11206] team0: Port device team_slave_0 added [ 522.611979][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.620914][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.648000][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.673391][T11204] device hsr_slave_0 entered promiscuous mode [ 522.680406][T11204] device hsr_slave_1 entered promiscuous mode [ 522.687462][T11204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.695497][T11204] Cannot create hsr debugfs directory [ 522.703653][T11200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.710630][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.737885][T11200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.751834][T11206] team0: Port device team_slave_1 added [ 522.762757][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.769733][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.796923][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.808959][ T4424] tipc: Disabling bearer [ 522.820782][ T4424] tipc: Left network mode [ 522.845660][T11201] device hsr_slave_0 entered promiscuous mode [ 522.853503][T11201] device hsr_slave_1 entered promiscuous mode [ 522.860207][T11201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.868244][T11201] Cannot create hsr debugfs directory [ 522.943218][T11208] device hsr_slave_0 entered promiscuous mode [ 522.950305][T11208] device hsr_slave_1 entered promiscuous mode [ 522.957531][T11208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.967017][T11208] Cannot create hsr debugfs directory [ 523.027315][T11206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.034822][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.061437][T11206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.086364][T11200] device hsr_slave_0 entered promiscuous mode [ 523.095200][T11200] device hsr_slave_1 entered promiscuous mode [ 523.107557][T11200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.115428][T11200] Cannot create hsr debugfs directory [ 523.162024][T11206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.169254][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.195876][T11206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.377996][T11206] device hsr_slave_0 entered promiscuous mode [ 523.385555][T11206] device hsr_slave_1 entered promiscuous mode [ 523.402725][T11206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.410347][T11206] Cannot create hsr debugfs directory [ 523.922402][ T5951] Bluetooth: hci6: command 0x041b tx timeout [ 523.928558][ T5951] Bluetooth: hci5: command 0x041b tx timeout [ 524.082501][ T5952] Bluetooth: hci7: command 0x041b tx timeout [ 524.093340][ T4424] bond0: (slave wlan1): Releasing backup interface [ 524.162423][ T5952] Bluetooth: hci9: command 0x041b tx timeout [ 524.242401][ T5952] Bluetooth: hci8: command 0x041b tx timeout [ 524.298812][ T4424] device hsr_slave_0 left promiscuous mode [ 524.313183][ T4424] device hsr_slave_1 left promiscuous mode [ 524.328532][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.351241][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.361601][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.382677][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.393278][ T4424] device bridge_slave_1 left promiscuous mode [ 524.399535][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.420697][ T4424] device bridge_slave_0 left promiscuous mode [ 524.433519][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.457300][ T4424] device veth1_macvtap left promiscuous mode [ 524.470503][ T4424] device veth0_macvtap left promiscuous mode [ 524.481182][ T4424] device veth1_vlan left promiscuous mode [ 524.492515][ T4424] device veth0_vlan left promiscuous mode [ 524.733220][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 524.750373][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 524.764224][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.788088][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.862856][ T4424] bond0 (unregistering): Released all slaves [ 525.978317][T11204] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.001413][T11204] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.008861][ T5942] Bluetooth: hci5: command 0x040f tx timeout [ 526.022441][ T5942] Bluetooth: hci6: command 0x040f tx timeout [ 526.045414][T11204] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.070054][T11204] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 526.162430][ T5942] Bluetooth: hci7: command 0x040f tx timeout [ 526.242399][ T4271] Bluetooth: hci9: command 0x040f tx timeout [ 526.322629][ T4271] Bluetooth: hci8: command 0x040f tx timeout [ 526.523026][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.570122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 526.594658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.626532][T11204] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.755235][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.783433][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.814139][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.821261][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.852860][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 526.890342][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.914055][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.923112][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.930220][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.061851][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 527.083924][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 527.097986][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 527.118979][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 527.140860][T11204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 527.172782][T11204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.190780][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 527.203216][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 527.225331][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 527.236128][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 527.245339][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.255081][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 527.264192][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.401590][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 527.794586][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.802175][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.818087][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.082462][ T5951] Bluetooth: hci6: command 0x0419 tx timeout [ 528.088651][ T5951] Bluetooth: hci5: command 0x0419 tx timeout [ 528.151282][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.160706][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.187172][ T4424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.242478][ T5950] Bluetooth: hci7: command 0x0419 tx timeout [ 528.276424][T11204] device veth0_vlan entered promiscuous mode [ 528.285504][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.300521][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.320712][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.328381][ T5951] Bluetooth: hci9: command 0x0419 tx timeout [ 528.330329][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.346657][T11204] device veth1_vlan entered promiscuous mode [ 528.359484][ T4424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.406174][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 528.410666][ T4274] Bluetooth: hci8: command 0x0419 tx timeout [ 528.417361][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.428401][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.437529][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.458240][ T4424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.472542][T11204] device veth0_macvtap entered promiscuous mode [ 528.481636][T11204] device veth1_macvtap entered promiscuous mode [ 528.519440][ T4424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.534869][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.548399][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.558687][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.569363][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.579430][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.589987][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.601141][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.611809][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.623763][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.633104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.641238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.653008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.661861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.676241][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.689598][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.700277][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.712411][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.722705][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.733923][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.744455][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.755225][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.766830][T11204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.776440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.792004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.816006][T11204] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.829787][T11204] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.838951][T11204] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.848346][T11204] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.954121][ T4424] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.006629][ T4424] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.030623][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.040742][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.061642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.072882][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.081502][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.094308][ T4424] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.107505][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 529.153706][ T4424] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.215454][T11357] loop8: detected capacity change from 0 to 512 [ 529.250303][T11357] EXT4-fs (loop8): Mount option "dioread_lock" incompatible with ext2 [ 529.342075][ T4424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.394393][ T4424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.564823][ T4424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.714708][ T4424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.851811][T11365] NILFS (nullb0): couldn't find nilfs on the device [ 531.322909][ T4424] tipc: Left network mode [ 531.528934][T11371] loop8: detected capacity change from 0 to 512 [ 531.540479][T11371] EXT4-fs (loop8): Mount option "dioread_lock" incompatible with ext2 [ 533.453500][ T4424] bond0: (slave wlan1): Releasing backup interface [ 533.472460][ T5950] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 533.712312][ T5950] usb 9-1: Using ep0 maxpacket: 16 [ 533.795196][ T4424] bond0: (slave wlan1): Releasing backup interface [ 533.832507][ T5950] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 533.840919][ T5950] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 533.851907][ T5950] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.865487][ T5950] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 533.874685][ T5950] usb 9-1: config 0 has no interface number 0 [ 533.880832][ T5950] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 533.892486][ T5950] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 533.902947][ T5950] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.913564][ T5950] usb 9-1: config 0 interface 125 has no altsetting 0 [ 534.074725][ T5950] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 534.095873][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.115038][ T5950] usb 9-1: Product: syz [ 534.119307][ T5950] usb 9-1: Manufacturer: syz [ 534.131914][ T5950] usb 9-1: SerialNumber: syz [ 534.154257][ T5950] usb 9-1: config 0 descriptor?? [ 534.243927][ T4424] device hsr_slave_0 left promiscuous mode [ 534.250381][ T4424] device hsr_slave_1 left promiscuous mode [ 534.272452][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.280269][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.298737][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.311650][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.330402][ T4424] device bridge_slave_1 left promiscuous mode [ 534.337570][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.346513][ T4424] device bridge_slave_0 left promiscuous mode [ 534.352948][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.366513][ T4424] device hsr_slave_0 left promiscuous mode [ 534.373791][ T4424] device hsr_slave_1 left promiscuous mode [ 534.380275][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.392573][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.401992][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.420115][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.430878][ T4424] device bridge_slave_1 left promiscuous mode [ 534.438307][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.448908][ T4270] usb 9-1: USB disconnect, device number 11 [ 534.459783][ T4424] device bridge_slave_0 left promiscuous mode [ 534.472167][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.494613][ T4424] device hsr_slave_0 left promiscuous mode [ 534.501243][ T4424] device hsr_slave_1 left promiscuous mode [ 534.508160][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.516741][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.525024][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.533291][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.542875][ T4424] device bridge_slave_1 left promiscuous mode [ 534.549122][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.573857][ T4424] device bridge_slave_0 left promiscuous mode [ 534.580123][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.626093][ T4424] device veth1_macvtap left promiscuous mode [ 534.632204][ T4424] device veth0_macvtap left promiscuous mode [ 534.651809][ T4424] device veth1_vlan left promiscuous mode [ 534.660591][ T4424] device veth0_vlan left promiscuous mode [ 534.678305][ T4424] device veth1_macvtap left promiscuous mode [ 534.689443][ T4424] device veth0_macvtap left promiscuous mode [ 534.701355][ T4424] device veth1_vlan left promiscuous mode [ 534.719227][ T4424] device veth0_vlan left promiscuous mode [ 534.730311][ T4424] device veth1_macvtap left promiscuous mode [ 534.746601][ T4424] device veth0_macvtap left promiscuous mode [ 534.758567][ T4424] device veth1_vlan left promiscuous mode [ 534.769870][ T4424] device veth0_vlan left promiscuous mode [ 535.758995][ T4424] bond1 (unregistering): Released all slaves [ 536.327886][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 536.430786][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 536.509857][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.584900][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.049460][ T4424] bond0 (unregistering): Released all slaves [ 537.234268][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 537.253757][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 537.268039][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.283657][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.359928][ T4424] bond0 (unregistering): Released all slaves [ 537.498330][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 537.513461][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 537.528836][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.545085][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.623207][ T4424] bond0 (unregistering): Released all slaves [ 538.090172][T11466] NILFS (nullb0): couldn't find nilfs on the device [ 538.534505][T11201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 538.655759][T11201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 538.738566][T11201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.769292][T11201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.801921][T11208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 538.830262][T11208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 538.843671][T11472] loop8: detected capacity change from 0 to 2048 [ 538.867627][T11472] loop8: p1 p4 [ 538.867627][T11472] p1: [ 538.892289][T11208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 538.924347][T11472] loop8: p4 size 589824 extends beyond EOD, truncated [ 538.936757][T11208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 539.031453][T11200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 539.064471][T11200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 539.071654][ T3561] loop8: p1 p4 [ 539.071654][ T3561] p1: [ 539.097819][T11200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 539.106038][ T3561] loop8: p4 size 589824 extends beyond EOD, truncated [ 539.118591][T11200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 539.238196][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.315381][T11201] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.332966][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.365787][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 539.379377][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 539.383820][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.440819][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 539.451732][T11206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.464325][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 539.489051][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 539.499002][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.516246][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.523401][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.539010][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 539.553388][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.571984][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.579141][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.613210][T11206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.633113][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 539.668207][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 539.684045][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 539.712207][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 539.723027][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 539.737086][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 539.750738][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 539.771209][T11206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.781337][T11206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.806567][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.831241][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 539.848467][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 539.860968][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 539.880712][T11200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.894968][T11201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.909846][T11201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 539.923035][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 539.933353][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 539.960414][T11200] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.977680][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.001616][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.011134][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.056019][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.081869][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.102610][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.122971][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.139988][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.147153][ T5497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.206256][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.215121][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.226091][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.249928][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.257103][ T5497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.279140][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.290939][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.301430][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.310362][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.317518][ T5497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.332826][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.348585][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.359141][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.366282][ T5497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.384130][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.409622][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.423357][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.453003][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.519963][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 540.533515][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.550527][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.560016][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 540.569819][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.579201][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 540.596699][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 540.605644][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.618289][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.627296][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 540.636403][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.647680][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 540.665146][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 540.681010][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.711361][T11200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 540.743612][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 540.762807][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 540.771658][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 540.786803][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.801071][T11206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.818078][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 540.833476][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.840938][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.865069][T11201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.941875][T11206] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.973535][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.995450][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.039337][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.056430][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.090132][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.097284][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.127174][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.159723][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.190073][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.197434][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.257912][T11200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.268193][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.278360][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 541.303282][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.310903][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 541.329310][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.344115][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.357661][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.391413][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.438791][T11201] device veth0_vlan entered promiscuous mode [ 541.449112][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 541.478873][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.492566][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 541.525669][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.542161][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 541.573076][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 541.581950][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 541.598785][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.640064][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.649218][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.665138][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 541.680536][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.708096][T11201] device veth1_vlan entered promiscuous mode [ 541.724995][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.744784][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.774183][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.788852][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.814190][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 541.824862][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 541.843191][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.890374][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 541.930330][T11201] device veth0_macvtap entered promiscuous mode [ 541.970521][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 541.993228][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.016356][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 542.053225][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 542.072540][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 542.092671][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 542.112701][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 542.129680][T11200] device veth0_vlan entered promiscuous mode [ 542.148091][T11201] device veth1_macvtap entered promiscuous mode [ 542.183319][T11200] device veth1_vlan entered promiscuous mode [ 542.272056][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 542.285088][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 542.308039][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 542.317804][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 542.332683][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 542.341144][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 542.366382][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 542.383046][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 542.407579][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.432788][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.449966][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.461004][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.473367][T11201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.498944][T11208] device veth0_vlan entered promiscuous mode [ 542.513662][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 542.568428][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.597441][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.621533][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.662270][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.672152][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.684914][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.696970][T11201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.711507][T11200] device veth0_macvtap entered promiscuous mode [ 542.746729][T11208] device veth1_vlan entered promiscuous mode [ 542.769990][T11206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.779682][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 542.795338][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.823592][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 542.844415][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 542.863173][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.884044][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.891575][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.922793][T11201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.931546][T11201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.955225][T11201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.974887][T11201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.013405][T11200] device veth1_macvtap entered promiscuous mode [ 543.031908][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 543.043933][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 543.053848][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 543.096005][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 543.113479][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 543.133448][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 543.148893][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 543.166506][T11208] device veth0_macvtap entered promiscuous mode [ 543.252068][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.273070][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.292393][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.322441][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.342318][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.365134][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.384253][T11200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.395321][T11208] device veth1_macvtap entered promiscuous mode [ 543.416743][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 543.453966][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 543.462189][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 543.472524][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 543.485586][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.497147][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.507340][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.518296][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.529341][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.540182][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.551933][T11200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.566329][T11206] device veth0_vlan entered promiscuous mode [ 543.587896][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 543.597630][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 543.614598][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 543.630553][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 543.643406][T11200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.652162][T11200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.669987][T11200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.679028][T11200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.708234][T11206] device veth1_vlan entered promiscuous mode [ 543.718184][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.732341][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.740776][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 543.764183][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 543.772195][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 543.792796][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.826920][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.854913][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.871804][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.902264][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.912135][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.931972][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.941994][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.954557][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.970945][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.012392][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.020648][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 544.048943][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 544.083100][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.110039][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.120557][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.131480][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.154702][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.165594][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.175777][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.187319][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.198996][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.216609][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.232044][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 544.254144][T11206] device veth0_macvtap entered promiscuous mode [ 544.278101][T11208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.283365][ T5497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.297041][T11208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.306302][T11208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.318060][T11208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.320136][ T5497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.352630][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 544.360590][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.376803][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.389983][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 544.405066][T11206] device veth1_macvtap entered promiscuous mode [ 544.477892][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.553204][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.586713][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.601074][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.618028][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.630636][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.647847][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.660272][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.678018][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.690085][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.711169][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.741692][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.955175][T11206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.978515][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 544.997693][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.020135][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.050944][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.154816][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.491316][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.524424][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.540639][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.556065][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.566911][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.577012][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.587556][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.597446][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.608268][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.619765][T11206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.670091][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.696130][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.717447][T11596] loop2: detected capacity change from 0 to 512 [ 545.736036][T11206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.758965][T11206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.764803][T11596] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext2 [ 545.780165][T11206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.792426][ T4235] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 545.818666][T11206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.844430][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.852749][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.860608][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.880370][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.110130][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 546.139339][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 546.153407][ T4235] usb 9-1: Using ep0 maxpacket: 16 [ 546.273609][ T4235] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 546.392680][ T4235] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 546.435074][ T4235] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.446793][ T4235] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 546.455969][ T4235] usb 9-1: config 0 has no interface number 0 [ 546.506897][ T4235] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 547.055162][ T4235] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 547.065198][ T4235] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 547.075096][ T4235] usb 9-1: config 0 interface 125 has no altsetting 0 [ 547.190246][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.205650][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.255298][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 547.376839][ T4235] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 547.493158][ T4235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.501848][ T4235] usb 9-1: Product: syz [ 547.506476][ T4235] usb 9-1: Manufacturer: syz [ 547.511658][ T4235] usb 9-1: SerialNumber: syz [ 547.556516][T11359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.580657][T11359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.653836][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 547.683240][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 547.731628][ T4235] usb 9-1: config 0 descriptor?? [ 547.844484][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.868690][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.942923][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 547.974794][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 548.160872][ T4235] usb 9-1: USB disconnect, device number 12 [ 548.241719][T11625] loop1: detected capacity change from 0 to 512 [ 548.249282][ T23] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 548.258829][ T23] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.289166][T11625] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext2 [ 548.313792][ T23] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.322111][ T23] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.337591][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 548.347630][ T23] usb 4-1: config 0 has no interface number 0 [ 548.359978][ T23] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 548.371750][ T23] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 548.558821][ T23] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 548.569297][ T23] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.582427][ T23] usb 4-1: config 0 interface 125 has no altsetting 0 [ 549.271906][T11636] NILFS (nullb0): couldn't find nilfs on the device [ 550.622745][T11642] loop2: detected capacity change from 0 to 2048 [ 550.697563][T11645] NILFS (nullb0): couldn't find nilfs on the device [ 550.791898][ T23] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 550.806026][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.808169][T11563] loop2: p1 p4 [ 550.808169][T11563] p1: [ 550.814272][ T23] usb 4-1: Product: syz [ 550.828334][ T23] usb 4-1: Manufacturer: syz [ 550.854247][ T23] usb 4-1: config 0 descriptor?? [ 550.882408][ T23] usb 4-1: can't set config #0, error -71 [ 550.893691][ T23] usb 4-1: USB disconnect, device number 2 [ 550.946978][T11563] loop2: p4 size 589824 extends beyond EOD, truncated [ 551.012149][T11642] loop2: p1 p4 [ 551.012149][T11642] p1: [ 551.053669][T11642] loop2: p4 size 589824 extends beyond EOD, truncated [ 551.128296][T11663] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1334'. [ 551.157013][ T3561] loop2: p1 p4 [ 551.157013][ T3561] p1: [ 551.201829][ T3561] loop2: p4 size 589824 extends beyond EOD, truncated [ 551.433105][T11659] udevd[11659]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 551.466688][T11563] udevd[11563]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 551.972204][T11659] udevd[11659]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 552.015675][T11563] udevd[11563]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 552.030411][T11723] netlink: 'syz.8.1359': attribute type 12 has an invalid length. [ 552.060740][T11723] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1359'. [ 552.288189][T11563] udevd[11563]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 552.312520][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.335499][T11659] udevd[11659]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 552.352482][T11745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.378427][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.443634][T11745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.723920][T11768] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 553.401150][T11803] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1384'. [ 553.800654][T11816] device syzkaller0 entered promiscuous mode [ 554.510606][T11865] tap0: tun_chr_ioctl cmd 2147767517 [ 554.587152][T11872] netlink: 'syz.1.1412': attribute type 33 has an invalid length. [ 554.622479][T11872] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1412'. [ 554.735970][T11880] loop8: detected capacity change from 0 to 512 [ 554.760862][T11881] netlink: 'syz.5.1415': attribute type 10 has an invalid length. [ 554.844732][T11880] EXT4-fs (loop8): Mount option "dioread_lock" incompatible with ext2 [ 554.894503][T11881] team0: Port device macvlan1 added [ 555.761806][T11897] overlayfs: upper fs does not support tmpfile. [ 556.296163][T11923] overlayfs: failed to resolve './file2': -2 [ 557.743441][T11950] netlink: 'syz.5.1437': attribute type 10 has an invalid length. [ 557.751327][T11950] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1437'. [ 557.838991][T11950] device team0 entered promiscuous mode [ 557.873050][T11950] device team_slave_0 entered promiscuous mode [ 557.879666][T11950] device team_slave_1 entered promiscuous mode [ 557.912476][T11950] device macvlan1 entered promiscuous mode [ 557.927563][T11950] bridge0: port 3(team0) entered blocking state [ 557.945549][T11950] bridge0: port 3(team0) entered disabled state [ 558.009805][T11950] bridge0: port 3(team0) entered blocking state [ 558.016211][T11950] bridge0: port 3(team0) entered forwarding state [ 558.842382][ T4235] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 559.181537][T12012] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.1459'. [ 559.230975][T12012] bridge: RTM_NEWNEIGH with invalid ether address [ 559.462567][ T4235] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 559.492097][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.513206][ T4235] usb 2-1: Product: syz [ 559.517477][ T4235] usb 2-1: Manufacturer: syz [ 559.522093][ T4235] usb 2-1: SerialNumber: syz [ 559.609157][ T4235] usb 2-1: config 0 descriptor?? [ 559.878556][ T4235] usb 2-1: USB disconnect, device number 5 [ 560.235689][T12047] autofs4:pid:12047:autofs_fill_super: called with bogus options [ 561.093320][T12056] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1471'. [ 561.121803][T12058] loop2: detected capacity change from 0 to 512 [ 561.137096][T12056] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1471'. [ 561.161541][T12058] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext2 [ 561.210781][T12052] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1471'. [ 561.252693][T12060] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1471'. [ 562.406491][T12049] chnl_net:caif_netlink_parms(): no params data found [ 562.480909][T12084] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 562.554508][T12084] team0: Device vxcan0 is of different type [ 562.728544][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.734934][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.870077][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.882448][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.921270][T12049] device bridge_slave_0 entered promiscuous mode [ 562.958741][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.973920][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.985900][T12049] device bridge_slave_1 entered promiscuous mode [ 563.073262][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.122381][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 563.145073][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.303733][T12049] team0: Port device team_slave_0 added [ 563.323130][T12127] tmpfs: Bad value for 'huge' [ 563.343335][T12049] team0: Port device team_slave_1 added [ 563.349690][T12127] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1496'. [ 563.468710][T12138] loop5: detected capacity change from 0 to 256 [ 563.481785][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.529847][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.605935][T12138] FAT-fs (loop5): Directory bread(block 64) failed [ 563.636435][T12138] FAT-fs (loop5): Directory bread(block 65) failed [ 563.674504][T12138] FAT-fs (loop5): Directory bread(block 66) failed [ 563.681117][T12138] FAT-fs (loop5): Directory bread(block 67) failed [ 563.683433][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.762482][T12138] FAT-fs (loop5): Directory bread(block 68) failed [ 563.793154][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.799390][T12138] FAT-fs (loop5): Directory bread(block 69) failed [ 563.812482][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.818199][T12138] FAT-fs (loop5): Directory bread(block 70) failed [ 563.909864][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.941182][T12138] FAT-fs (loop5): Directory bread(block 71) failed [ 563.974021][T12138] FAT-fs (loop5): Directory bread(block 72) failed [ 563.980645][T12138] FAT-fs (loop5): Directory bread(block 73) failed [ 564.042405][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 564.054249][T12049] device hsr_slave_0 entered promiscuous mode [ 564.082924][T12049] device hsr_slave_1 entered promiscuous mode [ 564.132535][T12049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.140191][T12049] Cannot create hsr debugfs directory [ 564.322603][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 564.482646][ T23] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 564.532262][ T23] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 564.562406][ T23] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 564.570651][ T23] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 564.621099][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 564.650803][ T23] usb 3-1: config 0 has no interface number 0 [ 564.660981][ T23] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 564.702315][ T23] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 564.733067][ T23] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 564.783155][ T23] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.812367][ T23] usb 3-1: config 0 interface 125 has no altsetting 0 [ 564.834498][T12140] loop1: detected capacity change from 0 to 32768 [ 565.022931][ T23] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 565.082755][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.254369][ T23] usb 3-1: Product: syz [ 565.291064][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 565.310809][ T23] usb 3-1: Manufacturer: syz [ 565.322345][T12175] loop8: detected capacity change from 0 to 512 [ 565.353999][ T23] usb 3-1: SerialNumber: syz [ 565.432640][T12175] EXT4-fs (loop8): Ignoring removed nobh option [ 565.483434][ T23] usb 3-1: config 0 descriptor?? [ 565.551138][T12140] XFS (loop1): Mounting V5 Filesystem [ 565.670136][T12175] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 565.860506][T12175] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 565.903887][T12140] XFS (loop1): Ending clean mount [ 565.915390][T12148] udc-core: couldn't find an available UDC or it's busy [ 565.952402][T12148] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 565.970316][T12175] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #13: comm syz.8.1510: inode has both inline data and extents flags [ 565.994988][T12175] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.1510: couldn't read orphan inode 13 (err -117) [ 565.997402][T12140] XFS (loop1): Quotacheck needed: Please wait. [ 566.021191][T12148] loop2: detected capacity change from 0 to 1024 [ 566.031746][T12175] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 566.164450][T12140] XFS (loop1): Quotacheck: Done. [ 566.242331][ C1] usb 3-1: async_complete: urb error -71 [ 566.248116][ C1] usb 3-1: async_complete: urb error -71 [ 566.253864][ C1] usb 3-1: async_complete: urb error -71 [ 566.259593][ C1] usb 3-1: async_complete: urb error -71 [ 566.265937][ T23] get_1284_register: usb error -71 [ 566.278352][ T23] usb 3-1: USB disconnect, device number 4 [ 566.384189][T12049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 566.447146][T11206] XFS (loop1): Unmounting Filesystem [ 566.484722][T12049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 566.514320][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1514'. [ 566.565493][T12209] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.1513'. [ 566.696173][T12049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 566.843710][ T5497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.861540][T12209] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.1513'. [ 566.882079][T12049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 566.948168][T12211] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.1513'. [ 567.004046][ T5497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.164133][ T5497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.377412][ T5497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.922399][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 568.350367][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.385021][T12250] netlink: 'syz.5.1527': attribute type 10 has an invalid length. [ 568.400428][T12250] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1527'. [ 568.452384][T12250] device dummy0 entered promiscuous mode [ 568.470715][T12250] bridge0: port 4(dummy0) entered blocking state [ 568.484653][T12250] bridge0: port 4(dummy0) entered disabled state [ 568.525712][T12250] bridge0: port 4(dummy0) entered blocking state [ 568.532295][T12250] bridge0: port 4(dummy0) entered forwarding state [ 568.620654][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.834425][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.998659][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.253410][T12186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 569.333994][T12186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 569.457380][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.464545][T12186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.581301][T12186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 569.649140][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 569.677663][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.878153][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.885427][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.898627][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.365150][T12049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.392075][T12049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.460638][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.521675][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.604418][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.663286][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.729019][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.820592][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.893129][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.959156][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 571.043607][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 571.085778][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 571.145373][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 571.695045][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 571.792380][ T5952] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 572.021860][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 572.033493][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 572.042437][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 572.098186][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.162607][ T5952] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 572.194787][T12327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 572.867682][ T5952] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.159059][ T5952] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.167419][ T5952] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.175662][ T5952] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 573.184630][ T5952] usb 2-1: config 0 has no interface number 0 [ 573.190751][ T5952] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 573.237243][ T5952] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.265840][ T5952] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.276420][ T5952] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.290194][ T5952] usb 2-1: config 0 interface 125 has no altsetting 0 [ 573.332380][ T5952] usb 2-1: string descriptor 0 read error: -71 [ 573.352637][ T5952] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 573.402383][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.447926][ T5952] usb 2-1: config 0 descriptor?? [ 573.492628][ T5952] usb 2-1: can't set config #0, error -71 [ 573.512602][ T5952] usb 2-1: USB disconnect, device number 6 [ 573.608948][T12350] loop1: detected capacity change from 0 to 2048 [ 573.721247][T12360] netlink: 'syz.2.1557': attribute type 10 has an invalid length. [ 573.811521][T12362] netlink: 'syz.8.1556': attribute type 29 has an invalid length. [ 573.881291][T12362] netlink: 'syz.8.1556': attribute type 29 has an invalid length. [ 573.913660][T12366] netlink: 'syz.8.1556': attribute type 29 has an invalid length. [ 574.159423][T12350] loop1: detected capacity change from 0 to 32768 [ 574.186649][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 574.212152][T12350] XFS (loop1): Mounting V5 Filesystem [ 574.231717][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 574.306801][T12350] XFS (loop1): Ending clean mount [ 574.363286][T12049] device veth0_vlan entered promiscuous mode [ 574.375696][T12387] netlink: 'syz.8.1559': attribute type 33 has an invalid length. [ 574.399849][T12387] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1559'. [ 574.410000][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 574.541133][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 574.691772][T12049] device veth1_vlan entered promiscuous mode [ 575.192877][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 575.200884][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.250935][T11206] XFS (loop1): Unmounting Filesystem [ 575.279509][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 575.458219][ T5497] device hsr_slave_0 left promiscuous mode [ 575.488018][ T5497] device hsr_slave_1 left promiscuous mode [ 575.509169][ T5497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.569547][ T5497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.617292][ T5497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.638616][ T5497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.671793][ T5497] device bridge_slave_1 left promiscuous mode [ 575.725975][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.756404][ T5497] device bridge_slave_0 left promiscuous mode [ 575.795787][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.957082][ T5497] device veth1_macvtap left promiscuous mode [ 575.984013][ T5497] device veth0_macvtap left promiscuous mode [ 575.990618][ T5497] device veth1_vlan left promiscuous mode [ 576.008936][ T5497] device veth0_vlan left promiscuous mode [ 576.227638][T12432] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1563'. [ 576.433223][T12402] comedi comedi2: reset error (fatal) [ 576.589931][ T5497] team0 (unregistering): Port device team_slave_1 removed [ 576.607739][ T5497] team0 (unregistering): Port device team_slave_0 removed [ 576.621067][ T5497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.637251][ T5497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.716094][ T5497] bond0 (unregistering): Released all slaves [ 576.818157][T12049] device veth0_macvtap entered promiscuous mode [ 576.867348][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 576.891728][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 576.948776][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 576.979781][T12049] device veth1_macvtap entered promiscuous mode [ 577.028994][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.093536][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.121539][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.146261][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.172427][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.197149][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.217195][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.238167][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.256633][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.271727][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.283023][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.303994][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.317210][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.335757][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.380781][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.390707][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.401301][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.429560][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.460907][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 577.485474][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 577.531671][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 577.548901][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 577.585122][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 577.831007][T12491] netlink: 'syz.8.1591': attribute type 3 has an invalid length. [ 577.849232][T12491] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.1591'. [ 577.862330][T12049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.871816][T12049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.887461][T12049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.897889][T12049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.937094][T12488] netlink: 'syz.5.1589': attribute type 21 has an invalid length. [ 577.948577][T12488] netlink: 'syz.5.1589': attribute type 6 has an invalid length. [ 577.972315][T12488] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1589'. [ 578.260126][T12186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.307165][T12186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.340382][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 578.378217][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.412495][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.454830][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 578.496258][T12518] netlink: 'syz.2.1599': attribute type 29 has an invalid length. [ 578.536875][T12518] netlink: 'syz.2.1599': attribute type 29 has an invalid length. [ 579.512387][ T9108] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 579.679891][T12575] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1620'. [ 579.758230][T12575] bridge_slave_1: default FDB implementation only supports local addresses [ 579.772421][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 579.942457][ T9108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.972365][ T9108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.003451][ T9108] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 580.032385][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 580.046921][ T9108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.077349][ T9108] usb 5-1: config 0 descriptor?? [ 580.188318][ T21] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 580.202304][ T21] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 580.240718][ T21] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 580.255887][T12563] loop1: detected capacity change from 0 to 32768 [ 580.262580][ T21] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 580.270855][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 580.290078][ T21] usb 3-1: config 0 has no interface number 0 [ 580.309659][ T21] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 580.351754][ T21] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 580.379300][ T21] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 580.399001][ T21] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.418768][T12563] XFS (loop1): Mounting V5 Filesystem [ 580.422686][ T21] usb 3-1: config 0 interface 125 has no altsetting 0 [ 580.528438][T12512] loop8: detected capacity change from 0 to 65536 [ 580.575446][ T9108] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 580.583282][ T9108] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 580.590719][ T9108] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 580.599428][ T21] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 580.609573][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.617876][ T9108] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 580.625967][ T21] usb 3-1: Product: syz [ 580.630171][ T21] usb 3-1: Manufacturer: syz [ 580.635216][ T9108] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 580.672421][ T21] usb 3-1: SerialNumber: syz [ 580.701537][ T9108] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 580.727880][ T21] usb 3-1: config 0 descriptor?? [ 580.773287][T12512] XFS (loop8): Mounting V5 Filesystem [ 580.780044][T12563] XFS (loop1): Ending clean mount [ 580.973994][T12512] XFS (loop8): Ending clean mount [ 581.042275][ C1] usb 3-1: async_complete: urb error -71 [ 581.048037][ C1] usb 3-1: async_complete: urb error -71 [ 581.053741][ C1] usb 3-1: async_complete: urb error -71 [ 581.059473][ C1] usb 3-1: async_complete: urb error -71 [ 581.065542][ T21] get_1284_register: usb error -71 [ 581.075716][ T21] usb 3-1: USB disconnect, device number 5 [ 581.089949][T12512] fuse: Bad value for 'user_id' [ 581.142277][ T5951] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 581.220853][T11204] XFS (loop8): Unmounting Filesystem [ 581.321918][ T9108] playstation 0003:054C:0DF2.000A: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 581.361383][ T9108] input: HID 054c:0df2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.000A/input/input14 [ 581.396873][ T9108] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.000A/input/input15 [ 581.425159][ T9108] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.000A/input/input16 [ 581.480411][ T9108] playstation 0003:054C:0DF2.000A: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff0008 [ 581.502725][ T5951] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.522914][T12554] udc-core: couldn't find an available UDC or it's busy [ 581.532319][T12554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 581.552365][ T5951] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.672548][ T5951] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 581.706672][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.724217][T12554] udc-core: couldn't find an available UDC or it's busy [ 581.752270][ T5951] usb 2-1: SerialNumber: syz [ 581.783180][T12554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 581.811944][T12617] loop5: detected capacity change from 0 to 32768 [ 581.834637][T12554] udc-core: couldn't find an available UDC or it's busy [ 581.841755][T12554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 581.934340][T12617] xfs: Unknown parameter 'obj_role' [ 581.958043][ T9108] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 582.086101][ T5951] usb 2-1: 0:2 : does not exist [ 582.153312][ T5951] usb 2-1: USB disconnect, device number 7 [ 582.418936][T11749] udevd[11749]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.750327][T11206] XFS (loop1): Unmounting Filesystem [ 582.862440][ T21] usb 5-1: USB disconnect, device number 25 [ 583.009291][T12674] netlink: 'syz.2.1638': attribute type 10 has an invalid length. [ 583.132728][T12674] team0: Port device netdevsim0 added [ 583.145571][T12678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 583.170028][T12673] netlink: 'syz.8.1636': attribute type 10 has an invalid length. [ 583.243203][T12673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.284005][T12673] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 583.378784][T12686] netlink: 'syz.5.1643': attribute type 29 has an invalid length. [ 583.496326][T12686] netlink: 'syz.5.1643': attribute type 29 has an invalid length. [ 583.572718][T12692] netlink: 'syz.5.1643': attribute type 29 has an invalid length. [ 583.664697][T12690] netlink: 'syz.5.1643': attribute type 29 has an invalid length. [ 583.720796][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1648'. [ 583.750602][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1648'. [ 583.811258][T12703] netlink: 'syz.5.1643': attribute type 29 has an invalid length. [ 584.456557][T12682] loop2: detected capacity change from 0 to 32768 [ 584.618810][T12705] loop8: detected capacity change from 0 to 32768 [ 584.672364][T12705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1648 (12705) [ 584.744618][T12682] XFS (loop2): Mounting V5 Filesystem [ 584.781608][T12705] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 584.842627][T12705] BTRFS info (device loop8): turning on sync discard [ 584.849381][T12705] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 584.932529][T12705] BTRFS info (device loop8): use zstd compression, level 3 [ 584.945242][T12705] BTRFS info (device loop8): turning on async discard [ 585.002456][T12705] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 585.023505][T12682] XFS (loop2): Ending clean mount [ 585.065590][T12705] BTRFS info (device loop8): trying to use backup root at mount time [ 585.107563][T12705] BTRFS info (device loop8): enabling auto defrag [ 585.160918][T12705] BTRFS info (device loop8): using free space tree [ 585.214866][T11201] XFS (loop2): Unmounting Filesystem [ 585.229378][T12705] BTRFS info (device loop8): has skinny extents [ 585.287888][T12767] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1666'. [ 585.530023][T12794] netlink: 'syz.5.1670': attribute type 33 has an invalid length. [ 585.551969][ T4336] BTRFS warning (device loop8): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 585.613217][T12794] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1670'. [ 585.645732][T12705] BTRFS warning (device loop8): failed to read root (objectid=2): -5 [ 585.664151][ T5497] BTRFS warning (device loop8): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 585.685114][T12705] BTRFS warning (device loop8): couldn't read tree root [ 585.752325][T12705] BTRFS error (device loop8): parent transid verify failed on 5255168 wanted 5 found 7 [ 585.762095][T12705] BTRFS warning (device loop8): couldn't read tree root [ 585.846618][T12801] netlink: 'syz.5.1673': attribute type 8 has an invalid length. [ 585.897547][T12705] BTRFS info (device loop8): enabling ssd optimizations [ 585.925202][T12705] BTRFS info (device loop8): clearing free space tree [ 585.962601][T12705] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 586.032798][T12705] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 586.110325][T12705] BTRFS info (device loop8): creating free space tree [ 586.156564][T12705] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 586.196560][T12705] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 586.312506][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 586.622313][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 586.810478][ T23] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 586.842332][ T23] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 586.868420][ T23] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 586.892616][ T23] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 586.918307][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 586.965526][ T23] usb 2-1: config 0 has no interface number 0 [ 586.971704][ T23] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 586.983348][ T23] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 587.024787][ T23] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 587.084047][ T23] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.152492][ T23] usb 2-1: config 0 interface 125 has no altsetting 0 [ 587.272378][T12868] delete_channel: no stack [ 587.402819][ T23] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 587.439973][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.528566][ T23] usb 2-1: Product: syz [ 587.578295][ T23] usb 2-1: Manufacturer: syz [ 587.627896][ T23] usb 2-1: SerialNumber: syz [ 587.742107][ T23] usb 2-1: config 0 descriptor?? [ 587.982486][ T9108] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 588.192269][ C1] usb 2-1: async_complete: urb error -71 [ 588.198042][ C1] usb 2-1: async_complete: urb error -71 [ 588.203753][ C1] usb 2-1: async_complete: urb error -71 [ 588.209453][ C1] usb 2-1: async_complete: urb error -71 [ 588.218415][ T23] get_1284_register: usb error -71 [ 588.262328][ T9108] usb 5-1: Using ep0 maxpacket: 8 [ 588.271680][ T23] usb 2-1: USB disconnect, device number 8 [ 588.412539][ T9108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 588.421735][ T9108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.565363][ T9108] pvrusb2: Hardware description: Terratec Grabster AV400 [ 588.622239][ T9108] pvrusb2: ********** [ 588.626366][ T9108] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 588.650769][T12901] netlink: 'syz.8.1705': attribute type 29 has an invalid length. [ 588.695559][ T9108] pvrusb2: Important functionality might not be entirely working. [ 588.702603][T12904] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1706'. [ 588.709650][ T9108] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 588.730744][ T9108] pvrusb2: ********** [ 588.740378][T12901] netlink: 'syz.8.1705': attribute type 29 has an invalid length. [ 588.756954][T12906] netlink: 'syz.8.1705': attribute type 29 has an invalid length. [ 588.772001][T12901] netlink: 'syz.8.1705': attribute type 29 has an invalid length. [ 588.877953][ T2425] pvrusb2: Invalid write control endpoint [ 589.032708][ T2425] pvrusb2: Invalid write control endpoint [ 589.038536][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 589.083126][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 589.108860][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 589.121768][ T2425] pvrusb2: Device being rendered inoperable [ 589.139739][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 589.157424][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 589.191042][ T2425] pvrusb2: Attached sub-driver cx25840 [ 589.238031][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 589.254568][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 589.322780][T12936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1716'. [ 589.502420][T12951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1720'. [ 589.880801][T12968] netlink: 'syz.5.1726': attribute type 10 has an invalid length. [ 589.900586][T12968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1726'. [ 590.200067][T12983] netlink: 'syz.5.1730': attribute type 39 has an invalid length. [ 590.263552][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.373007][T12983] device bridge_slave_0 left promiscuous mode [ 590.379430][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.525177][T12986] loop8: detected capacity change from 0 to 8192 [ 590.598528][T12986] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 590.621503][T12986] REISERFS (device loop8): using ordered data mode [ 590.638803][T12986] reiserfs: using flush barriers [ 590.657524][T12986] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 590.683549][T13000] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1735'. [ 590.738925][T12986] REISERFS (device loop8): checking transaction log (loop8) [ 590.903216][T13005] device team_slave_0 left promiscuous mode [ 591.082830][T12986] REISERFS (device loop8): Using tea hash to sort names [ 591.100132][T12986] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 591.277746][T12986] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 591.448961][ T21] usb 5-1: USB disconnect, device number 26 [ 591.505036][T13005] team0: Port device team_slave_0 removed [ 591.526957][T13009] netlink: 'syz.2.1737': attribute type 10 has an invalid length. [ 591.628775][T13009] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.661039][T13009] bond0: (slave team0): Enslaving as an active interface with an up link [ 592.390429][T13067] NILFS (nullb0): couldn't find nilfs on the device [ 592.416804][ T5951] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 592.492529][ T5952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 592.682466][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 592.752469][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 593.123320][ T5951] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 593.186469][ T5951] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 594.162315][ T5951] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 594.170553][ T5951] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 594.192426][ T5952] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 594.210755][ T5952] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 594.230634][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.308322][ T5951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 594.469227][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 594.492875][ T5951] usb 2-1: config 0 has no interface number 0 [ 594.519116][ T5951] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 594.617780][ T5952] usb 3-1: config 0 has no interface number 0 [ 594.679259][ T5952] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 594.713531][ T5951] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 594.988498][ T5952] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 595.107001][ T5951] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 595.296308][ T5952] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 595.426552][ T5951] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.581418][ T5952] usb 3-1: config 0 interface 125 has no altsetting 0 [ 595.922472][ T5951] usb 2-1: config 0 interface 125 has no altsetting 0 [ 595.962329][ T5952] usb 3-1: string descriptor 0 read error: -71 [ 595.968609][ T5951] usb 2-1: string descriptor 0 read error: -71 [ 595.980632][T13083] loop2: detected capacity change from 0 to 512 [ 595.982853][ T5952] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 595.996690][ T5951] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 596.012860][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.127316][T13091] loop5: detected capacity change from 0 to 512 [ 596.191639][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.216372][ T5952] usb 3-1: config 0 descriptor?? [ 596.222485][ T5951] usb 2-1: config 0 descriptor?? [ 596.252491][ T5952] usb 3-1: can't set config #0, error -71 [ 596.258535][ T5951] usb 2-1: can't set config #0, error -71 [ 596.265840][T13083] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext2 [ 596.279304][ T5952] usb 3-1: USB disconnect, device number 6 [ 596.283170][T13091] EXT4-fs (loop5): Mount option "dioread_lock" incompatible with ext2 [ 596.289651][ T5951] usb 2-1: USB disconnect, device number 9 [ 596.441901][T13095] NILFS (nullb0): couldn't find nilfs on the device [ 702.492191][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 702.499223][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12184/1:b..l [ 702.508138][ C1] (detected by 1, t=10503 jiffies, g=68293, q=21) [ 702.514673][ C1] task:kworker/u4:1 state:R running task stack:21880 pid:12184 ppid: 2 flags:0x00004000 [ 702.527290][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 702.535257][ C1] Call Trace: [ 702.538577][ C1] [ 702.541536][ C1] __schedule+0x11ef/0x43c0 [ 702.546086][ C1] ? mark_lock+0x94/0x320 [ 702.550464][ C1] ? release_firmware_map_entry+0x190/0x190 [ 702.556401][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 702.561732][ C1] preempt_schedule_irq+0xbb/0x160 [ 702.566879][ C1] ? __cond_resched+0xd0/0xd0 [ 702.571591][ C1] ? rcu_is_watching+0x11/0xa0 [ 702.576465][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 702.582311][ C1] irqentry_exit+0x63/0x70 [ 702.586770][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 702.592788][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 702.598104][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 702.617738][ C1] RSP: 0018:ffffc9000334f900 EFLAGS: 00000206 [ 702.623837][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e98a259d9dd29600 [ 702.631841][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b43a0 RDI: ffffffff8a7a0700 [ 702.639836][ C1] RBP: ffffc9000334fa20 R08: dffffc0000000000 R09: 1ffffffff203ac18 [ 702.647832][ C1] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: ffffffff8c31f320 [ 702.655829][ C1] R13: 1ffff92000669f2c R14: 0000000000000246 R15: dffffc0000000000 [ 702.663849][ C1] ? rcu_lock_release+0x5/0x20 [ 702.668656][ C1] ? read_lock_is_recursive+0x10/0x10 [ 702.674079][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 702.679147][ C1] ? batadv_iv_ogm_queue_add+0xd90/0xd90 [ 702.684823][ C1] rcu_lock_acquire+0x2a/0x30 [ 702.689539][ C1] ? rcu_lock_acquire+0x5/0x30 [ 702.694344][ C1] batadv_iv_ogm_schedule+0x432/0xec0 [ 702.699781][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 702.707004][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 702.712661][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 702.719728][ C1] process_one_work+0x85f/0x1010 [ 702.724789][ C1] ? worker_detach_from_pool+0x240/0x240 [ 702.730452][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 702.735777][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 702.740833][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 702.746412][ C1] ? wq_worker_running+0x97/0x170 [ 702.751465][ C1] worker_thread+0xaa6/0x1290 [ 702.756205][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 702.761434][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 702.767364][ C1] kthread+0x436/0x520 [ 702.771454][ C1] ? rcu_lock_release+0x20/0x20 [ 702.776333][ C1] ? kthread_blkcg+0xd0/0xd0 [ 702.780952][ C1] ret_from_fork+0x1f/0x30 [ 702.785439][ C1] [ 702.788534][ C1] rcu: rcu_preempt kthread starved for 10513 jiffies! g68293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 702.799779][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 702.809766][ C1] rcu: RCU grace-period kthread stack dump: [ 702.815854][ C1] task:rcu_preempt state:R running task stack:27416 pid: 15 ppid: 2 flags:0x00004000 [ 702.826667][ C1] Call Trace: [ 702.829970][ C1] [ 702.832938][ C1] __schedule+0x11ef/0x43c0 [ 702.837490][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 702.842988][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 702.848217][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 702.854138][ C1] ? _raw_spin_unlock+0x40/0x40 [ 702.859047][ C1] ? release_firmware_map_entry+0x190/0x190 [ 702.864975][ C1] ? __mod_timer+0x91e/0xd00 [ 702.869729][ C1] schedule+0x11b/0x1e0 [ 702.873932][ C1] schedule_timeout+0x184/0x2d0 [ 702.878821][ C1] ? console_conditional_schedule+0x40/0x40 [ 702.884747][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 702.890679][ C1] ? update_process_times+0x200/0x200 [ 702.896106][ C1] ? prepare_to_swait_event+0x331/0x350 [ 702.901780][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 702.906666][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 702.911906][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 702.918093][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 702.922909][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 702.928137][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 702.933381][ C1] rcu_gp_kthread+0x9b/0x370 [ 702.938001][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 702.944021][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 702.949166][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 702.955095][ C1] ? __kthread_parkme+0x157/0x1b0 [ 702.960149][ C1] kthread+0x436/0x520 [ 702.964254][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 702.969397][ C1] ? kthread_blkcg+0xd0/0xd0 [ 702.974027][ C1] ret_from_fork+0x1f/0x30 [ 702.978496][ C1] [ 702.981814][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 702.988153][ C1] NMI backtrace for cpu 1 [ 702.992507][ C1] CPU: 1 PID: 13083 Comm: syz.2.1768 Not tainted syzkaller #0 [ 703.000002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 703.010087][ C1] Call Trace: [ 703.013391][ C1] [ 703.016256][ C1] dump_stack_lvl+0x188/0x250 [ 703.020965][ C1] ? show_regs_print_info+0x20/0x20 [ 703.026197][ C1] ? load_image+0x400/0x400 [ 703.030733][ C1] ? irq_work_queue+0xbf/0x140 [ 703.035623][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 703.040618][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 703.046804][ C1] ? _printk+0xda/0x130 [ 703.050991][ C1] ? cpu_online+0x1d/0x30 [ 703.055349][ C1] ? load_image+0x400/0x400 [ 703.060001][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 703.066194][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 703.072219][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 703.078428][ C1] print_other_cpu_stall+0x1110/0x1270 [ 703.083928][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 703.088925][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 703.094162][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 703.099045][ C1] ? account_process_tick+0x22a/0x3a0 [ 703.104455][ C1] update_process_times+0x193/0x200 [ 703.109696][ C1] tick_sched_timer+0x37d/0x560 [ 703.114703][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 703.120285][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 703.125543][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 703.130694][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 703.136822][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 703.141823][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 703.147878][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 703.153554][ C1] [ 703.156509][ C1] [ 703.159481][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 703.165532][ C1] RIP: 0010:arch_do_signal_or_restart+0x790/0x12c0 [ 703.172126][ C1] Code: 0a 00 00 41 83 3e 00 0f 84 62 09 00 00 48 b8 48 ee ff ff ff 7f 00 00 49 39 c7 0f 87 f5 08 00 00 0f 01 cb 0f ae e8 49 89 5f 08 <49> c7 47 10 00 00 00 00 49 8d 5f 18 48 8b 44 24 08 4c 8d b0 60 09 [ 703.191780][ C1] RSP: 0018:ffffc9000310fcc0 EFLAGS: 00040287 [ 703.197902][ C1] RAX: 00007fffffffee48 RBX: 0000000000000007 RCX: ceab6f013c830100 [ 703.205920][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 703.213928][ C1] RBP: ffffc9000310fec0 R08: 0000000000000000 R09: 1ffffffff17c6665 [ 703.221967][ C1] R10: dffffc0000000000 R11: fffffbfff17c6666 R12: dffffc0000000000 [ 703.230011][ C1] R13: ffff88807e790000 R14: ffffc9000310ffe0 R15: 00007f8cf8771a78 [ 703.238040][ C1] ? _copy_from_user+0x111/0x170 [ 703.243216][ C1] ? load_gs_index+0x130/0x130 [ 703.248053][ C1] ? get_sigframe_size+0x10/0x10 [ 703.253069][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 703.258595][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 703.263946][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 703.269540][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 703.275055][ C1] do_syscall_64+0x58/0xa0 [ 703.279597][ C1] ? clear_bhb_loop+0x30/0x80 [ 703.284303][ C1] ? clear_bhb_loop+0x30/0x80 [ 703.289099][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 703.295030][ C1] RIP: 0033:0x7f8cfa518e57 [ 703.299477][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 703.319120][ C1] RSP: 002b:00007f8cf8772028 EFLAGS: 00000246 [ 703.325277][ C1] RAX: 0000000000000113 RBX: 00007f8cfa791fa0 RCX: 00007f8cfa518e59 [ 703.333283][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000007 [ 703.341289][ C1] RBP: 00007f8cfa5aed6f R08: 0000000000001000 R09: 0000000000000000 [ 703.349288][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.357289][ C1] R13: 00007f8cfa792038 R14: 00007f8cfa791fa0 R15: 00007ffe23d697f8 [ 703.365304][ C1]