last executing test programs:

7m16.017762447s ago: executing program 2 (id=373):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7e6ac78dbd9b4b473e4c988cafbcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb8", 0x26}], 0x1)

7m15.167775254s ago: executing program 2 (id=376):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

7m14.076425698s ago: executing program 2 (id=383):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xa, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40227d0000007d3e549054f35be88d16585cfb26354977b8c9d3e43194d33fdec5e850138f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x73eb})
r2 = syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x9, 0x5bc0cd356fd929f2, 0x7c, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "aab0"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x7d0, 0x4, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x18}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x3, 0x0, [0x9, 0x4, 0x5, 0x1, 0x5]}, @obex={0x5, 0x24, 0x15, 0x1}, @obex={0x5, 0x24, 0x15, 0xff47}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0xfe, 0x4}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x0, 0x7, 0x1, 0x6, 0x20, 0x2}, 0x50, &(0x7f0000000500)={0x5, 0xf, 0x50, 0x1, [@generic={0x4b, 0x10, 0x9, "3f505fdbd0705d1e4c2d29699a33f0d54016d8c84faae27097ab13b20034a499a58efcf1a8d98ab21def1f701117e4c71670ecd85322fcf2c139ef2e51e027ec62391bae4a82d923"}]}})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)

7m11.474890079s ago: executing program 2 (id=413):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000000c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020)

7m10.105199082s ago: executing program 2 (id=406):
syz_emit_ethernet(0x9a, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x800000, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x1}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0)

7m8.88069902s ago: executing program 2 (id=411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef45", 0xb7}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7m8.729311165s ago: executing program 32 (id=411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef45", 0xb7}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5m48.358394592s ago: executing program 3 (id=926):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x110b}, @flat=@binder={0x73622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

5m47.957346784s ago: executing program 3 (id=929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x658, 0xffffffff, 0x470, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x588, 0x588, 0x588, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x320, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0xfff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:fuse_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x5, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x200, 0x2, 0x1, [0xfffb, 0x2, 0x5, 0xffff, 0x8, 0x56cc, 0x6, 0x6, 0xa36, 0x813, 0x9, 0x4, 0x785, 0x40, 0x7, 0x7]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x80010, r1, 0x15b20000)

5m47.740160741s ago: executing program 3 (id=931):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r1, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000)
recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0)

5m44.491261043s ago: executing program 3 (id=942):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x100843, 0x9c)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55)
fcntl$setlease(r4, 0x400, 0x1)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f)
close_range(r1, 0xffffffffffffffff, 0x0)

5m43.392149687s ago: executing program 3 (id=951):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x118fa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r1, &(0x7f0000000840)=""/40, 0x28)
dup3(r0, r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
flock(0xffffffffffffffff, 0x1)
flock(0xffffffffffffffff, 0x1)
flock(0xffffffffffffffff, 0x1)

5m43.040393878s ago: executing program 3 (id=954):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

5m27.571888103s ago: executing program 33 (id=954):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

16.603450149s ago: executing program 6 (id=2129):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

15.144663135s ago: executing program 6 (id=2132):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x3, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0xfe}, {}, {}, {0x20, 0x0, 0x3}, {}, {}, {0x3}, {}, {}, {0x7}, {}, {0x1}, {}, {0x0, 0x0, 0x40}]}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080))

15.142097575s ago: executing program 6 (id=2133):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2861, &(0x7f0000000500)={[{@nobarrier}, {@oldalloc}, {@nodelalloc}]}, 0x0, 0x53b, &(0x7f0000000780)="$eJzs3e9rJGcdAPDvTLJ3ubvU5FTkLNgWW7kreruXxrZRpK0g6puCWt+fMdkL4TbZI7upl1A0xT9AEFFB3/tG8A8QSsF/QISCvhcVReSqL/VGZmdW82M3u5fuZe82nw9M9nnm1/f7DNnZ+cUzAZxZz0TEaxExFRHPR8RcOT4th5t5Za+Y7/17b63kQxJZ9sY/kkjKcd115fXpiLhULBIzEfGNr0R8Ozkat7Wze3u50ahvlfVae+NOrbWze319Y3mtvlbfXFxceGnp5aUXl25kpWLGvZO1cz4iXvnSX378g198+ZV3PvOdP97827Xv5ml94WNF3hGxcrI1H69Yd6WzLbrybbT1MIKNSd6eytS4swAAYBj5Mf6HI+KTneP/uZjqHM0BAAAAkyR7dTb+nURkD+7ySRYCAAAATl8aEbORpNXyWYDZSNNqtXiG96NxMW00W+1P32pub67m0yLmo5LeWm/Ub0TE+aKe5PWF8hnbbv2FQ/XFiLgcET+au9CpV1eajdVxX/wAAACAM+LS0wfP//81l+bl8+POCwAAABix+b4VAAAAYFI45QcAAIDJ5/wfAAAAJtrXXn89H7Lue7xX39zZvt188/pqvXW7urG9Ul1pbt2prjWba50++zYGra/RbN75bGxu36216612rbWze3Ojub3Zvrl+4BXYAAAAwCm6/PS7f0giYu/zFzpDlP0A9nDudDMDHil/HncCwChNjTsBYGymx50AMDaVgXPYQ8CkSwZMP/rwTnGtMH77cPIBAABG7+rHj97/797oH3xtAHic9XnWBwCYYO7uwdlVOekTgFdGnQkwLh8qPs73m963844+9/9/vq9cXGPIshMnBwAAjMRsZ0jSanmcPhtpWq1GPNF5LUAlubXeqN8ozw9+P1c5n9cXOksmA58ZBgAAAAAAAAAAAAAAAAAAAAAAAAAKWZZENthUZ1YAAADgsRSR/jXp9OYfcXXuudmDVwcOvfXrZ2/85O5yu721EHHuq8Vbvc5FRPun5fgXMq8EAAAAgEdAcZ5efi6MOxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJs37995a6Q6nGffvX4yI+V7xp2Om8zkTlYi4+M8kpvctl0TE1Aji770dEVd6xU/ifpZl82UWveJfeMjx5zubpnf8NCIujSA+nGXv5vuf13p9/9J4pvPZ+/s3XQ4fVP/9X/q//d9Un/3PE4fq/Tz53q9qfeO/HfHkdO/9Tzd+UsQ/ECKvPDtkG7/1zd3dnhP2rbJX/P2xau2NO7XWzu719Y3ltfpafXNxceGlpZeXXly6Ubu13qiXf3uG+eEnfn3/uPZf7BN//mD7j2z/54ZqfRb/ee/uvY8UlUqv+Nee7f37e6VP/LT87ftUWc6nX+2W94ryfk/98ndPHdf+1T7tnxnQ/mtDtT8+9/zXv/+nnlOObA0A4DS0dnZvLzca9a1jCjNDzHPKhVcfjTRGWIhHI41xFbLvFf+PD7TU/ezQmAdbfHAh+yCLT8cI0jh35Hs6FSddYRKxl69ryH9IAABgwvz/oP+4O0gAAAAAAAAAAAAAAAAAAADAwzRE52Hv/CaOdDk2ExFD9z12OObeeJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCs/wYAAP//rDfMnw==")
timer_create(0xfffffffffffffff4, 0x0, &(0x7f0000001400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f00000101c0), &(0x7f00000026c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30})

13.912463344s ago: executing program 6 (id=2136):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB="757466382c6572726f72733d636f6e7465636173653d312c7574663d637161cde7741e6e6613bcfd44d6ece6917b5cc981714bfb9fb5a82aa68997e7ad21de2ae214801cbea6dd6d9b3bf89de1f3b6bed284e2a11839a9828e600459faadf8de21d097e5ad7e1bec8c6c19cf4674333a00396e8a39799efd974e446ce8d8819c20bed643b1512d06c10af23252032bfb314e3b1fd642f96014ed0ccdb22f119c033ce95df323b3bf5f39523464ef4c8433597e091b9c6b112bc9f7146d454780238927273131d08272442a9b7b7d0000000000", @ANYRES32=r0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x7fff, 0x8000})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
keyctl$set_reqkey_keyring(0xe, 0x1)
request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa57', 0x0)
wait4(r2, 0x0, 0x8, 0x0)
ptrace$peeksig(0x4209, r2, &(0x7f0000000340)={0xff, 0x1}, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

12.490221598s ago: executing program 6 (id=2141):
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1000000, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_remount}, {@discard}]}, 0x5, 0x14e1, &(0x7f0000002ac0)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000006880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
lstat(&(0x7f0000008a00)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0xc35, 0x4)
close(r0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
write$P9_RRENAMEAT(r2, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7)
r3 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffc, @local, 0x3}, 0x1c)
sendmmsg$inet6(r3, &(0x7f000000a900)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0xff, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x888)

10.491770421s ago: executing program 6 (id=2146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

10.078516693s ago: executing program 5 (id=2150):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x6c}}, 0x0)

9.838992901s ago: executing program 5 (id=2152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)

8.626977799s ago: executing program 5 (id=2157):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.634643713s ago: executing program 0 (id=2171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents(0xffffffffffffffff, 0x0, 0x48)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x3454, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

5.239914945s ago: executing program 4 (id=2173):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB="757466382c6572726f72733d636f6e7465636173653d312c7574663d637161cde7741e6e6613bcfd44d6ece6917b5cc981714bfb9fb5a82aa68997e7ad21de2ae214801cbea6dd6d9b3bf89de1f3b6bed284e2a11839a9828e600459faadf8de21d097e5ad7e1bec8c6c19cf4674333a00396e8a39799efd974e446ce8d8819c20bed643b1512d06c10af23252032bfb314e3b1fd642f96014ed0ccdb22f119c033ce95df323b3bf5f39523464ef4c8433597e091b9c6b112bc9f7146d454780238927273131d08272442a9b7b7d0000000000", @ANYRES32=r0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x7fff, 0x8000})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
keyctl$set_reqkey_keyring(0xe, 0x1)
request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa57', 0x0)
wait4(r2, 0x0, 0x8, 0x0)
ptrace$peeksig(0x4209, r2, &(0x7f0000000340)={0xff, 0x1}, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

5.111151489s ago: executing program 0 (id=2174):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20)

4.997248173s ago: executing program 4 (id=2175):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r1, r1, 0x0, 0x4)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

4.992612283s ago: executing program 5 (id=2186):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.915713746s ago: executing program 0 (id=2177):
socket$rxrpc(0x21, 0x2, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="b90103600040f000009e0ff088a8", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.540013037s ago: executing program 5 (id=2178):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000300), &(0x7f0000000340)=0x4)

3.582965407s ago: executing program 1 (id=2179):
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket(0x2000000000000021, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x801)
socket$kcm(0x2, 0x3, 0x2)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3.48929718s ago: executing program 1 (id=2180):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10)
sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @local, 0x3c}, 0x1c, 0x0}}], 0x1, 0x44804)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0)

3.336556085s ago: executing program 1 (id=2190):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x10, 0x76, 0x1, 0xfffffffc}, 0xffffff72}], 0x1, 0x0, 0x0, 0x80}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)

3.280101387s ago: executing program 0 (id=2181):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.156690372s ago: executing program 1 (id=2182):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

2.123198823s ago: executing program 4 (id=2183):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00'})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
socket(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90)

1.130224734s ago: executing program 5 (id=2184):
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000001c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007c1bcb554dcdcd464765613a01a861f4007fbefd8539539f5a5a3c1488b48284ca241df655e5c33cf630925e813ea6442f67a4ba1a92116aface282e9bc753fb4a324877709a4513"], 0xfe, 0x9e15, &(0x7f000000a040)="$eJwUk1Mc34UDRZe37JZtnmzbtm375H5fG8u23VbLtm3XsrH4//wf7ut9OPfcOwc4coCjBnjXAO8e4OgB3jPAewd43wDvH+ADA3xwgA8N8OEBPjLARwf42AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+AbA3xzgG8N8O0BvjPAdwf43gDfH+AHA/xwgB8N8OMBfjLATwf42QA/H+AXAxwzwC8H+NUAvx7gNwP8doDfDfD7Af4wwB8H+NMAfx7gLwP8dYC/DfD3Af4xwLED/HOAfw3w7wH+M8B/B/jfAIcEOE6A4wY4XoDjBzhBgBMGOFGAQwMcFuDEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4PAAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDHCuAOcOcJ4A5w1wvgDnD3CBABcMcKEAFw5wkQAXDXCxABcPcIkACXDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVAFcLcPUA1whwzQDXCnDtANcJcN0A1wtw/QA3CHDDADcKcOMANwlw0wA3C3DzALcIcMsAtwpw6wC3CXDbALcLcPsAdwhwxwB3CnDnAHcJcNcAdwtw9wD3CHDPAPcKcO8A9wlw3wD3C3D/AA8I8MAADwrw4AAPCfDQAA8L8PAAjwjwyACPCvDoAI8J8NgAjwvw+ABPCPDEAA3wpABPDvCUAE8N8LQATw/wjADPDHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/giADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAEcGOCrAuwK8O8DRAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHgmAC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8Axwb4Z4B/Bfh3gP8E+G+A/wU4JMRxQhw3xPFCHD/ECUKcMMSJQhwa4rAQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhCHhzhjiDOFOHOIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIuEuGiIi4W4eIhLhEiIS4a4VIhLh7hMiMuGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIjHhnhciMeHeEKIJ4ZoiCeFeHKIp4R4aoinhXh6iGeEeGaIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EEeEeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Y4MsRRId4V4t0hjg7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEMeE+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hDg2xD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThTh0AiHRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEODzCGSOcKcKZI5wlwlkjnC3C2SOcI8I5I5wrwrkjnCfCeSOcL8L5I1wgwgUjXCjChSNcJMJFI1wswsUjXCJCIlwywqUiXDrCZSJcNsLlIlw+whUiXDHClSJcOcJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDbC4yI8PsITIjwxQiM8KcKTIzwlwlMjPC3C0yM8I8IzIxxEGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4IsKzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwpERjorwrgjvjnB0hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0Q4JsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCsRH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGIfGOCzGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcbhMc4Y40wxzhzjLDHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhrjYjEuHuMSMRLjkjEuFePSMS4T47IxLhfj8jGuEOOKMa4U48oxrhLjqjGuFuPqMa4R45oxrhXj2jGuE+O6Ma4X4/oxbhDjhjFuFOPGMW4S46Yxbhbj5jFuEeOWMW4V49YxbhPjtjFuN/6QIf/nu0OMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxmiMJ8V4coynxHhqjKfFeHqMZ8R4ZoyDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYR8R4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xjgyxlEx3hXj3TGOjvGeGO+N8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYx8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/EODbGP2P8K8a/Y/wnxn9j/C/GIQmOk+C4CY6X4PgJTpDghAlOlODQBIclOHGCkyQ4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4PMEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIkESXDLBpRJcOsFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDFBEzwpwZMTPCXBUxM8LcHTEzwjwTMTHCQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJzgiwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBkQmOSvCuBO9OcHSC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJDgmwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8GxCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUx01xvBTHT3GCFCdMcaIUh6Y4LMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxeEpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpkuKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZriSSmenOIpKZ6a4mkpnp7iGSmemeIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FESmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKY5McVSKd6V4d4qjU7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JiV5NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9SHJPilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4tgU/0zxrxT/TvGfFP9N8b8Uh2Q4TobjZjhehuNnOEGGE2Y4UYZDMxyW4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDh8AxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQzJcMkMl8pw6QyXyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/McJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+GIDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4MR2Y4KsO7Mrw7w9EZ3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhkxk+leHTGT6T4bMZPpfh8xm+kOGLGb6U4csZvpLhqxm+luHrGb6R4ZsZvpXh2xm+k+G7Gb6X4fsZfpDhhxl+lOHHGX6S4acZfpbh5xl+keGYDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwzHZvhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lyHJrjsBwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHIfnOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOaw4dMuT/LNbOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8Zgcj83xuByPz/GEHE/M0RxPyvHkHE/J8dQcT8vx9BzPyPHMHAc5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jmOyPGsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GO/+81ZsTYkTmO+r/LQ4YM+X9G5zhkyJAh9+Z4X4735/hAjg/+3/0hQ4Y8nOMjOT6a42M5Pp7jEzk+meNTOT6d4zM5Ppvjczk+n+MLOb6Y40s5vpzjKzm+muNrOb6e4xs5vpnjWzm+neM7Ob6b43s5vp/jBzl+mONHOX6c4yc5fprjZzl+nuMXOY7J8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yHFsjn/m+FeOf+f4T47/5vjf/5kUOE6B4xY4XoHjFzhBgRMWOFGBQwscVuDEBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4PACZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLXCxAhcvcIkCKXDJApcqcOkCNxjejF22wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Clz//30FbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnligBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxR4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngyAJHFXhXgXcXOLrAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvChxT4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeDYAv8s8K8C/y7wnwL/LfC/AoeUOE6J45Y4XonjlzhBiROWOFGJQ0scVuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4vASZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSKXHJEpcqcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEi3xpBJPLvGUEk8t8bQSTy/xjBLPLHFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iiBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEkeWOKrEu0q8u8TRJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHimBK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8Sx5b4Z4l/lfh3if+U+G+J/5U4pMJxKhy3wvEqHL/CCSqcsMKJKhxa4bAKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgqHVzhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVEiFS1a4VIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1ZohSdVeHKFp1R4aoWnVXh6hWdUeGaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7CkdUeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Y4ssJRFd5V4d0Vjq7wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCsdU+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFv1X4e4V/VDi2wj8r/KvCvyv8p8J/K/yvwiE1jlPjuDWOV+P4NU5Q44Q1TlTj0BqH1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOLzGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKJGalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxRms8qcaTazylxlNrPK3G02s8o8YzaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4osazajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxpE1jqrxrhrvrnF0jffUeG+N99V4f40P1PhgjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9Q4psYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGsTX+WeNfNf5d4z81/lvjfzUOaXCcBsdtcLwGx29wggYnbHCiBoc2OKzBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocHhDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDdLgkg0u1eDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ3a4EkNntzgKQ2e2uBpDZ7e4BkNntngoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wRENntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ2ObHBUg3c1eHeDoxu8p8F7G7yvwfsbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwTENftngVw1+3eA3DX7b4HcNft/gDw3+2OBPDf7c4C8N/trgbw3+3uAfDY5t8M8G/2rw7wb/afDfBv9rcEiL47Q4bovjtTh+ixO0OGGLE7U4tMVhLU7c4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtDm9xxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2iRFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s0RZPavHkFk9p8dQWT2vx9BbPaPHMFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2OaPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9scWSLo1q8q8W7Wxzd4j0t3tvifS3e3+IDLT7Y4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtw/7/mxdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9aHNPily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4tgW/2zxrxb/bvGfFv9t8b8Wh3Q4Tofjdjheh+N3OEGHE3Y4UYdDOxzW4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDh8A5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ7pcMkOl+pw6Q6X6XDZDpfrcPmOYUOGDHHFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7fC0Dk/v8IwOz+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4YgOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg5Hdjiqw7s6vLvD0R3e0+G9Hd7X4f0dPtDhgx0+1OHDHT7S4aMdPtbh4x0+0eGTHT7V4dMdPtPhsx0+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2+1eHbHb7T4bsdvtfh+x1+0OGHHX7U4ccdftLhpx1+1uHnHX7R4ZgOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDsd2+GeHf3X4d4f/dPhvh/91OKTHcXoct8fxehy/xwl6nLDHiXoc2uOwHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeh/c4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/RIj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2aI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x5H9HhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2OLLHUT3e1ePdPY7u8Z6e/7FID0x4HgwCRVO3qW3bvbVt27btWyO138dGbSupbdu2He3szPcXzhyHD3DEAB8a4MMDfGSAjw7wsQE+PsAnBvjkAJ8a4NMDfGaAzw7wuQE+P8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOHOCoAY4e4JgBjh3gkADHCXDcAMcLcPwAJwhwwgAnCnDiACcJcGiAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wY4LMDzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrAhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4dYDXBHhtgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCAwwMcEeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AY4McFSAowMcE+DYAIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4SYhDQ5w0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xGEhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xKtDvCbEa0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQxwe4ogQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxZIijQhwd4pgQx4Y4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wkkiHBrhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhEuFSERLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4Y4UkRnhyhEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuREOi/C8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjh8AhHRPhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhCMjHBXh6AjHRDg2wiExjhPjuDGOF+P4MU4Q44QxThTjxDFOEuPQGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMcakYiXHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI+L8fgYT4jxxBhPivHkGI3xlBhPjfG0GE+P8YwYz4zxrBjPjvGcGM+NcViM58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8U4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8eoYr4nx2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGIfHOCLGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfG/2IcGeOoGEfHOCbGsTEOSXCcBMdNcLwEx09wggQnTHCiBCdOcJIEhyY4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyS4ZIJLJUiCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmuFqCqye4RoJrJrhWgmsnuE6C6ya4XoLrJ7hBghsmuFGCGye4SYKbJrhZgpsnuEWCWya4VYJbJ7hNgtsmuF2C2ye4Q4I7JrhTgjsnuEuCuya4W4K7J7hHgnsmuFeCeye4T4L7JrhfgvsneECCByZ4UIIHJ3hIgocmeFiChyd4RIJHJnhUgkcneEyCxyZ4XILHJ3hCgicmeFKCJydogqckeGqCpyV4eoJnJHhmgmcleHaC5yR4boLDEjwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJXJ3hNgtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyY4PMERCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+C/Cf6X4MgERyU4OsExCY5NcEiK46Q4borjpTh+ihOkOGGKE6U4cYqTpDg0xUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5RVM8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJbieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvDrFa1K8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxeEpjkjxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxRHpjgqxdEpjklxbIpDMhwnw3EzHC/D8TOcIMMJM5wow4kznCTDoRlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOH7GS6a4WIZLp7hEhkumeFSGZLh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+Ge6X4f4ZHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+GwDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/KcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+HVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxkOz3BEhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobv/e/wBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxmOzHBUhqMzHJPh2AyH5DhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOQ3OcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMselciTHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7VzXCfHdXNcL8f1c9wgxw1z3CjHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCbHY3M8LsfjczwhxxNzPCnHk3M0x1NyPDXH03I8Pcczcjwzx7NyPDvHc3I8N8dhOZ6X4/k5XpDjhTlelOPFOV6S46U5Xpbj5TlekeOVOV6V4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3McnuOIHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcWSOo3IcneOYHMfmOKTAcQoct8DxChy/wAkKnLDAiQqcuMBJChxa4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5b4HEFHl/gCQWeWOBJBZ5coAWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFDivwvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQXeWeBdBd5d4D0F3lvgfQXeX+ADBT5Y4PACRxT4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4x//7DMW/Cvy7wH8K/LfA/wocWeCoAkcXOKbAsQUOKXGcEsctcbwSxy9xghInLHGiEicucZISh5Y4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJS5S4ZIlLlUiJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5doiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonDSjyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxEGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5Y4vMQRJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4sgSR5U4usQxJY4tcUiF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDi0wkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrnK/C+StcoMIFK1yowoUrXKTCRStcrMLFK1yiwiUrXKpCKly6wmUqXLbC5SpcvsIVKlyxwpUqXLnCVSpctcLVKly9wjUqXLPCtSpcu8J1Kly3wvUqXL/CDSrcsMKNKty4wk0q3LTCzSrcvMItKtyywq0q3LrCbSrctsLtKty+wh0q3LHCnSrcucJdKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyo8scKTKjy5Qis8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrHFbheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwuEVjqjwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K/63wvwpHVjiqwtEVjqlwbIVDahynxnFrHK/G8WucoMYJa5yoxolrnKTGoTVOWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNVLj0jUuU+OyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTVa4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+OwGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+qcVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+PVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzUOr3FEjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOLLGUTWOrnFMjWNrHNLgOA2O2+B4DY7f4AQNTtjgRA1O3OAkDQ5tcNIGJ2tw8ganaHDKBqdqcOoGp2lw2gana3D6BmdocMYGZ2pw5gZnaXDWBmdrcPYG52hwzgbnanDuBudpcN4G52tw/gYXaHDBBhdqcOEGF2lw0QYXa3DxBpdocMkGl2qQBpducJkGl21wuQaXb3CFBldscKUGV25wlQZXbXC1BldvcI0G12xwrQbXbnCdBtdtcL0G129wgwY3bHCjBjducJMGN21wswY3b3CLBrdscKsGt25wmwa3bXC7BrdvcIcGd2xwpwZ3bnCXBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGj2/whAZPbPCkBk9u0AZPafDUBk9r8PQGz2jwzAbPavDsBs9p8NwGhzV4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9scHiDIxp8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8GRDY5qcHSDYxoc2+CQFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lxaIuTtjhZi5O3OEWLU7Y4VYtTtzhNi9O2OF2L07c4Q4sztjhTizO3OEuLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2uFiLi7e4RItLtrhUi7S4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6u0uGqLq7W4eotrtLhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0eGKLJ7V4cou2eEqLp7Z4Wount3hGi2e2eFaLZ7d4TovntjisxfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxataHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3h1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIvDWxzR4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmxxVIujWxzT4tgWh3Q4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh0M7nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLLDpTqkw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypw5M7tMNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfDYR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7HN7hiA4f6vDhDh/p8NEOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv8aNsS/O/ynw387/K/DkR2O6nB0h2M6HNvhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHifpcWiPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Y4rMfzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPw3sc0eP/kVyOTXwfjBZMmSa1bbtb27Zt295aqW3j/7NRt1Ft27btO8/c8w3OzuyLHTnAUQMcPcAxAxw7wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggCMDHBXg6ADHBDg2wIcCfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDHBniqBBHhzgmxLEhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOHICEdFODrCMRGOjfChCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2McGeOoGEfHOCbGsTE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIjExyV4OgExyQ4NsGHEnw4wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTHJniqBRHpzgmxbEpPpTiwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQxHZjgqw9EZjslwbIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/mODLHUTmOznFMjmNzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHCxxZ4KgCRxc4psCxBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiyBJHlTi6xDElji3xoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVjqxwVIWjKxxT4dgKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrHFkjaNqHF3jmBrH1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDIxsc1eDoBsc0OLbBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxzZ4qgWR7c4psWxLT7U4sMtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+xwZIejOhzd4ZgOx3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9PhgjyN7HNXj6B7H9Di25/9YtOc2vgtAgeJbtWrZtl0n27Zt2z7Ztm17v6+NbBvLNlat7T73ufe8h/Pfx26A/QCfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8McOQAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wFED/HuA/wzw3wGOHuB/AxwzwLEDHBLg0ADHCXDcAMcLcFiA4wc4QYATBjg8wIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQIkwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDNMCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAhwR4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTAkQF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8Bjgrw7wD/CfDfAEcH+F+AYwIcG+CQEIeGOE6I44Y4XojDQhw/xAlCnDDE4SFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4RIiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGKIhnhTiySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHiiBAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIY4M8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CnFUiH+H+E+I/4Y4OsT/QhwT4tgQh0Q4NMJxIhw3wvEiHBbh+BFOEOGEEQ6PcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiJcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I1xn2/2YjwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM0wpMiPDnCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wiciHBHhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMKREX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxGOivDvCP+J8N8IR0f4X4RjIhwb4ZAYh8Y4TozjxjhejMNiHD9m1Nj/y+ExThTjxDFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuESMxLhnjUjEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhijMZ4U48kxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R44gYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MT4Z41MxPh3jMzE+G+NzMT4f4wsxvhjjSzG+HOMrMb4a42sxvh7jGzG+GeNbMb4d4zsxvhvjezG+H+MHMX4Y40cxfhzjJzGOjPHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4pxVIx/x/hPjP/GODrG/2IcE+PYGIckODTBcRIcN8HxEhyW4PgJTpDghAkOT3CiBCdOcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkESXDJBJdKcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE3wpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb03wtgRvT/COBO9M8K4E707wngTvTfC+BO9P8IEEH0zwoQQfTvCRBB9N8LEEH0/wiQRHJDhIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/wyQSfSvDpBJ9J8NkEn0vw+QRfSPDFBF9K8OUEX0nw1QRfS/D1BN9I8M0E30rw7QTfSfDdBN9L8P0EP0jwwwQ/SvDjBD9JcGSCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgqMS/DvBfxL8N8HRCf6X4JgExyY4JMWhKY6T4rgpjpfisBTHT3GCFCdMcXiKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpEiKS6a4VIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6ZoiieleHKKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+kOCLFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYojU/w0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1IcleLfKf6T4r8pjk7xvxTHpDg2xSEZDs1wnAzHzXC8DIdlOH6GE2Q4YYbDM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCJDMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxQzM8KcOTMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczM8L8PzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDxzN8IsMRGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8MsOnMnw6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08yHJnhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4agM/87wnwz/zXB0hv9lOCbDsRkOyXFojuPkOG6O4+U4LMfxc5wgxwlzHJ7jRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOZLjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rpXj2jmuk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5jlukeOWOW6V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek+OxOR6X4/E5npDjiTma40k5npzjKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5jshxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2M/fMiQ/33iqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHEfm+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5Tgqx79z/CfHf3McneN/OY7JcWyOQwocWuA4BY5b4HgFDitw/AInKHDCAocXOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixe4RIEUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFXh8gScUeGKBFnhSgScXeEqBpxZ4WoGnF3hGgWcWeFaBZxd4ToHnFnhegecXeEGBFxZ4UYEXF3hJgZcWeFmBlxd4RYFXFnhVgVcXeE2B1xZ4XYHXF3hDgTcWeFOBNxd4S4G3FnhbgbcXeEeBdxZ4V4F3F3hPgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgSMKHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxQ4ssBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAUQX+XeA/Bf5b4OgC/ytwTIFjCxxS4tASxylx3BLHK3FYieOXOEGJE5Y4vMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8xCVKpMQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8ocQTS7TEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0ocUeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7EJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxJElflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJY4q8e8S/ynx3xJHl/hfiWNKHFvikAqHVjhOheNWOF6Fwyocv8IJKpywwuEVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc5U4cwVzlLhrBXOVuHsFc5R4ZwVzlXh3BXOU+G8Fc5X4fwVLlDhghUuVOHCFS5S4aIVLlbh4hUuUSEVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVI0cMGeIxFR5b4XEVHl/hCRWeWKEVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhiAoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFY6s8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qnBUhX9X+E+F/1Y4usL/KhxT4dgKh9Q4tMZxahy3xvFqHFbj+DVOUOOENQ6vcaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqpcckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQarfGkGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGkfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6lxZI2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNo2r8u8Z/avy3xtE1/lfjmBrH1jikwaENjtPguA2O1+CwBsdvcIIGJ2xweIMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizS4aIOLNbh4g0s0SINLNrhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYPbNrhdg9s3uEODOza4U4M7N7hLg7s2uFuDuze4R4N7NrhXg3s3uE+D+za4X4P7N3hAgwc2eFCDBzd4SIOHNnhYg4c3eESDRzZ4VINHN3hMg8c2eFyDxzd4QoMnNmiDJzV4coOnNHhqg6c1eHqDZzR4ZoNnNXh2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIOPNPhog481+HiDTzQ4osFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJgyMb/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/GhzV4N8N/tPgvw2ObvC/Bsc0OLbBIS0ObXGcFsdtcbwWh7U4fosTtDhhi8NbnKjFiVucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZW5ypxZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqMWFW1ykxUVbXKzFxVtcokVaXLLFpUYPdekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFm3xpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRZHtDhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xyRafavHpFp9p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9pcWSLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi6Na/LvFf1r8t8XRLf7X4pgWx7Y4pMOhHY7T4bgdjtfhsA7H73CCDifscHiHE3U4cYeTdDhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdEiHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Zohyd1eHKHp3R4aoendXh6h2d0eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090OKLDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYcjO/y0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzoc1eHfHf7T4b8dju7wvw7HdDi2wyE9Du1xnB7H7XG8Hof1OH6PE/Q4YY/De5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKJHelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxR3s8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscRPQ56/J8AAAD//8P52+I=")
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1e, 0x805, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)

1.129371804s ago: executing program 1 (id=2185):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3})
r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f", 0x14, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

1.076660076s ago: executing program 0 (id=2187):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB="757466382c6572726f72733d636f6e7465636173653d312c7574663d637161cde7741e6e6613bcfd44d6ece6917b5cc981714bfb9fb5a82aa68997e7ad21de2ae214801cbea6dd6d9b3bf89de1f3b6bed284e2a11839a9828e600459faadf8de21d097e5ad7e1bec8c6c19cf4674333a00396e8a39799efd974e446ce8d8819c20bed643b1512d06c10af23252032bfb314e3b1fd642f96014ed0ccdb22f119c033ce95df323b3bf5f39523464ef4c8433597e091b9c6b112bc9f7146d454780238927273131d08272442a9b7b7d0000000000", @ANYRES32=r0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x7fff, 0x8000})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
keyctl$set_reqkey_keyring(0xe, 0x1)
request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa57', 0x0)
wait4(r2, 0x0, 0x8, 0x0)
ptrace$peeksig(0x4209, r2, &(0x7f0000000340)={0xff, 0x1}, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

991.054709ms ago: executing program 4 (id=2188):
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x9, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x24, r3, 0x5, 0x200, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="71a4"}, @chandef_params]}, 0x24}}, 0x0)

872.219662ms ago: executing program 4 (id=2189):
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000240)=""/242)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[], @dest_unreach={0x1, 0x5, 0x0, 0x2, '\x00', {0xf, 0x6, "c897df", 0x101, 0x33, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, [@srh={0x29, 0x0, 0x4, 0x0, 0x1, 0x30, 0x2}], "f1a96e3d0e3a608a"}}}}}}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r4, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c000280050007004000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r2, &(0x7f0000000200)="001adefeae804b4d45f3003b3100", 0xe, 0x44, &(0x7f0000000280)={0x11, 0x8100, r4, 0x1, 0x7, 0x6, @remote}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r5)

15.688719ms ago: executing program 1 (id=2191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.009509ms ago: executing program 4 (id=2192):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060500000000000000000000fffefc05000400000000000900020073797a310000000010000300686173683a69702c6d61630005000500020000000500010006"], 0x48}}, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="27d156241a05"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
socket$inet(0x10, 0x3, 0x0)
syz_open_dev$loop(0x0, 0x9, 0x121080)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002aaaaaa"], 0x0)

0s ago: executing program 0 (id=2193):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

kernel console output (not intermixed with test programs):

CONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.925959][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.955411][ T4630] XFS (loop2): Quotacheck: Done.
[   72.989443][ T4457] device veth1_vlan entered promiscuous mode
[   73.116638][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.137493][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.155131][ T4191] XFS (loop2): Unmounting Filesystem
[   73.196663][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.241077][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.256755][ T4457] device veth0_macvtap entered promiscuous mode
[   73.286848][ T4457] device veth1_macvtap entered promiscuous mode
[   73.355554][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.390617][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.444650][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.475435][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.496590][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.520577][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.562633][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.588016][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.609924][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.692912][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.749053][ T4665] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   73.768116][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.778535][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.807975][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.830181][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.875428][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.901015][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   73.917881][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.961604][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.974296][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.993743][ T4457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.018316][ T4457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.053595][ T4457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.086869][ T4457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.303712][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.327112][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.365029][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.376732][ T4687] capability: warning: `syz.1.143' uses 32-bit capabilities (legacy support in use)
[   74.436489][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.454506][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.546244][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.986605][ T4707] loop1: detected capacity change from 0 to 1024
[   75.064920][ T4707] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   75.080533][ T4707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   75.171486][ T4707] JBD2: no valid journal superblock found
[   75.177268][ T4707] EXT4-fs (loop1): error loading journal
[   75.612923][ T4720] netlink: 'syz.0.154': attribute type 4 has an invalid length.
[   75.697720][ T4722] loop3: detected capacity change from 0 to 128
[   75.923337][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[   76.350703][ T1108] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   76.792510][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short
[   76.850634][ T1108] usb 3-1: not running at top speed; connect to a high speed hub
[   76.976127][ T1108] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[   77.200629][ T1108] usb 3-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[   77.220157][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.240389][ T1108] usb 3-1: Product: syz
[   77.260622][ T1108] usb 3-1: Manufacturer: syz
[   77.265307][ T1108] usb 3-1: SerialNumber: syz
[   77.357041][ T4772] fuse: Bad value for 'fd'
[   77.398257][ T4770] device bridge1 entered promiscuous mode
[   77.559834][ T4780] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   77.690834][ T1108] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   77.797287][ T4787] netlink: 14 bytes leftover after parsing attributes in process `syz.1.178'.
[   77.899876][ T1108] usb 3-1: USB disconnect, device number 2
[   78.020706][ T4795] fuse: Bad value for 'fd'
[   78.070290][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.117604][ T4787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.215066][ T4787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.263933][ T4787] bond0 (unregistering): Released all slaves
[   78.416717][ T4804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.550232][ T4806] netlink: 'syz.2.184': attribute type 6 has an invalid length.
[   80.010841][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   80.300606][ T4232] usb 2-1: Using ep0 maxpacket: 8
[   80.398724][ T4868] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.204'.
[   80.413418][ T4868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'.
[   80.435723][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.457303][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   80.506158][ T4232] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[   80.526080][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.563738][ T4232] usb 2-1: config 0 descriptor??
[   80.738816][ T4879] fuse: Bad value for 'fd'
[   80.999381][ T4890] loop3: detected capacity change from 0 to 128
[   81.081351][ T4856] netlink: 9 bytes leftover after parsing attributes in process `syz.1.201'.
[   81.099996][ T4856] device gretap0 entered promiscuous mode
[   81.143946][ T4892] netlink: 5 bytes leftover after parsing attributes in process `syz.1.201'.
[   81.180721][ T4892] 0��{X��: renamed from gretap0
[   81.220068][ T4892] device 
30��{X�� left promiscuous mode
[   81.227187][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.244890][ T4892] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   81.260577][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.268818][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.271477][ T4894] loop3: detected capacity change from 0 to 128
[   81.300097][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.320762][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.344396][ T4896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'.
[   81.360001][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.395090][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.424244][   T13] cfg80211: failed to load regulatory.db
[   81.432587][ T4232] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[   81.461796][ T4232] logitech-djreceiver 0003:046D:C534.0001: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.1-1/input0
[   81.585205][ T4232] usb 2-1: USB disconnect, device number 2
[   81.789819][ T4903] fido_id[4903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   83.980456][    C1] sched: RT throttling activated
[   86.803858][ T5026] netlink: 'syz.1.262': attribute type 4 has an invalid length.
[   86.851527][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'.
[   86.910301][ T5026] netlink: 'syz.1.262': attribute type 17 has an invalid length.
[   86.941014][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   87.109679][ T5037] device bridge0 entered promiscuous mode
[   88.714036][ T5083] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96
[   88.889502][ T5079] loop1: detected capacity change from 0 to 8192
[   89.186344][ T5102] loop2: detected capacity change from 0 to 8192
[   89.252371][ T5102] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   89.267212][ T5102] REISERFS (device loop2): using ordered data mode
[   89.274396][ T5102] reiserfs: using flush barriers
[   89.283350][ T5112] netlink: 'syz.4.293': attribute type 12 has an invalid length.
[   89.290705][ T5102] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.322367][ T5102] REISERFS (device loop2): checking transaction log (loop2)
[   89.347649][ T5102] REISERFS (device loop2): Using r5 hash to sort names
[   89.443188][ T5102] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   89.525720][ T5117] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.295'.
[   90.193577][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'.
[   90.270135][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'.
[   90.537560][ T5148] netlink: 'syz.3.308': attribute type 3 has an invalid length.
[   90.587168][ T5148] netlink: 'syz.3.308': attribute type 3 has an invalid length.
[   90.616833][ T5150] netlink: 'syz.1.309': attribute type 12 has an invalid length.
[   91.170377][ T5172] fuse: Bad value for 'fd'
[   93.116573][ T5200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'.
[   93.955815][ T5217] loop1: detected capacity change from 0 to 512
[   94.756856][ T5217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.797086][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'.
[   94.882822][ T5225] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.961569][ T5230] device bond1 entered promiscuous mode
[   94.997184][ T5230] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.017702][ T5230] team0: Port device bond1 added
[   95.092941][ T5235] device geneve2 entered promiscuous mode
[   95.240376][ T5244] Invalid ELF header type: 3 != 1
[   95.503458][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   95.534140][ T5262] Set syz0 is full, maxelem 0 reached
[   95.572933][ T5262] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   95.672133][ T5238] loop2: detected capacity change from 0 to 32768
[   95.743348][ T5238] XFS (loop2): Mounting V5 Filesystem
[   95.817166][ T5238] XFS (loop2): Ending clean mount
[   95.834685][ T5238] XFS (loop2): Quotacheck needed: Please wait.
[   95.881927][ T5238] XFS (loop2): Quotacheck: Done.
[   96.045313][ T5281] loop1: detected capacity change from 0 to 1024
[   96.074423][   T26] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x28 
[   96.095575][ T5281] EXT4-fs (loop1): inline encryption not supported
[   96.108082][   T26] XFS (loop2): Unmount and run xfs_repair
[   96.129486][   T26] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   96.156640][ T5281] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,inlinecrypt,errors=remount-ro,stripe=0x0000000000000010,noquota,init_itable,. Quota mode: none.
[   96.156892][   T26] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[   96.273372][ T5281] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   96.287193][ T5281] EXT4-fs (loop1): Remounting filesystem read-only
[   96.328963][   T26] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[   96.339567][   T26] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[   96.366632][   T26] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[   96.385831][   T26] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.399740][   T26] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.410287][   T26] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.425048][   T26] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.435151][ T5238] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x28 len 8 error 74
[   96.438983][ T5290] 9pnet: p9_errstr2errno: server reported unknown error ��n$�[
[   96.438983][ T5290] Q&|x�X
[   96.473665][ T5238] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x156f/0x1b80 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[   96.511407][ T5238] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   96.627106][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'.
[   96.656603][ T4191] XFS (loop2): Unmounting Filesystem
[   96.817040][ T5311] netlink: 156 bytes leftover after parsing attributes in process `syz.3.364'.
[   96.823438][ T5313] overlayfs: failed to clone upperpath
[   96.852389][ T5311] netlink: 156 bytes leftover after parsing attributes in process `syz.3.364'.
[   96.862919][ T5313] overlayfs: failed to clone upperpath
[   96.868507][ T5311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'.
[   96.919671][ T5316] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4457] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5316]
[   98.703634][ T5341] tipc: Started in network mode
[   98.742539][ T5341] tipc: Node identity fe1c451b1f4b, cluster identity 4711
[   98.750059][ T5341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.858635][ T5339] tipc: Resetting bearer <eth:syzkaller0>
[   99.005263][ T5339] tipc: Disabling bearer <eth:syzkaller0>
[   99.553351][ T5351] device bond1 entered promiscuous mode
[  100.107168][ T5353] device bridge2 entered promiscuous mode
[  100.202555][ T5353] bond1: (slave bridge2): making interface the new active one
[  100.232571][ T5353] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  100.360939][ T5353] syz.3.377 (5353) used greatest stack depth: 20528 bytes left
[  100.542339][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'.
[  100.640590][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  100.890555][ T4234] usb 3-1: Using ep0 maxpacket: 32
[  101.010704][ T4234] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.019598][ T5389] ODEBUG: Out of memory. ODEBUG disabled
[  101.027435][ T4234] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  101.046508][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0
[  101.053419][ T4234] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  101.068585][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.085891][ T4234] usb 3-1: config 0 descriptor??
[  101.803062][ T4234] hid-generic 0003:0458:5014.0002: item fetching failed at offset 5/39
[  101.992159][ T4234] hid-generic: probe of 0003:0458:5014.0002 failed with error -22
[  102.055543][ T5365] udc-core: couldn't find an available UDC or it's busy
[  102.181037][ T5365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  102.316415][ T4234] usb 3-1: USB disconnect, device number 3
[  102.987345][ T5422] loop2: detected capacity change from 0 to 256
[  103.109793][ T5422] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  105.026282][ T5389] Set syz1 is full, maxelem 65536 reached
[  105.344582][ T5437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'.
[  105.368579][ T5437] device bond2 entered promiscuous mode
[  105.386923][ T5437] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.645646][  T156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.743958][ T5454] team0: Device ipvlan1 failed to register rx_handler
[  105.812233][  T156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.879184][  T156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.920753][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'.
[  105.958886][  T156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.180392][ T5470] Set syz0 is full, maxelem 0 reached
[  107.301768][  T156] tipc: Left network mode
[  107.343281][ T5463] chnl_net:caif_netlink_parms(): no params data found
[  107.674540][ T5463] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.729560][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.766376][ T5463] device bridge_slave_0 entered promiscuous mode
[  107.792548][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'.
[  107.855996][ T5463] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.866660][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.892715][ T5463] device bridge_slave_1 entered promiscuous mode
[  107.932823][ T5505] netlink: 'syz.3.428': attribute type 1 has an invalid length.
[  107.973109][ T5506] netlink: 'syz.3.428': attribute type 1 has an invalid length.
[  107.980547][ T4301] Bluetooth: hci3: command 0x0409 tx timeout
[  108.031617][ T5463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.109540][ T5463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.725736][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.733544][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.331837][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.520344][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.274908][   T26] Bluetooth: hci3: command 0x041b tx timeout
[  110.538087][ T5513] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.547220][ T5513] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.556169][ T5513] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.565066][ T5513] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.732378][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'.
[  110.925206][ T5463] team0: Port device team_slave_0 added
[  110.946463][ T5463] team0: Port device team_slave_1 added
[  111.022055][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.029032][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.120517][ T5463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.229124][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.246463][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.328702][ T5463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.474690][ T5463] device hsr_slave_0 entered promiscuous mode
[  111.502216][ T5463] device hsr_slave_1 entered promiscuous mode
[  111.518434][   T25] kauditd_printk_skb: 25 callbacks suppressed
[  111.518449][   T25] audit: type=1804 audit(1779977535.563:37): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.449" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=38107 res=1 errno=0
[  111.566781][ T5463] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.575721][ T5463] Cannot create hsr debugfs directory
[  111.630600][   T25] audit: type=1804 audit(1779977535.633:38): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.449" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=38107 res=1 errno=0
[  112.300531][ T4301] Bluetooth: hci3: command 0x040f tx timeout
[  112.525494][  T156] device hsr_slave_0 left promiscuous mode
[  112.545426][  T156] device hsr_slave_1 left promiscuous mode
[  112.579232][  T156] device veth1_macvtap left promiscuous mode
[  112.589553][  T156] device veth0_macvtap left promiscuous mode
[  112.600317][  T156] device veth1_vlan left promiscuous mode
[  112.611542][  T156] device veth0_vlan left promiscuous mode
[  112.873326][  T156] bond1 (unregistering): Released all slaves
[  113.234061][  T156] bond0 (unregistering): Released all slaves
[  113.442082][ T5463] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  113.484115][ T5463] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  113.526127][ T5463] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  113.543370][ T5463] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  113.777211][ T5463] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.814230][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  113.833751][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  113.871861][ T5463] 8021q: adding VLAN 0 to HW filter on device team0
[  113.914701][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  113.931150][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.951565][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.958722][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.984474][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.998462][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.009733][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.023562][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.030714][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.041623][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.060567][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.082441][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.116237][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.139687][ T5648] device ip6gre1 entered promiscuous mode
[  114.162387][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.180744][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.213279][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.261487][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  114.276826][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.299924][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  114.312133][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  114.334512][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  114.380619][ T4195] Bluetooth: hci3: command 0x0419 tx timeout
[  114.597649][ T5667] overlayfs: failed to clone upperpath
[  114.736312][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[  114.789884][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.805395][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.836371][ T5463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.047918][ T5688] overlayfs: failed to clone upperpath
[  115.087626][ T5691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'.
[  115.299020][ T5699] tipc: Failed to remove unknown binding: 66,1,1/0:3660103757/3660103759
[  115.327005][ T5699] tipc: Failed to remove unknown binding: 66,1,1/0:3660103757/3660103759
[  115.366599][ T5699] tipc: Failed to remove unknown binding: 66,1,1/0:3660103757/3660103759
[  115.385828][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  115.402618][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  115.437536][ T5709] overlayfs: failed to clone upperpath
[  115.461075][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  115.481386][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  115.511619][ T5463] device veth0_vlan entered promiscuous mode
[  115.546999][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  115.569816][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.604541][ T5463] device veth1_vlan entered promiscuous mode
[  115.653696][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  115.679304][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  115.704214][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  115.722815][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.753468][ T5463] device veth0_macvtap entered promiscuous mode
[  115.775125][ T5463] device veth1_macvtap entered promiscuous mode
[  115.838976][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.869187][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.898953][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.929293][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.977530][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.006808][ T1108] libceph: connect (1)[c::]:6789 error -101
[  116.015139][ T1108] libceph: mon0 (1)[c::]:6789 connect error
[  116.032631][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.050362][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.094293][ T5740] ceph: No mds server is up or the cluster is laggy
[  116.111148][ T1108] libceph: connect (1)[c::]:6789 error -101
[  116.118554][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  116.129818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  116.135457][ T1108] libceph: mon0 (1)[c::]:6789 connect error
[  116.147095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  116.165950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.187783][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.222097][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.247849][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.259410][ T5749] fuse: Bad value for 'fd'
[  116.288975][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.318795][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.336227][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.392302][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.452549][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.472041][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.472920][ T1108] libceph: connect (1)[c::]:6789 error -101
[  116.496862][ T1108] libceph: mon0 (1)[c::]:6789 connect error
[  116.524014][ T5463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.589375][ T5463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.626535][ T5463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.631128][ T5756] loop1: detected capacity change from 0 to 4096
[  116.668062][ T5463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.922357][ T5554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.930215][ T5554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.982809][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.054877][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.071659][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.097988][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  117.747264][ T5817] netlink: 76 bytes leftover after parsing attributes in process `syz.4.512'.
[  118.206709][ T5836] netlink: 'syz.5.518': attribute type 1 has an invalid length.
[  118.294987][ T5842] device veth0_virt_wifi entered promiscuous mode
[  118.509742][ T5854] tipc: Failed to remove unknown binding: 66,1,1/0:3337681987/3337681989
[  118.565512][ T5854] tipc: Failed to remove unknown binding: 66,1,1/0:3337681987/3337681989
[  118.567723][ T5857] netlink: 168 bytes leftover after parsing attributes in process `syz.5.524'.
[  118.670770][ T5854] tipc: Failed to remove unknown binding: 66,1,1/0:3337681987/3337681989
[  118.853545][ T5871] device bridge0 entered promiscuous mode
[  118.869430][ T5867] ceph: No mds server is up or the cluster is laggy
[  120.392056][ T5909] tipc: Started in network mode
[  120.421122][ T5909] tipc: Node identity bbbbbb01, cluster identity 4711
[  120.503064][ T5909] tipc: Enabled bearer <eth:rose0>, priority 10
[  120.708885][ T5915] netlink: 180 bytes leftover after parsing attributes in process `syz.1.539'.
[  121.070209][ T5920] loop5: detected capacity change from 0 to 4096
[  121.278635][ T5920] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  121.347091][ T5920] ntfs3: loop5: Failed to load $Extend.
[  121.471282][ T5940] device vlan2 entered promiscuous mode
[  121.486526][ T5920] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.499762][ T5940] device syz_tun entered promiscuous mode
[  121.513343][ T5920] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.545290][ T4195] tipc: Node number set to 3149642497
[  121.561492][ T5920] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.580241][ T5920] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.609624][ T5920] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.656355][ T5947] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.725016][ T5920] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.744770][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[  121.768042][ T5920] ntfs3: loop5: ino=5, "/" directory corrupted
[  121.785127][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[  121.821940][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[  122.281446][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  122.333520][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  122.404967][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  122.490384][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  122.569650][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  122.570444][    C0] hrtimer: interrupt took 30828 ns
[  122.683609][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  122.740018][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  122.804919][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  122.839522][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  123.378970][ T5979] device syzkaller0 entered promiscuous mode
[  125.125296][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'.
[  125.231427][ T5997] overlayfs: failed to clone upperpath
[  125.589082][ T6011] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  127.542832][ T4195] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  127.575111][ T6041] overlayfs: failed to resolve './file0': -2
[  127.615921][ T6045] sctp: [Deprecated]: syz.0.592 (pid 6045) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.615921][ T6045] Use struct sctp_sack_info instead
[  127.647773][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.582'.
[  127.920736][ T4195] usb 2-1: config 0 has no interfaces?
[  127.962862][ T2238] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  128.001620][ T4195] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  128.024137][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  128.047585][ T4195] usb 2-1: SerialNumber: syz
[  128.069350][ T4195] usb 2-1: config 0 descriptor??
[  128.221599][ T2238] usb 6-1: Using ep0 maxpacket: 8
[  128.340711][ T2238] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  128.358653][ T2238] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  128.399497][ T2238] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  128.400657][ T5560] usb 2-1: USB disconnect, device number 3
[  128.421091][ T2238] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  128.449964][ T2238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.538043][ T2238] usbtmc 6-1:16.0: bulk endpoints not found
[  128.767698][ T2238] usb 6-1: USB disconnect, device number 2
[  129.965359][    C1] Unknown status report in ack skb
[  130.000376][ T6090] loop5: detected capacity change from 0 to 512
[  131.469378][ T6006] Set syz1 is full, maxelem 65536 reached
[  132.516271][   T25] audit: type=1800 audit(1779977556.593:39): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.608" name="file1" dev="fuse" ino=68719476738 res=0 errno=0
[  132.637192][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.638374][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'.
[  132.644489][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.897250][ T6170] binder: 6168:6170 ioctl c0306201 200000000080 returned -14
[  132.968754][ T6170] binder: 6168:6170 ioctl c0306201 2000000003c0 returned -14
[  132.995490][ T6163] loop5: detected capacity change from 0 to 8192
[  133.389533][ T6177] tipc: Failed to remove unknown binding: 66,0,0/0:4066820313/4066820314
[  133.470303][ T6179] tipc: Failed to remove unknown binding: 66,0,0/0:4066820313/4066820314
[  133.817403][ T6184] loop2: detected capacity change from 0 to 7
[  133.867442][ T4181] Dev loop2: unable to read RDB block 7
[  133.875440][ T4181]  loop2: unable to read partition table
[  133.894280][ T4181] loop2: partition table beyond EOD, truncated
[  133.947260][ T6184] Dev loop2: unable to read RDB block 7
[  133.980880][ T6184]  loop2: unable to read partition table
[  133.987277][ T6184] loop2: partition table beyond EOD, truncated
[  134.079545][ T6184] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  135.660429][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20c!!!
[  135.700440][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!!
[  135.710434][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!!
[  135.750443][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0e!!!
[  135.770441][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28e!!!
[  135.780433][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30e!!!
[  135.790445][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!!
[  135.840586][ T6205] fuse: Bad value for 'fd'
[  136.385408][ T6214] device bridge_slave_0 left promiscuous mode
[  136.430371][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.543676][ T6214] device bridge_slave_1 left promiscuous mode
[  136.583488][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.641986][ T6214] bond0: (slave bond_slave_0): Releasing backup interface
[  136.745181][ T6214] bond0: (slave bond_slave_1): Releasing backup interface
[  136.810849][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  136.937270][ T6214] team0: Port device team_slave_0 removed
[  137.008874][ T6214] team0: Port device team_slave_1 removed
[  137.074931][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.091552][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  137.126353][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.225183][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.240975][ T1108] usb 2-1: config index 0 descriptor too short (expected 1828, got 36)
[  137.246348][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.253584][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.326764][ T1108] usb 2-1: config 0 has no interfaces?
[  137.352097][ T1108] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  137.400584][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.476544][ T1108] usb 2-1: config 0 descriptor??
[  138.114073][ T6261] vivid-003: disconnect
[  138.845212][ T2238] usb 2-1: USB disconnect, device number 4
[  138.858619][ T6224] vivid-003: reconnect
[  139.402705][ T6295] loop1: detected capacity change from 0 to 512
[  139.554685][ T6295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  139.647561][ T6295] EXT4-fs (loop1): orphan file too big: 8388608
[  139.735669][ T6295] EXT4-fs (loop1): mount failed
[  141.155003][ T6338] device wg1 entered promiscuous mode
[  141.602323][ T6347] overlayfs: failed to resolve './file0': -2
[  141.631455][ T6356] binder: 6354:6356 ioctl c0306201 200000000080 returned -14
[  141.752211][ T6356] binder: 6354:6356 ioctl c0306201 2000000003c0 returned -14
[  143.737940][ T6372] loop5: detected capacity change from 0 to 2048
[  144.001896][ T6372] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  144.114884][ T6389] device syzkaller0 entered promiscuous mode
[  144.804476][ T5463] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  148.207579][ T5560] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  148.634017][ T5560] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.661125][ T5560] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  148.736657][ T5560] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  148.810686][ T5560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.887132][ T5560] usb 6-1: config 0 descriptor??
[  149.399020][ T1108] usb 6-1: USB disconnect, device number 3
[  150.017930][ T6507] Illegal XDP return value 18899000, expect packet loss!
[  150.219101][ T6510] netlink: 'syz.5.712': attribute type 1 has an invalid length.
[  150.438519][ T6510] device bond1 entered promiscuous mode
[  150.509530][ T6510] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.519749][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.712'.
[  150.587655][ T6514] bond1 (unregistering): Released all slaves
[  150.740019][ T6516] overlayfs: failed to resolve './file0': -2
[  150.878644][ T6522] device bridge_slave_0 left promiscuous mode
[  150.927488][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.981602][ T6522] device bridge_slave_1 left promiscuous mode
[  151.011876][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.082824][ T6522] bond0: (slave bond_slave_0): Releasing backup interface
[  151.138817][ T6522] bond0: (slave bond_slave_1): Releasing backup interface
[  151.219276][ T6522] team0: Port device team_slave_0 removed
[  151.277630][ T6522] team0: Port device team_slave_1 removed
[  151.322106][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.341103][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.361093][ T6522] bond1: (slave bridge2): Releasing active interface
[  151.597134][ T6540] fuse: Bad value for 'fd'
[  151.799584][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  151.910005][ T6545] device bridge_slave_0 left promiscuous mode
[  151.946833][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.979344][ T6545] device bridge_slave_1 left promiscuous mode
[  151.996548][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.019852][ T6545] bond0: (slave bond_slave_0): Releasing backup interface
[  152.059699][ T6545] bond0: (slave bond_slave_1): Releasing backup interface
[  152.077124][ T6561] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  152.144633][ T6555] kvm: pic: non byte read
[  152.152834][ T6555] kvm: pic: level sensitive irq not supported
[  152.153247][ T6555] kvm: pic: non byte read
[  152.162951][ T6545] team0: Port device team_slave_0 removed
[  152.168230][ T6555] kvm: pic: level sensitive irq not supported
[  152.171269][ T6555] kvm: pic: non byte read
[  152.185195][ T6555] kvm: pic: level sensitive irq not supported
[  152.185854][ T6555] kvm: pic: non byte read
[  152.249271][ T6545] team0: Port device team_slave_1 removed
[  152.263554][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.281867][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.297668][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.307921][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.378340][ T6545] team0: Port device bond1 removed
[  152.394923][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'.
[  152.430243][ T6564] loop1: detected capacity change from 0 to 1024
[  152.518948][ T6564] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  152.645278][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'.
[  153.763780][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.739'.
[  154.167621][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  154.298339][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  154.420798][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.575573][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.595106][ T6606] device bridge_slave_0 left promiscuous mode
[  154.618715][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.655257][ T6606] device bridge_slave_1 left promiscuous mode
[  154.682596][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.873136][ T6606] team0: Port device team_slave_0 removed
[  154.995081][ T6606] team0: Port device team_slave_1 removed
[  155.049991][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.111110][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.167959][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.205456][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.307330][ T6606] team0: Port device geneve1 removed
[  155.648027][ T6628] loop1: detected capacity change from 0 to 128
[  155.760958][ T6628] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  155.857025][ T6628] hpfs: filesystem error: improperly stopped
[  155.887605][ T6628] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  155.920927][ T6628] hpfs: You really don't want any checks? You are crazy...
[  155.928988][ T6628] hpfs: Code page index out of array
[  155.945142][ T6628] hpfs: code page support is disabled
[  155.978249][ T6628] hpfs: hpfs_map_4sectors(): unaligned read
[  156.032906][ T6628] hpfs: hpfs_map_4sectors(): unaligned read
[  156.039400][ T6628] hpfs: filesystem error: unable to find root dir
[  156.772106][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'.
[  157.015549][ T6643] loop1: detected capacity change from 0 to 2048
[  157.252663][ T6643] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.393674][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'.
[  157.495717][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'.
[  157.884648][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'.
[  158.033547][ T4192] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  158.321366][ T6670] loop1: detected capacity change from 0 to 2048
[  158.468845][ T6676] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.632567][ T6674] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  158.693324][ T6674] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  158.968442][ T6687] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  159.117605][ T6687] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.257182][ T6693] bond3: (slave veth3): Enslaving as an active interface with a down link
[  159.313408][ T6694] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  160.575019][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  160.655228][ T6710] overlayfs: failed to resolve './file0': -2
[  160.722413][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  160.801713][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  160.866294][ T6724] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  160.884509][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  160.910893][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  160.953952][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  160.991110][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  161.072710][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  161.127960][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  161.188778][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.782'.
[  161.269747][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  161.315884][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  161.325951][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  161.335515][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  161.354915][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  161.391063][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  161.473433][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  161.544751][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  161.611621][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  161.620305][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.940416][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #106!!!
[  163.950435][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #106!!!
[  163.980419][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #186!!!
[  164.006487][ T6727] syz.5.782 (6727) used greatest stack depth: 20048 bytes left
[  164.149316][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'.
[  164.806531][ T6754] fuse: Bad value for 'fd'
[  164.860141][ T6757] overlayfs: failed to clone upperpath
[  165.702775][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  166.336358][ T6803] overlayfs: failed to clone upperpath
[  167.069239][ T6816] netlink: 'syz.3.819': attribute type 4 has an invalid length.
[  167.200736][ T6819] netlink: 'syz.3.819': attribute type 4 has an invalid length.
[  168.009043][ T6839] tipc: Failed to remove unknown binding: 66,0,0/0:1961692724/1961692725
[  168.065253][ T6839] tipc: Failed to remove unknown binding: 66,0,0/0:1961692724/1961692725
[  168.278340][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  168.635657][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'.
[  169.181977][ T6860] loop5: detected capacity change from 0 to 512
[  169.252336][ T6860] EXT4-fs (loop5): Test dummy encryption mode enabled
[  169.316474][ T6863] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.835'.
[  169.319704][ T6860] EXT4-fs (loop5): Ignoring removed oldalloc option
[  169.450715][ T6860] EXT4-fs (loop5): 1 truncate cleaned up
[  169.456979][ T6860] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none.
[  169.654146][ T6860] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #15: comm syz.5.834: Can't allocate blocks for non-extent mapped inodes with bigalloc
[  169.714744][ T6866] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #15: comm syz.5.834: Can't allocate blocks for non-extent mapped inodes with bigalloc
[  169.809576][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  169.824850][ T6871] device lo entered promiscuous mode
[  169.831434][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  169.856572][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  169.885434][ T6871] device tunl0 entered promiscuous mode
[  169.895882][ T6871] device gre0 entered promiscuous mode
[  169.906807][ T6871] device 
30��{X�� entered promiscuous mode
[  169.916340][ T6871] device erspan0 entered promiscuous mode
[  169.925607][ T6871] device ip_vti0 entered promiscuous mode
[  169.934033][ T6871] device ip6_vti0 entered promiscuous mode
[  169.983745][ T6871] device sit0 entered promiscuous mode
[  170.032077][ T6871] device ip6tnl0 entered promiscuous mode
[  170.052662][ T6871] device ip6gre0 entered promiscuous mode
[  170.060349][ T6871] device syz_tun entered promiscuous mode
[  170.088315][ T6871] device ip6gretap0 entered promiscuous mode
[  170.099289][ T6871] device bridge0 entered promiscuous mode
[  170.109569][ T6871] device vcan0 entered promiscuous mode
[  170.117467][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.128815][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.214369][ T6871] device team0 entered promiscuous mode
[  170.306053][ T6871] device dummy0 entered promiscuous mode
[  170.366251][ T6871] device nlmon0 entered promiscuous mode
[  170.414463][ T6871] device caif0 entered promiscuous mode
[  170.439890][ T6871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.467515][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'.
[  170.640899][ T6879] netlink: 76 bytes leftover after parsing attributes in process `syz.5.838'.
[  171.073436][ T6903] loop5: detected capacity change from 0 to 764
[  171.323173][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'.
[  171.480436][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'.
[  171.795866][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'.
[  172.090590][ T6922] netlink: 104 bytes leftover after parsing attributes in process `syz.3.853'.
[  172.495257][ T6927] loop5: detected capacity change from 0 to 2048
[  172.709340][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'.
[  172.735195][ T6927] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.843102][ T6940] netlink: 'syz.3.861': attribute type 1 has an invalid length.
[  173.039254][ T6940] bond2: (slave bridge4): making interface the new active one
[  173.053109][ T6940] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  173.863399][ T5463] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  173.935612][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'.
[  174.000954][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  174.091667][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  174.162667][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  174.234626][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  174.516639][ T6956] netlink: 'syz.4.869': attribute type 1 has an invalid length.
[  174.728425][ T6957] bond1: (slave geneve3): Error -99 calling set_mac_address
[  175.290551][ T2238] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  175.530619][ T2238] usb 6-1: Using ep0 maxpacket: 16
[  175.661002][ T4301] Bluetooth: hci4: command 0x0406 tx timeout
[  175.667762][   T26] Bluetooth: hci2: command 0x0406 tx timeout
[  175.675689][   T26] Bluetooth: hci1: command 0x0406 tx timeout
[  175.690880][ T2238] usb 6-1: unable to get BOS descriptor or descriptor too short
[  175.802391][ T2238] usb 6-1: config 1 has an invalid interface number: 237 but max is 0
[  175.820586][ T2238] usb 6-1: config 1 has no interface number 0
[  175.827967][ T6976] "syz.1.874" (6976) uses obsolete ecb(arc4) skcipher
[  175.857877][ T2238] usb 6-1: config 1 interface 237 has no altsetting 0
[  177.742678][ T2238] usb 6-1: string descriptor 0 read error: -22
[  177.750711][ T2238] usb 6-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  177.821164][ T2238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.987207][ T6988] netlink: 104 bytes leftover after parsing attributes in process `syz.4.880'.
[  178.030696][ T2238] usb 6-1: can't set config #1, error -71
[  178.088921][ T2238] usb 6-1: USB disconnect, device number 4
[  178.235297][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.881'.
[  178.538769][ T6996] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.847000][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.5.885'.
[  178.903323][ T7014] sctp: [Deprecated]: syz.3.888 (pid 7014) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.903323][ T7014] Use struct sctp_sack_info instead
[  179.032863][ T7024] sctp: [Deprecated]: syz.3.888 (pid 7024) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.032863][ T7024] Use struct sctp_sack_info instead
[  181.203707][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'.
[  181.293958][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.900'.
[  181.493845][ T7113] sctp: [Deprecated]: syz.0.903 (pid 7113) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.493845][ T7113] Use struct sctp_sack_info instead
[  181.544310][ T7110] bridge2: port 1(vlan2) entered blocking state
[  181.600811][ T7110] bridge2: port 1(vlan2) entered disabled state
[  181.618462][ T7114] sctp: [Deprecated]: syz.0.903 (pid 7114) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.618462][ T7114] Use struct sctp_sack_info instead
[  182.088635][ T7119] loop5: detected capacity change from 0 to 128
[  182.245534][ T7119] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.345803][ T7119] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  182.686898][   T25] audit: type=1804 audit(1779977606.763:40): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.906" name="/newroot/69/bus/file1" dev="loop5" ino=12 res=1 errno=0
[  183.423947][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'.
[  184.676990][ T7166] loop5: detected capacity change from 0 to 2048
[  184.729622][ T7159] loop1: detected capacity change from 0 to 4096
[  184.825764][ T7166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.062846][   T25] audit: type=1800 audit(1779977609.143:41): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.923" name="file1" dev="loop5" ino=1415 res=0 errno=0
[  187.149973][ T7190] sctp: [Deprecated]: syz.5.933 (pid 7190) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.149973][ T7190] Use struct sctp_sack_info instead
[  187.246733][ T7194] sctp: [Deprecated]: syz.5.933 (pid 7194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.246733][ T7194] Use struct sctp_sack_info instead
[  187.670114][ T7199] VFS: Mount too revealing
[  188.154238][ T7208] loop5: detected capacity change from 0 to 8
[  191.020519][   T26] Bluetooth: hci0: command 0x0406 tx timeout
[  193.753145][ T7257] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.955'.
[  193.833145][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.956'.
[  194.074375][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.081500][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.373201][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'.
[  194.509460][ T7265] loop5: detected capacity change from 0 to 2048
[  194.789889][ T7272] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.172999][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  203.491925][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'.
[  204.080952][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'.
[  207.113613][ T7310] Set syz1 is full, maxelem 65536 reached
[  207.864951][ T7351] device macvlan2 entered promiscuous mode
[  207.940614][ T7351] device bond0 entered promiscuous mode
[  207.947068][ T7351] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  208.066675][ T7357] netlink: 'syz.4.992': attribute type 1 has an invalid length.
[  208.434153][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.5.993'.
[  208.485040][ T7357] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.723433][ T7359] bond2: (slave veth3): Enslaving as an active interface with a down link
[  208.826782][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'.
[  208.835457][ T7378] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  208.903885][ T7368] tmpfs: Bad value for 'mpol'
[  208.947903][ T7372] 8021q: adding VLAN 0 to HW filter on device bond4
[  209.069447][ T7381] netlink: 52 bytes leftover after parsing attributes in process `syz.4.997'.
[  209.145262][ T7384] netlink: 76 bytes leftover after parsing attributes in process `syz.4.997'.
[  209.175380][ T7384] netlink: 52 bytes leftover after parsing attributes in process `syz.4.997'.
[  209.980025][ T7361] chnl_net:caif_netlink_parms(): no params data found
[  210.460749][ T4301] Bluetooth: hci5: command 0x0409 tx timeout
[  210.518807][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.530645][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.541887][ T7361] device bridge_slave_0 entered promiscuous mode
[  210.554139][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.562456][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.604468][ T7361] device bridge_slave_1 entered promiscuous mode
[  210.795837][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.862493][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.034006][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  211.164326][ T7361] team0: Port device team_slave_0 added
[  211.223021][ T7361] team0: Port device team_slave_1 added
[  211.394523][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.450829][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.618580][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.749317][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.766139][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.970575][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.288967][ T7361] device hsr_slave_0 entered promiscuous mode
[  212.335495][ T7361] device hsr_slave_1 entered promiscuous mode
[  212.370647][ T7361] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.399450][ T7361] Cannot create hsr debugfs directory
[  212.541310][ T4195] Bluetooth: hci5: command 0x041b tx timeout
[  215.102040][ T4195] Bluetooth: hci5: command 0x040f tx timeout
[  215.195802][ T7361] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.282405][ T7361] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.348897][ T7361] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.423513][ T7361] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  215.462962][ T7455] overlayfs: failed to clone upperpath
[  217.180610][ T4301] Bluetooth: hci5: command 0x0419 tx timeout
[  217.311436][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.643153][ T7470] bond2: (slave ip6gretap1): making interface the new active one
[  217.654495][ T7470] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  217.667985][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  217.691947][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  217.758112][ T7361] 8021q: adding VLAN 0 to HW filter on device team0
[  217.795395][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  217.841998][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  217.902281][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.910056][ T4995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.089169][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  218.112334][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  218.192687][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  218.276545][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.284339][ T4995] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.485020][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  220.096732][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  220.160593][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  220.169830][ T7480] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  220.185667][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  220.197983][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  220.294220][ T7480] overlayfs: failed to set xattr on upper
[  220.405943][ T7480] overlayfs: ...falling back to index=off,metacopy=off.
[  220.463016][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  220.535182][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  220.584532][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'.
[  220.647504][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  220.778710][ T7489] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  220.930539][ T7361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.970477][ T7361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.033295][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  221.070849][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  221.142390][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  221.239779][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  221.290698][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  222.242578][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  222.272498][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  222.359950][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.801883][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.822724][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.868184][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  223.880236][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  223.903607][ T7361] device veth0_vlan entered promiscuous mode
[  223.913491][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  223.924435][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  223.948851][ T7361] device veth1_vlan entered promiscuous mode
[  224.073242][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.102253][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.114343][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.162346][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.206057][ T7361] device veth0_macvtap entered promiscuous mode
[  224.254520][ T7361] device veth1_macvtap entered promiscuous mode
[  224.363342][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.396012][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.452866][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.500028][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.606329][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.785060][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.056744][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.318533][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.539493][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.763796][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.905390][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.950840][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.084504][ T7361] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.145494][ T7361] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.208117][ T7361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.260610][ T7361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.518307][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'.
[  226.637947][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  226.743222][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  227.296435][ T7550] loop1: detected capacity change from 0 to 32768
[  227.319172][ T7078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.358891][ T7078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.399234][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.478047][ T7083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.567466][ T7083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.611042][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.966661][ T7302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (7302)
[  228.063563][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.983'.
[  228.364173][ T7583] team0: Port device team_slave_0 removed
[  230.588962][ T7619] bond2: option mode: unable to set because the bond device is up
[  230.741019][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'.
[  230.811791][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'.
[  231.219571][ T7637] loop5: detected capacity change from 0 to 512
[  232.105704][ T7570] Bluetooth: hci3: command 0x0406 tx timeout
[  233.138985][ T7664] overlayfs: failed to clone upperpath
[  234.797876][ T4294] device hsr_slave_0 left promiscuous mode
[  234.866986][ T4294] device hsr_slave_1 left promiscuous mode
[  235.259760][ T4294] bond2 (unregistering): (slave bridge4): Releasing active interface
[  235.427077][ T4294] bond2 (unregistering): Released all slaves
[  235.657020][ T4294] bond1 (unregistering): Released all slaves
[  237.105695][ T4294] bond0 (unregistering): Released all slaves
[  248.047819][ T7786] kernel profiling enabled (shift: 9)
[  250.414889][ T7821] tipc: Failed to remove unknown binding: 66,0,0/0:2463435414/2463435416
[  250.460108][ T7821] tipc: Failed to remove unknown binding: 66,0,0/0:2463435414/2463435415
[  250.570973][ T7821] tipc: Failed to remove unknown binding: 66,0,0/0:2463435414/2463435416
[  250.631191][ T7821] tipc: Failed to remove unknown binding: 66,0,0/0:2463435414/2463435415
[  251.055126][ T7830] fuse: Bad value for 'fd'
[  252.381329][ T7848] loop1: detected capacity change from 0 to 512
[  252.747356][ T7848] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1113: inode #1: comm syz.1.1113: iget: illegal inode #
[  252.767872][ T7848] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1113: error while reading EA inode 1 err=-117
[  252.786118][ T7848] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  252.801527][ T7848] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1113: inode #1: comm syz.1.1113: iget: illegal inode #
[  252.823370][ T7848] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1113: error while reading EA inode 1 err=-117
[  252.837598][ T7848] EXT4-fs (loop1): 1 orphan inode deleted
[  252.844901][ T7848] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  255.513636][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  255.521932][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  258.414485][ T7918] tipc: Failed to remove unknown binding: 66,0,0/0:1422862649/1422862650
[  258.507652][ T7918] tipc: Failed to remove unknown binding: 66,0,0/0:1422862649/1422862650
[  259.020752][ T7928] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7928]
[  259.813400][ T7927] device macsec0 entered promiscuous mode
[  259.884005][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'.
[  259.984175][ T7927] device veth1_macvtap left promiscuous mode
[  261.004806][ T7955] netlink: 'syz.0.1139': attribute type 1 has an invalid length.
[  261.495619][ T7956] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  261.575114][ T7956] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  261.679201][ T7956] bond5: (slave vxcan1): Error -22 calling dev_set_mtu
[  261.902772][ T7959] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  262.026714][ T7959] bond5: (slave vxcan1): Error -22 calling dev_set_mtu
[  262.118589][ T7972] netlink: 'syz.5.1141': attribute type 27 has an invalid length.
[  262.140669][ T7972] netlink: 'syz.5.1141': attribute type 4 has an invalid length.
[  262.170928][ T7972] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1141'.
[  262.957674][ T7988] loop5: detected capacity change from 0 to 256
[  263.088623][ T7993] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1147'.
[  264.122289][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1152'.
[  265.635630][ T7568] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  265.920611][ T7568] usb 6-1: Using ep0 maxpacket: 32
[  266.040872][ T7568] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  266.080294][ T7568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.155772][ T7568] usb 6-1: config 0 descriptor??
[  266.205022][ T7568] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  266.245679][ T5560] libceph: connect (1)[c::]:6789 error -101
[  266.259650][ T5560] libceph: mon0 (1)[c::]:6789 connect error
[  266.268847][ T8055] device syzkaller1 entered promiscuous mode
[  266.289718][ T8008] ceph: No mds server is up or the cluster is laggy
[  266.300566][ T5560] libceph: connect (1)[c::]:6789 error -101
[  266.307446][ T5560] libceph: mon0 (1)[c::]:6789 connect error
[  266.420936][ T7568] gspca_vc032x: reg_r err -32
[  266.426144][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.440824][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.480599][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.528183][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.572717][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.583474][ T1108] libceph: connect (1)[c::]:6789 error -101
[  266.591036][ T1108] libceph: mon0 (1)[c::]:6789 connect error
[  266.613936][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.658743][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.701103][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.744753][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.797512][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.823071][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.839420][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.847154][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.919310][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.956246][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  266.989771][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  267.022533][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  267.057706][ T7568] gspca_vc032x: I2c Bus Busy Wait 00
[  267.090822][ T7568] gspca_vc032x: Unknown sensor...
[  267.119563][ T7568] vc032x: probe of 6-1:0.0 failed with error -22
[  267.132910][ T4236] libceph: connect (1)[c::]:6789 error -101
[  267.139580][ T4236] libceph: mon0 (1)[c::]:6789 connect error
[  269.040979][   T26] usb 6-1: USB disconnect, device number 5
[  269.173395][ T8105] loop5: detected capacity change from 0 to 128
[  269.349233][ T8105] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.833723][ T8116] netlink: 'syz.1.1176': attribute type 1 has an invalid length.
[  271.415156][ T8119] bond0: (slave gretap0): making interface the new active one
[  271.599320][ T8119] bond0: (slave gretap0): Enslaving as an active interface with an up link
[  271.753522][ T8122] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  272.079870][ T8147] delete_channel: no stack
[  272.088597][ T8147] delete_channel: no stack
[  273.312580][ T8160] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1185'.
[  274.030610][   T25] audit: type=1326 audit(1779977698.063:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33c8635e59 code=0x0
[  274.396541][   T25] audit: type=1326 audit(1779977698.133:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  274.560711][   T25] audit: type=1326 audit(1779977698.163:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  276.274865][   T25] audit: type=1326 audit(1779977698.173:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  276.400634][   T25] audit: type=1326 audit(1779977698.173:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  276.604417][   T25] audit: type=1326 audit(1779977698.173:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  276.746315][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1195'.
[  276.810930][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.890751][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.901538][   T25] audit: type=1326 audit(1779977698.173:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  276.937816][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.005475][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.050232][   T25] audit: type=1326 audit(1779977698.173:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  277.175687][   T25] audit: type=1326 audit(1779977698.173:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  277.193841][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'.
[  277.300632][   T25] audit: type=1326 audit(1779977698.173:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.1.1188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f33c8635e59 code=0x7ffc0000
[  277.326508][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1200'.
[  277.388121][ T8210] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1199'.
[  277.465486][ T8210] HTB: quantum of class 801C000C is small. Consider r2q change.
[  279.614837][   T25] kauditd_printk_skb: 36 callbacks suppressed
[  279.614871][   T25] audit: type=1326 audit(1779977703.693:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.4.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf265aee59 code=0x0
[  281.146830][ T8270] loop1: detected capacity change from 0 to 256
[  281.289007][ T8270] exfat: Deprecated parameter 'utf8'
[  281.350841][ T8270] exfat: Deprecated parameter 'utf8'
[  281.418340][ T8270] exfat: Deprecated parameter 'namecase'
[  281.488280][ T8270] exfat: Deprecated parameter 'namecase'
[  281.674704][ T8270] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  286.338707][ T8310] sch_fq: defrate 53322 ignored.
[  287.902057][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1232'.
[  288.887112][ T8335] fuse: Bad value for 'fd'
[  289.615768][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'.
[  289.923135][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.323041][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.608549][ T8358] netlink: 'syz.6.1241': attribute type 16 has an invalid length.
[  291.632772][ T8358] netlink: 'syz.6.1241': attribute type 17 has an invalid length.
[  291.711091][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready
[  291.802154][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  291.811191][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  291.835173][ T8358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.880177][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1247'.
[  291.925656][ T8377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1247'.
[  291.977206][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1247'.
[  292.061392][ T8377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1247'.
[  292.263070][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1248'.
[  292.273369][ T8384] sch_tbf: burst 0 is lower than device lo mtu (143) !
[  292.900639][ T8382] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  292.951329][ T8385] netlink: 'syz.6.1249': attribute type 49 has an invalid length.
[  296.846123][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  296.924568][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  297.076050][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  297.188457][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  297.232915][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  297.305741][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  297.409878][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  297.816177][ T8465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1267'.
[  298.091633][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  299.112708][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  299.229987][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  299.270004][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  299.327080][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  299.381707][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  299.442593][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  299.645575][ T8470] bond2: (slave veth3): Releasing active interface
[  299.721436][ T8475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  299.729816][ T8475] IPv6: NLM_F_CREATE should be set when creating new route
[  299.840876][ T8476] device lo left promiscuous mode
[  299.920634][ T8476] device tunl0 left promiscuous mode
[  300.059080][ T8476] device gre0 left promiscuous mode
[  300.459948][ T8476] device 
30��{X�� left promiscuous mode
[  300.633292][ T8476] device erspan0 left promiscuous mode
[  300.719736][ T8476] device ip_vti0 left promiscuous mode
[  300.836565][ T8476] device ip6_vti0 left promiscuous mode
[  300.938047][ T8476] device sit0 left promiscuous mode
[  301.051556][ T8476] device ip6tnl0 left promiscuous mode
[  301.080720][ T8476] device ip6gre0 left promiscuous mode
[  301.229727][ T8476] device syz_tun left promiscuous mode
[  301.299121][ T8476] device ip6gretap0 left promiscuous mode
[  301.419817][ T8476] device bridge0 left promiscuous mode
[  301.539676][ T8476] device vcan0 left promiscuous mode
[  301.585698][ T8476] device dummy0 left promiscuous mode
[  301.676697][ T8476] device nlmon0 left promiscuous mode
[  301.689891][ T8476] device caif0 left promiscuous mode
[  304.422826][ T8476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.433508][ T8476] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.443525][ T8476] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.453832][ T8476] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.479259][ T8476] device geneve1 left promiscuous mode
[  304.598171][ T8476] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.607408][ T8476] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.616348][ T8476] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.625261][ T8476] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.655048][ T8476] device bridge1 left promiscuous mode
[  304.823136][ T8476] device ip6gre1 left promiscuous mode
[  305.651472][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1282'.
[  305.842707][ T8526] fuse: Bad value for 'fd'
[  306.326738][   T25] audit: type=1326 audit(1779977730.393:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.5.1293" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca17e94e59 code=0x0
[  309.732054][ T8607] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1309'.
[  309.816192][ T8613] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1309'.
[  313.981838][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1317'.
[  314.446543][ T8651] netlink: 'syz.6.1318': attribute type 28 has an invalid length.
[  314.454605][ T8651] netlink: 'syz.6.1318': attribute type 3 has an invalid length.
[  314.462476][ T8651] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1318'.
[  314.699848][ T8668] netlink: 'syz.0.1323': attribute type 1 has an invalid length.
[  314.805323][ T8676] loop5: detected capacity change from 0 to 256
[  314.951826][ T8668] 8021q: adding VLAN 0 to HW filter on device bond6
[  315.169313][ T8678] bond6: (slave geneve2): making interface the new active one
[  315.231814][ T8678] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  315.242589][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  315.401954][ T4234] libceph: connect (1)[c::]:6789 error -101
[  315.408690][ T4234] libceph: mon0 (1)[c::]:6789 connect error
[  315.526434][ T8691] ceph: No mds server is up or the cluster is laggy
[  315.543703][ T4234] libceph: connect (1)[c::]:6789 error -101
[  315.599220][ T4234] libceph: mon0 (1)[c::]:6789 connect error
[  315.602593][ T8702] netlink: 'syz.1.1331': attribute type 1 has an invalid length.
[  315.641752][ T8702] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1331'.
[  315.691613][ T8705] netlink: 'syz.0.1332': attribute type 2 has an invalid length.
[  315.815254][ T8706] loop1: detected capacity change from 0 to 2048
[  315.901375][ T8706] UDF-fs: bad mount option "rootdir=00000000G00000000013" or missing value
[  316.014610][ T8713] netlink: 'syz.0.1334': attribute type 4 has an invalid length.
[  316.045645][ T8713] netlink: 'syz.0.1334': attribute type 4 has an invalid length.
[  316.189082][ T8716] loop5: detected capacity change from 0 to 1024
[  316.743362][ T8739] overlayfs: failed to clone upperpath
[  316.900543][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  316.943058][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  316.949386][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  319.113192][ T8758] overlayfs: failed to clone upperpath
[  319.300774][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.314232][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1349'.
[  319.325535][ T4234] usb 2-1: config 0 has no interfaces?
[  319.332393][ T4234] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  319.368706][ T8768] device wlan0 entered promiscuous mode
[  319.390586][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.440623][ T4234] usb 2-1: config 0 descriptor??
[  319.674960][ T4234] usb 2-1: USB disconnect, device number 5
[  319.755199][ T8788] loop1: detected capacity change from 0 to 256
[  320.265651][ T8803] netlink: 'syz.0.1355': attribute type 29 has an invalid length.
[  320.290879][ T8803] netlink: 'syz.0.1355': attribute type 29 has an invalid length.
[  320.307856][ T8803] netlink: 'syz.0.1355': attribute type 29 has an invalid length.
[  320.459846][ T8809] netlink: 'syz.1.1356': attribute type 4 has an invalid length.
[  322.123637][   T25] audit: type=1326 audit(1779977746.205:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.1.1358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c8635e59 code=0x7fc00000
[  322.379907][ T8835] netlink: 'syz.1.1361': attribute type 10 has an invalid length.
[  322.690891][ T8854] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  323.958326][ T8903] netlink: 'syz.6.1387': attribute type 10 has an invalid length.
[  324.007176][ T8903] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  324.192159][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1389'.
[  324.236977][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  324.963489][ T8923] device vlan2 entered promiscuous mode
[  325.314579][ T8933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  325.349106][ T8935] tipc: Started in network mode
[  325.354747][ T8935] tipc: Node identity ac14142f, cluster identity 4711
[  325.377368][ T8935] tipc: New replicast peer: 0.0.0.0
[  325.433693][ T8935] tipc: Enabled bearer <udp:syz2>, priority 10
[  325.470309][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1400'.
[  325.501760][ T8938] device ip6gre1 entered promiscuous mode
[  325.524569][ T8940] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  325.570639][ T8938] netlink: 'syz.5.1400': attribute type 6 has an invalid length.
[  325.588642][ T8938] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1400'.
[  325.820683][ T8951] loop1: detected capacity change from 0 to 2048
[  326.786441][ T2301] tipc: Node number set to 2886997039
[  327.083613][ T8951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  328.743668][ T5560] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  329.008894][ T5560] usb 6-1: Using ep0 maxpacket: 16
[  329.156274][ T5560] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  329.175609][ T5560] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  329.411566][ T5560] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  329.440772][ T5560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.473204][ T5560] usb 6-1: Product: syz
[  329.477870][ T5560] usb 6-1: Manufacturer: syz
[  329.534768][ T5560] usb 6-1: SerialNumber: syz
[  331.106535][ T5560] usb 6-1: 0:2 : does not exist
[  331.133786][ T5560] usb 6-1: USB disconnect, device number 6
[  331.431710][ T8652] udevd[8652]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  331.972336][ T9041] loop1: detected capacity change from 0 to 128
[  333.198113][ T9041] FAT-fs (loop1): Unrecognized mount option "nfs(A�zy��" or missing value
[  333.467759][ T9055] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1437'.
[  333.483262][ T9055] 0�X���: renamed from caif0
[  333.497897][ T9055] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  333.690543][ T9064] loop1: detected capacity change from 0 to 1024
[  333.748460][ T9064] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  333.820314][ T9064] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  336.628512][ T4232] Bluetooth: hci5: command 0x0406 tx timeout
[  339.071791][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'.
[  339.087961][ T9155] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  339.101159][ T9155] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821)
[  340.289355][ T9165] orangefs_mount: mount request failed with -4
[  340.413934][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1478'.
[  340.722613][ T9197] binder: 9194:9197 ioctl c0306201 200000000440 returned -14
[  340.950932][ T9206] netlink: 'syz.6.1486': attribute type 1 has an invalid length.
[  341.030785][ T9206] device bond1 entered promiscuous mode
[  341.040561][ T9206] 8021q: adding VLAN 0 to HW filter on device bond1
[  341.050952][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1486'.
[  341.135581][ T9211] bond1: (slave bridge3): making interface the new active one
[  341.238147][ T9211] device bridge3 entered promiscuous mode
[  341.270296][ T9211] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  341.289483][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'.
[  341.893067][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  342.455438][ T9235] 9pnet: Insufficient options for proto=fd
[  344.429372][ T9247] overlayfs: failed to clone upperpath
[  348.275619][ T9301] tipc: Started in network mode
[  348.317112][ T9301] tipc: Node identity 2007ff, cluster identity 4711
[  348.549020][ T9301] tipc: Node number set to 2099199
[  348.594423][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1518'.
[  349.159047][ T9315] bridge4: port 1(dummy0) entered blocking state
[  349.534692][ T9315] bridge4: port 1(dummy0) entered disabled state
[  349.561106][ T9323] futex_wake_op: ��O�J�N\�g�� tries to shift op by 144; fix this program
[  349.590408][ T9315] device dummy0 entered promiscuous mode
[  349.746186][ T9328] fuse: Bad value for 'fd'
[  349.890577][ T9336] netlink: 'syz.1.1527': attribute type 21 has an invalid length.
[  349.910041][ T9336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'.
[  350.245749][ T9342] loop5: detected capacity change from 0 to 256
[  350.410992][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  351.695245][ T4232] usb 2-1: Using ep0 maxpacket: 32
[  351.934559][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short
[  352.073959][ T4232] usb 2-1: config 7 has an invalid interface number: 223 but max is 0
[  352.107213][ T4232] usb 2-1: config 7 has no interface number 0
[  352.175542][ T4232] usb 2-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0
[  352.289068][ T4232] usb 2-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  352.325415][ T4232] usb 2-1: config 7 interface 223 has no altsetting 0
[  352.325742][ T9363] loop5: detected capacity change from 0 to 128
[  352.411313][ T9330] bond0: (slave wlan1): Releasing backup interface
[  352.506826][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  352.522019][ T4232] usb 2-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a
[  352.541936][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.543088][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  352.551033][ T4232] usb 2-1: Product: syz
[  352.587223][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  352.599127][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  352.603519][ T4232] usb 2-1: Manufacturer: syz
[  352.608961][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  352.621503][ T4232] usb 2-1: SerialNumber: syz
[  352.623849][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  352.636878][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  352.757198][ T9368] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1545'.
[  352.767565][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1545'.
[  352.893121][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'.
[  352.931319][ T9375] bridge4: port 1(dummy0) entered blocking state
[  352.951331][ T9375] bridge4: port 1(dummy0) entered disabled state
[  352.961979][ T9375] device dummy0 entered promiscuous mode
[  352.990989][ T9377] netlink: 'syz.0.1537': attribute type 10 has an invalid length.
[  353.880602][ T9377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1537'.
[  353.966537][ T9377] bridge4: port 1(dummy0) entered blocking state
[  353.972989][ T9377] bridge4: port 1(dummy0) entered forwarding state
[  354.079012][ T9377] bridge4: port 1(dummy0) entered disabled state
[  354.213679][ T4232] usb 2-1: USB disconnect, device number 6
[  355.907039][ T9412] device bond0 entered promiscuous mode
[  356.615082][ T9424] fuse: Bad value for 'fd'
[  356.679374][ T9423] device syzkaller0 entered promiscuous mode
[  356.748321][ T9429] tipc: Started in network mode
[  356.785369][ T9429] tipc: Node identity 06368e4b3f32, cluster identity 4711
[  356.823685][ T9429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.845024][ T9422] tipc: Resetting bearer <eth:syzkaller0>
[  356.904068][ T9422] tipc: Disabling bearer <eth:syzkaller0>
[  356.913765][ T9435] fuse: Bad value for 'fd'
[  356.920371][ T9433] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  357.020986][ T9442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  357.224273][ T9442] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  357.290972][ T9442] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  357.386220][ T9442] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  357.398180][ T9457] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1558'.
[  357.429651][ T9442] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  357.439952][ T9442] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  358.132733][ T9442] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  358.179233][ T9462] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0
[  358.257953][ T9461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1559'.
[  359.865424][ T9465] loop1: detected capacity change from 0 to 32768
[  360.013704][ T9465] XFS (loop1): Mounting V5 Filesystem
[  360.164468][ T9465] XFS (loop1): Ending clean mount
[  362.086152][ T4192] XFS (loop1): Unmounting Filesystem
[  368.516860][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1581'.
[  372.372023][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'.
[  373.493215][ T9644] netlink: 'syz.1.1603': attribute type 1 has an invalid length.
[  373.664740][ T9644] 8021q: adding VLAN 0 to HW filter on device bond1
[  373.710377][ T9653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.722692][ T9653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.733750][ T9653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.747709][ T9653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.800913][ T9653] bond1: (slave geneve2): making interface the new active one
[  373.834151][ T9653] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  373.854877][ T9652] bridge0: port 3(syz_tun) entered blocking state
[  373.861764][ T9652] bridge0: port 3(syz_tun) entered disabled state
[  373.957567][ T9652] device syz_tun entered promiscuous mode
[  373.996971][ T9652] bridge0: port 3(syz_tun) entered blocking state
[  374.004699][ T9652] bridge0: port 3(syz_tun) entered forwarding state
[  374.066334][ T9655] netlink: 'syz.5.1605': attribute type 8 has an invalid length.
[  374.079358][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  374.111366][ T9664] �����: renamed from virt_wifi0
[  374.240685][ T9668] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1610'.
[  376.300283][ T9698] netlink: 'syz.1.1615': attribute type 4 has an invalid length.
[  376.434200][ T9698] netlink: 'syz.1.1615': attribute type 4 has an invalid length.
[  377.530343][ T9714] netlink: 'syz.5.1620': attribute type 1 has an invalid length.
[  377.570224][ T9714] 8021q: adding VLAN 0 to HW filter on device bond3
[  377.657055][ T9714] bond3: (slave geneve2): making interface the new active one
[  377.675362][ T9714] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  377.688832][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  377.727746][ T9714] syz.5.1620 (9714) used greatest stack depth: 18192 bytes left
[  377.750236][ T9722] �����: renamed from virt_wifi0
[  377.913207][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  377.919597][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  378.352824][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1631'.
[  378.371516][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1631'.
[  380.710217][ T9766] netlink: 'syz.6.1639': attribute type 1 has an invalid length.
[  380.968160][ T9766] 8021q: adding VLAN 0 to HW filter on device bond2
[  382.475235][ T9766] bond2: (slave geneve2): making interface the new active one
[  382.535437][ T9766] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  383.568463][ T9784] tipc: Cannot configure node identity twice
[  383.574623][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  387.186994][ T9806] loop1: detected capacity change from 0 to 2048
[  387.214900][ T9830] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  387.222072][ T9830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  387.274534][ T9806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  387.312993][ T9830] vhci_hcd vhci_hcd.0: Device attached
[  387.520154][ T9840] overlayfs: failed to clone upperpath
[  387.572882][ T9830] tipc: Cannot configure node identity twice
[  387.582108][ T9840] overlayfs: failed to clone upperpath
[  387.593269][ T9831] vhci_hcd: connection closed
[  387.598518][ T7075] vhci_hcd: stop threads
[  387.622967][ T7075] vhci_hcd: release socket
[  387.635829][ T4232] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  387.689155][ T9841] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1658'.
[  388.157755][ T7075] vhci_hcd: disconnect device
[  389.257614][ T9851] tipc: Started in network mode
[  389.294322][ T9851] tipc: Node identity 2007ff, cluster identity 4711
[  389.301725][ T9851] tipc: Node number set to 2099199
[  391.209203][ T9878] sch_fq: defrate 53322 ignored.
[  391.505465][ T9884] netlink: 'syz.0.1674': attribute type 8 has an invalid length.
[  391.562434][ T9890] loop1: detected capacity change from 0 to 64
[  392.895468][ T9907] fuse: Bad value for 'fd'
[  392.950025][ T9899] bond0: mtu less than device minimum
[  393.366997][ T4232] vhci_hcd: vhci_device speed not set
[  395.153348][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1690'.
[  395.242833][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1690'.
[  395.284138][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1690'.
[  395.538824][ T9956] tipc: Started in network mode
[  395.569919][ T9956] tipc: Node identity 2007ff, cluster identity 4711
[  395.578139][ T3561] Dev loop2: unable to read RDB block 7
[  395.592497][ T3561]  loop2: unable to read partition table
[  395.615873][ T3561] loop2: partition table beyond EOD, truncated
[  395.624801][ T9956] tipc: Node number set to 2099199
[  397.534118][ T9980] loop1: detected capacity change from 0 to 64
[  397.690595][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'.
[  397.763427][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.925024][ T7064] bond0: (slave gretap0): link status definitely down, disabling slave
[  397.968020][ T7064] bond0: now running without any active interface!
[  399.139242][T10004] loop5: detected capacity change from 0 to 736
[  399.527389][T10017] x_tables: duplicate underflow at hook 2
[  399.735797][T10026] capability: warning: `syz.5.1714' uses deprecated v2 capabilities in a way that may be insecure
[  402.196211][T10031] loop5: detected capacity change from 0 to 64
[  403.882658][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'.
[  404.070724][T10031] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  408.295410][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1733'.
[  409.741777][T10082] device bond0 left promiscuous mode
[  409.777708][T10082] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.797322][T10082] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.814065][T10082] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.823510][T10082] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.301822][T10106] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1739'.
[  414.138995][T10157] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1752'.
[  418.172203][T10171] netlink: 'syz.6.1757': attribute type 1 has an invalid length.
[  418.328622][T10171] device bond3 entered promiscuous mode
[  418.371320][T10171] 8021q: adding VLAN 0 to HW filter on device bond3
[  419.444100][T10178] bond3: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  419.489398][T10178] bond3: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  419.527975][T10178] bond3: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  419.599393][ T4235] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  419.684799][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'.
[  420.019531][ T4235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.081439][ T4235] usb 2-1: config 0 has no interfaces?
[  420.087535][ T4235] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  420.199239][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.217819][T10210] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1772'.
[  420.264644][ T4235] usb 2-1: config 0 descriptor??
[  420.692412][   T21] usb 2-1: USB disconnect, device number 7
[  420.894952][T10234] x_tables: unsorted underflow at hook 4
[  427.973401][T10313] No such timeout policy "syz1"
[  430.415222][   T25] audit: type=1804 audit(1779977854.981:91): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1811" name="file0" dev="hugetlbfs" ino=53050 res=1 errno=0
[  431.328245][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'.
[  431.369959][   T25] audit: type=1804 audit(1779977855.931:92): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1811" name="file0" dev="hugetlbfs" ino=53050 res=1 errno=0
[  436.271388][T10395] netlink: 'syz.0.1828': attribute type 4 has an invalid length.
[  436.341981][T10395] netlink: 'syz.0.1828': attribute type 4 has an invalid length.
[  437.774975][T10411] netlink: 'syz.1.1833': attribute type 1 has an invalid length.
[  437.877466][T10411] device bond2 entered promiscuous mode
[  438.001795][T10411] 8021q: adding VLAN 0 to HW filter on device bond2
[  438.041297][T10413] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  438.053860][T10413] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  438.090053][T10413] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  438.491519][   T25] audit: type=1326 audit(1779977863.061:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.5.1835" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca17e94e59 code=0x0
[  439.848854][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  439.855178][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  442.933942][T10460] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1850'.
[  442.952524][T10461] loop5: detected capacity change from 0 to 512
[  443.447820][T10461] EXT4-fs (loop5): Unrecognized mount option "euid>00000000000000000000" or missing value
[  444.188938][T10467] netlink: 798 bytes leftover after parsing attributes in process `syz.0.1853'.
[  444.873973][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'.
[  445.438808][ T7568] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  445.689648][ T7568] usb 2-1: Using ep0 maxpacket: 8
[  445.832841][ T7568] usb 2-1: unable to get BOS descriptor or descriptor too short
[  445.904192][ T7568] usb 2-1: unable to read config index 0 descriptor/start: -71
[  445.928600][ T7568] usb 2-1: can't read configurations, error -71
[  448.101499][T10526] loop1: detected capacity change from 0 to 512
[  448.172831][T10526] EXT4-fs (loop1): Unrecognized mount option "euid>00000000000000000000" or missing value
[  451.225695][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1884'.
[  451.522138][T10571] device veth0_to_bond entered promiscuous mode
[  453.802045][T10621] loop5: detected capacity change from 0 to 512
[  453.959043][T10621] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  454.016519][T10621] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.692031][T10641] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  455.713951][T10641] tipc: Enabled bearer <udp:syz0>, priority 10
[  456.001577][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1906'.
[  456.069911][T10647] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  456.158202][T10647] overlayfs: failed to look up (tracing) for ino (-66)
[  456.176594][T10654] netlink: 'syz.5.1900': attribute type 1 has an invalid length.
[  456.264975][T10654] device bond4 entered promiscuous mode
[  456.279102][T10654] 8021q: adding VLAN 0 to HW filter on device bond4
[  456.343896][T10660] bridge0: Device is already in use.
[  456.464558][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'.
[  459.449986][T10706] smc: net device ip6_vti0 applied user defined pnetid SYZ2
[  460.117348][T10706] loop1: detected capacity change from 0 to 764
[  461.972352][T10741] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4457] was attempted by "$x`vO�x�H`���CBn܀��y��>
b�w��x\x1bL5? Cݭ8`d�����Jg�39T��&�tWCm�<��\x1bRby� Vq�/��\x5cDw,XT,�W�[es�����\x0d1�\x07�^���|�;d�g8 �꥛~�u�}G��g6W]�M��þlxM�=�M�h\x09�5�$�Z���EO�1Jc��&�O�P�5y9\x0dNi�I�<��5�Ў��d\x22�T*��˘s�x)��
�ʯ\x22v:���|M\x0a�
����)\x0b�ꋻwRI� �����;�H�P?Lt�M[w̲S�7�&�Q瑃����Y�=N�ݝ�\x22��߆FS�B�Ҙ�Rx�9ʼnR_4�~}�e���}x�b�H\x0d��%DŽޑR�]�cÂ��x�8�m�5'y��Z�x��^M���y=:�:�UVvҼb�8��s\x0d0�c���A�L��=���;��k��[i��qK�g��@�8�Z\x22&�iy?��m9���d���<5�]�p2w����A��1�Ȧ4qLctG�9N��_f2so�p�)�^��FISn08�a��S�*Ē�rX��\x1b/\x22`�W�rwr\x22�!7��X�~���Ӱ���D�Ep��7�e�h�Nk�2I�s
��,>r_<�-�!�}��jnW8-�l�e�Ú�Q���Œ6Dg�fr�Z�!�V\x0b�����*���>����ħk?p>n�U���`I�����W�� ����\x1b��D��6��������\x5cj����v��(���=�}t�x�p:�Ԑ�ގ�_����ս�<‹('���(tc�(����#2�o�ڏ0x���Y4W�.v��oD�S�\x0cX濩�V�,�5a#zkP�d���0a.
[  462.029563][T10749] xt_CT: No such helper "syz1"
[  463.360270][T10784] xt_CT: No such helper "snmp_trap"
[  464.892608][T10805] binder: BINDER_SET_CONTEXT_MGR already set
[  464.930101][T10805] binder: 10804:10805 ioctl 4018620d 200000004a80 returned -16
[  465.285800][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  467.505588][T10848] binder: BC_ACQUIRE_RESULT not supported
[  467.513423][T10848] binder: 10847:10848 ioctl c0306201 200000000240 returned -22
[  467.526850][T10848] loop1: detected capacity change from 0 to 128
[  467.845984][T10855] device ipip0 entered promiscuous mode
[  468.084261][   T25] audit: type=1804 audit(1779977892.641:94): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1959" name="bus" dev="ramfs" ino=54189 res=1 errno=0
[  468.106496][   T25] audit: type=1804 audit(1779977892.661:95): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1959" name="bus" dev="ramfs" ino=54189 res=1 errno=0
[  468.117319][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'.
[  468.574909][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'.
[  471.121618][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  471.530553][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  471.549672][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  471.557230][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  472.128083][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  472.192622][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  472.229060][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  472.237708][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  473.321894][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  473.390336][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  473.452549][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  473.476218][T10866] device bond0 left promiscuous mode
[  473.492310][T10866] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.503643][T10866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  473.529298][T10894] netlink: 'syz.0.1969': attribute type 1 has an invalid length.
[  473.537794][T10894] netlink: 'syz.0.1969': attribute type 4 has an invalid length.
[  473.581790][T10894] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1969'.
[  473.901683][ T4195] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  474.318812][ T4195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  474.334274][ T4195] usb 2-1: config 0 has no interfaces?
[  474.346672][ T4195] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  474.366868][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.817109][ T4195] usb 2-1: config 0 descriptor??
[  477.426119][   T13] usb 2-1: USB disconnect, device number 10
[  477.704096][   T25] audit: type=1800 audit(1779977902.271:96): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1985" name="/" dev="fuse" ino=1 res=0 errno=0
[  477.918694][T10970] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  479.501465][T10984] loop1: detected capacity change from 0 to 2048
[  479.624935][T10989] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  480.057207][T11000] xt_hashlimit: size too large, truncated to 1048576
[  480.139314][T11000] xt_hashlimit: invalid rate
[  483.183285][T11045] loop1: detected capacity change from 0 to 16
[  483.262652][T11045] erofs: (device loop1): mounted with root inode @ nid 36.
[  484.106296][T11045] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  484.236084][T11045] attempt to access beyond end of device
[  484.236084][T11045] loop1: rw=0, want=304, limit=16
[  484.309174][T11045] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  485.262206][T11064] loop5: detected capacity change from 0 to 512
[  485.340066][T11064] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  485.389681][T11064] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  485.591257][T11064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  485.614288][T11064] System zones: 1-12
[  486.064852][T11064] EXT4-fs (loop5): orphan cleanup on readonly fs
[  486.557281][T11064] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33619980: comm syz.5.2013: invalid block
[  486.815055][T11064] EXT4-fs (loop5): Remounting filesystem read-only
[  487.508622][T11064] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2013: invalid indirect mapped block 2 (level 2)
[  487.727340][T11064] EXT4-fs (loop5): Remounting filesystem read-only
[  488.320601][T11097] Invalid ELF header magic: != ELF
[  488.349484][T11064] EXT4-fs (loop5): 1 truncate cleaned up
[  488.355307][T11064] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback.
[  488.747955][T11111] xt_connbytes: Forcing CT accounting to be enabled
[  489.271043][T11111] xt_CT: No such helper "netbios-ns"
[  490.744403][T11142] syz.5.2035 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  491.006798][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'.
[  491.092672][T11144] netlink: 'syz.5.2036': attribute type 10 has an invalid length.
[  491.148411][T11144] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  491.311900][T11154] loop5: detected capacity change from 0 to 512
[  491.438085][T11154] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  492.124325][T11154] EXT4-fs (loop5): 1 truncate cleaned up
[  492.154679][T11154] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  500.818935][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  500.825876][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  502.619194][T11295] trusted_key: encrypted_key: master key parameter '��|�{E' is invalid
[  503.159294][T11292] loop5: detected capacity change from 0 to 4096
[  503.802734][T11292] EXT4-fs (loop5): Unrecognized mount option "fsuuid=d
�b" or missing value
[  507.859978][T11373] cgroup2: Unexpected value for 'memory_localevents'
[  507.907430][T11373] loop5: detected capacity change from 0 to 256
[  508.041220][T11373] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  508.150263][   T25] audit: type=1804 audit(1779977932.711:97): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2095" name="/newroot/303/file0/bus" dev="loop5" ino=1048639 res=1 errno=0
[  516.409040][   T25] audit: type=1800 audit(1779977940.971:98): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2121" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  520.567869][   T25] audit: type=1326 audit(1779977945.131:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11516 comm="syz.0.2135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7110b02e59 code=0x0
[  520.901130][T11527] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  523.805496][T11543] loop5: detected capacity change from 0 to 512
[  523.909314][T11543] FAT-fs (loop5): Unrecognized mount option "/dev/comedi5" or missing value
[  524.076555][T11557] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  524.076555][T11557] The task syz.5.2142 (11557) triggered the difference, watch for misbehavior.
[  524.172307][T11559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.664660][T11568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.768596][T11568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.834030][T11573] bridge0: port 1(erspan0) entered blocking state
[  524.889134][T11573] bridge0: port 1(erspan0) entered disabled state
[  524.943994][T11573] device erspan0 entered promiscuous mode
[  524.990319][T11573] bridge0: port 1(erspan0) entered blocking state
[  524.996829][T11573] bridge0: port 1(erspan0) entered forwarding state
[  525.074032][T11576] device erspan0 left promiscuous mode
[  525.094774][T11576] bridge0: port 1(erspan0) entered disabled state
[  525.180781][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'.
[  525.353608][T11580] 8021q: adding VLAN 0 to HW filter on device bond7
[  525.541442][T11581] device bond7 entered promiscuous mode
[  525.601567][T11581] 8021q: adding VLAN 0 to HW filter on device bond7
[  525.620732][   T25] audit: type=1800 audit(1779977950.191:100): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2149" name="bus" dev="ramfs" ino=55172 res=0 errno=0
[  525.689378][T11581] team0: Port device bond7 added
[  525.780807][T11582] device team_slave_1 entered promiscuous mode
[  525.879568][T11582] bond7: (slave team_slave_1): Enslaving as an active interface with an up link
[  525.933082][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  526.108360][ T4234] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  526.152875][T11599] tipc: Failed to remove unknown binding: 66,0,0/2099199:3810254735/3810254737
[  526.161995][T11599] tipc: Failed to remove unknown binding: 66,0,0/2099199:3810254735/3810254736
[  526.177803][T11599] tipc: Failed to remove unknown binding: 66,0,0/2099199:3810254735/3810254737
[  526.186885][T11599] tipc: Failed to remove unknown binding: 66,0,0/2099199:3810254735/3810254736
[  526.267723][   T25] audit: type=1326 audit(1779977950.831:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.0.2160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7110b02e59 code=0x0
[  527.390864][ T4234] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  527.408631][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.417449][ T4234] usb 6-1: Product: syz
[  527.453105][ T4234] usb 6-1: Manufacturer: syz
[  527.497239][ T4234] usb 6-1: SerialNumber: syz
[  528.822058][ T4234] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  529.243053][ T7568] usb 6-1: USB disconnect, device number 7
[  529.301048][ T7568] usblp0: removed
[  529.466292][T11653] device syzkaller0 entered promiscuous mode
[  531.206642][T11669] netlink: 'syz.1.2190': attribute type 10 has an invalid length.
[  533.342326][T11683] loop5: detected capacity change from 0 to 128
[  533.504036][T11683] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  533.561443][T11683] hpfs: filesystem error: improperly stopped
[  533.608173][T11683] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  533.651573][T11690] device bridge6 entered promiscuous mode
[  533.671543][T11683] hpfs: You really don't want any checks? You are crazy...
[  533.707462][T11683] hpfs: hpfs_map_sector(): read error
[  534.283998][T11683] hpfs: code page support is disabled
[  534.328735][T11683] hpfs: hpfs_map_4sectors(): unaligned read
[  534.354738][T11683] hpfs: hpfs_map_4sectors(): unaligned read
[  534.395723][T11683] hpfs: filesystem error: unable to find root dir
[  639.588183][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  639.595197][    C1] rcu: 	0-...!: (64 ticks this GP) idle=e8d/1/0x4000000000000000 softirq=30214/30214 fqs=5 
[  639.606990][    C1] 	(detected by 1, t=10502 jiffies, g=45845, q=237)
[  639.613603][    C1] Sending NMI from CPU 1 to CPUs 0:
[  639.618819][    C0] NMI backtrace for cpu 0
[  639.618835][    C0] CPU: 0 PID: 11703 Comm: syz.0.2193 Not tainted syzkaller #0
[  639.618877][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  639.618892][    C0] RIP: 0010:kasan_check_range+0x62/0x290
[  639.619057][    C0] Code: 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 49 c1 e9 03 4b 8d 1c 21 <49> 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c
[  639.619100][    C0] RSP: 0018:ffffc900000078d0 EFLAGS: 00000803
[  639.619144][    C0] RAX: 0000000000000001 RBX: fffffbfff203ac1a RCX: ffffffff815d1c7a
[  639.619156][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d60c8
[  639.619166][    C0] RBP: ffffc90000007b50 R08: ffffffff901d60cf R09: 1ffffffff203ac19
[  639.619178][    C0] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: dffffc0000000001
[  639.619189][    C0] R13: 0000000000000008 R14: 1ffffffff203ac19 R15: ffff8880561ae430
[  639.619200][    C0] FS:  00007f710ed3b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  639.619215][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  639.619226][    C0] CR2: 00007f7110b50540 CR3: 0000000078426000 CR4: 00000000003506f0
[  639.619241][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  639.619250][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  639.619260][    C0] Call Trace:
[  639.619291][    C0]  <IRQ>
[  639.619325][    C0]  __lock_acquire+0x52a/0x7d10
[  639.619406][    C0]  ? __lock_acquire+0x13bc/0x7d10
[  639.619427][    C0]  ? verify_lock_unused+0x140/0x140
[  639.619443][    C0]  ? mark_lock+0x94/0x320
[  639.619456][    C0]  ? verify_lock_unused+0x140/0x140
[  639.619485][    C0]  lock_acquire+0x19e/0x400
[  639.619500][    C0]  ? __hrtimer_run_queues+0x5a9/0xb70
[  639.619566][    C0]  ? read_lock_is_recursive+0x10/0x10
[  639.619582][    C0]  ? __rwlock_init+0x140/0x140
[  639.619600][    C0]  _raw_spin_lock_irq+0xab/0xf0
[  639.619647][    C0]  ? __hrtimer_run_queues+0x5a9/0xb70
[  639.619663][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  639.619681][    C0]  __hrtimer_run_queues+0x5a9/0xb70
[  639.619704][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  639.619720][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  639.619738][    C0]  hrtimer_interrupt+0x3bb/0x8d0
[  639.619762][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  639.619803][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  639.619851][    C0]  </IRQ>
[  639.619856][    C0]  <TASK>
[  639.619892][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  639.619931][    C0] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  639.619956][    C0] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  639.619968][    C0] RSP: 0018:ffffc90003327a60 EFLAGS: 00040202
[  639.619982][    C0] RAX: ffffffff83e40801 RBX: 0000000000000038 RCX: 0000000000000007
[  639.619992][    C0] RDX: 0000000000000000 RSI: 0000200000339000 RDI: ffffc90003327b00
[  639.620002][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 1ffff92000664f66
[  639.620012][    C0] R10: dffffc0000000000 R11: fffff52000664f67 R12: 00007ffffffff000
[  639.620023][    C0] R13: 0000200000339038 R14: ffffc90003327b00 R15: 0000200000339000
[  639.620037][    C0]  ? _copy_from_user+0xd1/0x170
[  639.620096][    C0]  _copy_from_user+0xfa/0x170
[  639.620111][    C0]  ___sys_recvmsg+0x173/0x5c0
[  639.620180][    C0]  ? __sys_recvmsg+0x280/0x280
[  639.620203][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  639.620220][    C0]  ? do_recvmmsg+0x39a/0x850
[  639.620236][    C0]  ? __might_fault+0xb3/0x110
[  639.620277][    C0]  do_recvmmsg+0x382/0x850
[  639.620296][    C0]  ? __sys_recvmmsg+0x290/0x290
[  639.620318][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  639.620337][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  639.620355][    C0]  ? do_recvmmsg+0x850/0x850
[  639.620372][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  639.620389][    C0]  do_syscall_64+0x4c/0xa0
[  639.620403][    C0]  ? clear_bhb_loop+0x30/0x80
[  639.620416][    C0]  ? clear_bhb_loop+0x30/0x80
[  639.620431][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  639.620446][    C0] RIP: 0033:0x7f7110b02e59
[  639.620463][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.620476][    C0] RSP: 002b:00007f710ed3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  639.620491][    C0] RAX: ffffffffffffffda RBX: 00007f7110d7c090 RCX: 00007f7110b02e59
[  639.620502][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  639.620512][    C0] RBP: 00007f7110b98d6f R08: 0000000000000000 R09: 0000000000000000
[  639.620522][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  639.620532][    C0] R13: 00007f7110d7c128 R14: 00007f7110d7c090 R15: 00007fffde918ce8
[  639.620547][    C0]  </TASK>
[  639.620807][    C1] rcu: rcu_preempt kthread starved for 10408 jiffies! g45845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  640.103303][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  640.113268][    C1] rcu: RCU grace-period kthread stack dump:
[  640.119146][    C1] task:rcu_preempt     state:R  running task     stack:28016 pid:   15 ppid:     2 flags:0x00004000
[  640.129924][    C1] Call Trace:
[  640.133197][    C1]  <TASK>
[  640.136126][    C1]  __schedule+0x11ef/0x43c0
[  640.140646][    C1]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  640.146113][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  640.151312][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  640.157208][    C1]  ? _raw_spin_unlock+0x40/0x40
[  640.162054][    C1]  ? release_firmware_map_entry+0x190/0x190
[  640.167950][    C1]  ? __mod_timer+0x91e/0xd00
[  640.172554][    C1]  schedule+0x11b/0x1e0
[  640.176707][    C1]  schedule_timeout+0x184/0x2d0
[  640.181551][    C1]  ? console_conditional_schedule+0x40/0x40
[  640.187443][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  640.193330][    C1]  ? update_process_times+0x200/0x200
[  640.198709][    C1]  ? prepare_to_swait_event+0x331/0x350
[  640.204352][    C1]  rcu_gp_fqs_loop+0x2be/0x11d0
[  640.209252][    C1]  ? dyntick_save_progress_counter+0x230/0x230
[  640.215428][    C1]  ? rcu_gp_init+0x10f0/0x10f0
[  640.220205][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  640.225414][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  640.230621][    C1]  rcu_gp_kthread+0x9b/0x370
[  640.235212][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  640.241105][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  640.246217][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  640.252111][    C1]  ? __kthread_parkme+0x157/0x1b0
[  640.257224][    C1]  kthread+0x436/0x520
[  640.261289][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  640.266394][    C1]  ? kthread_blkcg+0xd0/0xd0
[  640.270989][    C1]  ret_from_fork+0x1f/0x30
[  640.275443][    C1]  </TASK>
[  640.278458][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  640.284774][    C1] NMI backtrace for cpu 1
[  640.289092][    C1] CPU: 1 PID: 11711 Comm: syz.1.2194 Not tainted syzkaller #0
[  640.296542][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  640.306594][    C1] Call Trace:
[  640.309872][    C1]  <IRQ>
[  640.312711][    C1]  dump_stack_lvl+0x188/0x250
[  640.317434][    C1]  ? show_regs_print_info+0x20/0x20
[  640.322628][    C1]  ? load_image+0x400/0x400
[  640.327137][    C1]  ? irq_work_queue+0xbf/0x140
[  640.331989][    C1]  nmi_cpu_backtrace+0x3a2/0x3d0
[  640.336971][    C1]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  640.343121][    C1]  ? _printk+0xda/0x130
[  640.347275][    C1]  ? cpu_online+0x1d/0x30
[  640.351605][    C1]  ? load_image+0x400/0x400
[  640.356109][    C1]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  640.362186][    C1]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  640.368216][    C1]  rcu_check_gp_kthread_starvation+0x1cd/0x250
[  640.374380][    C1]  print_other_cpu_stall+0x1110/0x1270
[  640.379851][    C1]  ? print_cpu_stall+0x5f0/0x5f0
[  640.384784][    C1]  ? timekeeping_advance+0x7f6/0xac0
[  640.390069][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  640.395102][    C1]  rcu_sched_clock_irq+0x843/0x1120
[  640.400303][    C1]  ? rcutree_dead_cpu+0x20/0x20
[  640.405156][    C1]  ? account_process_tick+0x22a/0x3a0
[  640.410601][    C1]  update_process_times+0x193/0x200
[  640.415806][    C1]  tick_sched_timer+0x37d/0x560
[  640.420695][    C1]  ? tick_setup_sched_timer+0x2c0/0x2c0
[  640.426238][    C1]  __hrtimer_run_queues+0x4b4/0xb70
[  640.431455][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
[  640.436565][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  640.442634][    C1]  hrtimer_interrupt+0x3bb/0x8d0
[  640.447597][    C1]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  640.453576][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  640.459210][    C1]  </IRQ>
[  640.462136][    C1]  <TASK>
[  640.465063][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  640.471042][    C1] RIP: 0010:smp_call_function_many_cond+0xbb5/0xd90
[  640.477691][    C1] Code: b6 44 05 00 84 c0 0f 85 9d 00 00 00 41 8b 1c 24 89 de 83 e6 01 31 ff e8 d9 62 0b 00 83 e3 01 75 07 e8 6f 5f 0b 00 eb 43 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 11 41 f7
[  640.497293][    C1] RSP: 0018:ffffc9000315fae0 EFLAGS: 00000246
[  640.503357][    C1] RAX: ffffffff816dd6c8 RBX: 0000000000000001 RCX: 0000000000080000
[  640.511332][    C1] RDX: ffffc9000eded000 RSI: 000000000007ffff RDI: 0000000000080000
[  640.519302][    C1] RBP: ffffc9000315fc10 R08: ffff8880b913b3d7 R09: 1ffff1101722767a
[  640.527272][    C1] R10: dffffc0000000000 R11: ffffed101722767b R12: ffff8880b9042848
[  640.535249][    C1] R13: 1ffff11017208509 R14: ffff8880b913b3c0 R15: 0000000000000000
[  640.543229][    C1]  ? smp_call_function_many_cond+0xbd8/0xd90
[  640.549234][    C1]  ? clock_was_set+0x850/0x850
[  640.554000][    C1]  ? smp_call_function_many+0x30/0x30
[  640.559400][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  640.565289][    C1]  ? _raw_spin_unlock+0x40/0x40
[  640.570139][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  640.576212][    C1]  clock_was_set+0x781/0x850
[  640.580810][    C1]  ? destroy_hrtimer_on_stack+0x20/0x20
[  640.586352][    C1]  ? memcpy+0x3c/0x60
[  640.590335][    C1]  ? timekeeping_update+0x3ec/0x460
[  640.595537][    C1]  do_settimeofday64+0x5b6/0x760
[  640.600476][    C1]  ? ebt_among_mt+0xbc7/0x2130
[  640.605311][    C1]  ? __x64_sys_clock_settime+0x25a/0x2a0
[  640.610943][    C1]  ? get_device_system_crosststamp+0x900/0x900
[  640.617095][    C1]  ? ebt_among_mt+0xbc7/0x2130
[  640.621858][    C1]  ? security_settime64+0x77/0x90
[  640.626953][    C1]  ? do_sys_settimeofday64+0x15f/0x250
[  640.632415][    C1]  __x64_sys_clock_settime+0x25a/0x2a0
[  640.637872][    C1]  ? lock_chain_count+0x20/0x20
[  640.642723][    C1]  ? exit_itimers+0x560/0x560
[  640.647408][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  640.652613][    C1]  do_syscall_64+0x4c/0xa0
[  640.657025][    C1]  ? clear_bhb_loop+0x30/0x80
[  640.661700][    C1]  ? clear_bhb_loop+0x30/0x80
[  640.666387][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  640.672299][    C1] RIP: 0033:0x7f33c8635e59
[  640.676716][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.696326][    C1] RSP: 002b:00007f33c686e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[  640.704739][    C1] RAX: ffffffffffffffda RBX: 00007f33c88af090 RCX: 00007f33c8635e59
[  640.712705][    C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  640.720683][    C1] RBP: 00007f33c86cbd6f R08: 0000000000000000 R09: 0000000000000000
[  640.728660][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  640.736632][    C1] R13: 00007f33c88af128 R14: 00007f33c88af090 R15: 00007ffd2e9337c8
[  640.744620][    C1]  </TASK>